Intro to CSP report-to and report-URI HTTP headers
kevinpatel.xyz
Intro to CSP report-to and report-URI HTTP headers
1–3 of 3 posts
Re: Intro to CSP report-to and report-URI HTTP headers
#2I have a strict CSP with report-URI on my blog, but all the reports I get are from obscure browser extensions injecting CSS and JS into my pages.
Re: Intro to CSP report-to and report-URI HTTP headers
#3I have a strict CSP with report-URI on my blog, but all the reports I get are from obscure browser extensions injecting CSS and JS into my pages.
Yes that is one thing I have learned that there can be a lot of noise from these CSP violation reports.
I have found that setting up some alerts for particular resources seems to help suppress some of the noise.