Content Security Bot

CSP Violation Reports

Legacy csp-report

{
  "csp-report": {
    "document-uri": "https://example.test/page",
    "referrer": "",
    "violated-directive": "script-src",
    "effective-directive": "script-src",
    "original-policy": "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self';",
    "blocked-uri": "https://www.googletagmanager.com/gtm.js?id=GTM-XXXX",
    "source-file": "https://example.test/assets/app.js",
    "line-number": 42,
    "column-number": 13,
    "script-sample": "gtag('config', 'UA-XXXX');"
  }
}

{
  "csp-report": {
    "document-uri": "https://example.test/contact",
    "referrer": "",
    "violated-directive": "style-src",
    "effective-directive": "style-src",
    "original-policy": "default-src 'none'; style-src 'self'; img-src 'self';",
    "blocked-uri": "inline",
    "source-file": "https://example.test/assets/styles.css",
    "line-number": 10,
    "column-number": 5,
    "script-sample": ""
  }
}

{
  "csp-report": {
    "document-uri": "https://example.test/blog/post",
    "referrer": "",
    "violated-directive": "img-src",
    "effective-directive": "img-src",
    "original-policy": "default-src 'none'; img-src 'self';",
    "blocked-uri": "data",
    "source-file": "https://example.test/assets/post.html",
    "line-number": 88,
    "column-number": 20,
    "script-sample": ""
  }
}

{
  "csp-report": {
    "document-uri": "https://example.test/app",
    "referrer": "",
    "violated-directive": "connect-src",
    "effective-directive": "connect-src",
    "original-policy": "default-src 'none'; connect-src 'self';",
    "blocked-uri": "https://api.thirdparty.com/v1/track",
    "source-file": "https://example.test/assets/app.js",
    "line-number": 200,
    "column-number": 9,
    "script-sample": "fetch('https://api.thirdparty.com/v1/track')"
  }
}

{
  "csp-report": {
    "document-uri": "https://example.test/checkout",
    "referrer": "",
    "violated-directive": "frame-src",
    "effective-directive": "frame-src",
    "original-policy": "default-src 'none'; frame-src 'self';",
    "blocked-uri": "https://www.youtube.com/embed/XXXX",
    "source-file": "https://example.test/assets/checkout.js",
    "line-number": 12,
    "column-number": 3,
    "script-sample": ""
  }
}

Reporting API (application/reports+json)

[
  {
    "age": 0,
    "type": "csp-violation",
    "url": "https://example.test/",
    "user_agent": "Mozilla/5.0",
    "body": {
      "disposition": "report",
      "effective-directive": "script-src",
      "violated-directive": "script-src",
      "blocked-uri": "https://www.googletagmanager.com/gtm.js?id=GTM-XXXX",
      "original-policy": "default-src 'none'; script-src 'self';"
    }
  },
  {
    "age": 0,
    "type": "csp-violation",
    "url": "https://example.test/contact",
    "user_agent": "Mozilla/5.0",
    "body": {
      "disposition": "report",
      "effective-directive": "style-src",
      "violated-directive": "style-src",
      "blocked-uri": "inline",
      "original-policy": "default-src 'none'; style-src 'self';",
      "sample": "element { color:red }"
    }
  },
  {
    "age": 0,
    "type": "csp-violation",
    "url": "https://example.test/blog/post",
    "user_agent": "Mozilla/5.0",
    "body": {
      "disposition": "report",
      "effective-directive": "img-src",
      "violated-directive": "img-src",
      "blocked-uri": "data",
      "original-policy": "default-src 'none'; img-src 'self';"
    }
  },
  {
    "age": 0,
    "type": "csp-violation",
    "url": "https://example.test/app",
    "user_agent": "Mozilla/5.0",
    "body": {
      "disposition": "report",
      "effective-directive": "connect-src",
      "violated-directive": "connect-src",
      "blocked-uri": "https://api.thirdparty.com/v1/track",
      "original-policy": "default-src 'none'; connect-src 'self';"
    }
  },
  {
    "age": 0,
    "type": "csp-violation",
    "url": "https://example.test/checkout",
    "user_agent": "Mozilla/5.0",
    "body": {
      "disposition": "report",
      "effective-directive": "frame-src",
      "violated-directive": "frame-src",
      "blocked-uri": "https://www.youtube.com/embed/XXXX",
      "original-policy": "default-src 'none'; frame-src 'self';"
    }
  }
]