Skip to content

Intro to CSP report-to and report-URI HTTP headers

kevinpatel.xyz
3 pointsalligatorplum2 comments
On HN

Comments

I have a strict CSP with report-URI on my blog, but all the reports I get are from obscure browser extensions injecting CSS and JS into my pages.

Yes that is one thing I have learned that there can be a lot of noise from these CSP violation reports. I have found that setting up some alerts for particular resources seems to help suppress some of the noise.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.