report-to - HTTP 编辑

Report-To HTTP响应头部指示客户端存储特定域名的报告端点。

Content-Security-Policy: ...; report-to groupname

该指令本身没有任何影响，仅与其他指令结合起来才有意义。

Syntax

Content-Security-Policy: report-to <json-field-value>;

Examples

可以查看Content-Security-Policy-Report-Only获取更多信息和示例。

Report-To: { "group": "csp-endpoint",
             "max-age": 10886400,
             "endpoints": [
               { "url": "https://example.com/csp-reports" }
             ] },
           { "group": "hpkp-endpoint",
             "max-age": 10886400,
             "endpoints": [
               { "url": "https://example.com/hpkp-reports" }
             ] }
Content-Security-Policy: ...; report-to csp-endpoint

Report-To: { "group": "endpoint-1",
             "max-age": 10886400,
             "endpoints": [
               { "url": "https://example.com/reports" },
               { "url": "https://backup.com/reports" }
             ] }

Content-Security-Policy: ...; report-to endpoint-1

Browser compatibility

The compatibility table in this page is generated from structured data. If you'd like to contribute to the data, please check out https://github.com/mdn/browser-compat-data and send us a pull request.

No compatibility data found. Please contribute data for "http.headers.csp.report-to" (depth: 1) to the MDN compatibility data repository.

See also

• Content-Security-Policy
• Content-Security-Policy-Report-Only