3 ms·
"On top of all of that, you could be alerted to events like this happening on your site via CSP Reporting" Too bad this can be abused by marketing parasites.
by Feniks 9y ago
"On top of all of that, you could be alerted to events like this happening on your site via CSP Reporting"
Too bad this can be abused by marketing parasites.
- orf 9y agoHow?
- dullgiulio 9y agoCSP reporting is an unprotected form, in itself a vulnerability. The author of the article is biased as he made a SaaS product for CSP reporting. CSP reporting should be for local debugging only.
- orf 9y agoI'm sorry, I'm still not following. How can CSP reporting be used by marketers? It requires a header sent from the server, so it's not like a tracking pixel that can be added by a third party. And I'm not sure about local debugging only, locally it offers no benefits over just viewing the devtools console, whereas it offers a lot of benefits when enabled on users of your sites.