Web Security · Middle · Question 22 of 75

How do you collect CSP violation reports?

✓Correct answer: Use the report-to directive (with a Reporting-Endpoints header) or the older report-uri
2Browsers send them to the CA that issued the certificate
3Read them from console.log on the server

Explanation

Reports show which resources were blocked and on which page. Browser extensions create noise, so filter before alerting.

Further reading

Test yourself

Take the Web Security · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.