Content Security Policy Manager

Hello,

Since report-uri is no longer recommended anymore, I need to use report-to to send CSP reports. But for reason, it doesn’t send reports with report-to. My CSP settings are as follows:

In Policy: report-to filed, I filled in csp-endpoint , in Frontend Policy Report-To Header field, I filled in the following JSON data

{
  "group": "csp-endpoint",
  "max_age": 10886400,
  "endpoints": [
    {
      "url": "{CSP REPORT ENDPOINT}"
    }
  ]
}

After saving changes in the CMS, all the commas disappeared in Frontend Policy Report-To Header field.

{   "group": "csp-endpoint"   "max_age": 10886400   "endpoints": [     {       "url": "{CSP REPORT ENDPOINT}"     }   ] }

I am wondering if you can help to take a look at it, thanks! Note: I have no problem with report-uri.

• This topic was modified 2 years, 8 months ago by ningmorris.

As soon as I leave the backend the view of my side is without any CSS. Only the plain HTML.

We are really happy with this plugin.
im wondering if you provide a filter so i can merge some dynamic ‘nonce-xx’ to the policy header. this could be very very useful.

This plugin is well thought out and does what I need it to. It has also helped me troubleshoot other website’s CSP that wasn’t working correctly, and the documentation is solid if brief.

Ce plugin m;a fait gagner des heures de travail.