-
Notifications
You must be signed in to change notification settings - Fork 0
Header: Content Security Policy Report Only
Ryan Parman edited this page Jun 14, 2024
·
3 revisions
The Content-Security-Policy-Report-Only HTTP response header is the testing (or report-only) version of the Content-Security-Policy header, which allows you to test and see reports before switching to enforcement mode.
Content licensed under CC BY-SA.
- 🧪 Experimental, with limited support
⚠️ Important notes on usage- 🚫 Deprecated or obsolete
- base-uri
- block-all-mixed-content 🚫
- child-src
- connect-src
- default-src
- fenced-frame-src 🧪
- font-src
- form-action
- frame-ancestors
- frame-src
- img-src
- manifest-src
- media-src
- navigate-to 🚫
- object-src
- plugin-types 🚫
- prefetch-src 🚫
- referrer 🚫
- report-to 🧪
-
report-uri
⚠️ - require-trusted-types-for 🧪
- sandbox
- script-src-attr
- script-src-elem
- script-src
- style-src-attr
- style-src-elem
- style-src
- trusted-types 🧪
- upgrade-insecure-requests
- webrtc
- worker-src