New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CSP Report-uri deprecated, replaced by report-to #512

Open

martindaehn23 opened this issue Oct 5, 2023 · 0 comments

martindaehn23 commented Oct 5, 2023 •

edited

Adding a new CSP directive

Report-uri seems to be depricated: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/report-uri
Instead we want to use both, report-uri and report-to, to be future proof and backward compatible.

Is the directive supported by any user agent? If so, which?
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/report-to

Chrome
Edge
Opera

What does it do?
Used to substitute report-uri.
What are the valid values for the directive?
Content-Security-Policy: report-to ;

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment