Web Security · Senior · Question 18 of 75
What is a good way to handle CSP violation reports at scale?
- 1Disable reporting because it's too noisy
- 2Email every report to the whole team
- ✓Correct answer: Collect them at a dedicated endpoint, deduplicate by directive and blocked URL, and filter out extension noise
Explanation
Reports from browser extensions and injected adware are common. Grouping helps spot real regressions or attack attempts.