← Back to release summary

CSP: `report-sample` property in violation reports

Category
Security
Type
New or changed feature
Status
Enabled by default (Chrome 59)
Intent stage
None

Summary

The `report-sample` property attempts to reach consensus on an opt-in variant Firefox's behavior. In short, we'll collect a 40-character sample for inline script and style violations, and include it in the violation report (and associated SecurityPolicyViolationEvent object) iff a 'report-sample' expression is present in the violated directive.

Standards & signals

Docs: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/script-src

View on chromestatus.com