Intro to CSP report-to and report-URI HTTP headers (opens in new tab)

(kevinpatel.xyz)

3 pointsalligatorplum1y ago2 comments

2 comments

I have a strict CSP with report-URI on my blog, but all the reports I get are from obscure browser extensions injecting CSS and JS into my pages.

alligatorplumOP1y ago

Yes that is one thing I have learned that there can be a lot of noise from these CSP violation reports. I have found that setting up some alerts for particular resources seems to help suppress some of the noise.

j / k navigate · click thread line to collapse

2 comments

theandrewbailey1y ago

I have a strict CSP with report-URI on my blog, but all the reports I get are from obscure browser extensions injecting CSS and JS into my pages.

alligatorplumOP1y ago

j / k navigate · click thread line to collapse