惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

G
GRAHAM CLULEY
S
Security @ Cisco Blogs
P
Proofpoint News Feed
Cisco Talos Blog
Cisco Talos Blog
D
Darknet – Hacking Tools, Hacker News & Cyber Security
C
Cyber Attacks, Cyber Crime and Cyber Security
T
Tor Project blog
WordPress大学
WordPress大学
Project Zero
Project Zero
S
Schneier on Security
P
Proofpoint News Feed
小众软件
小众软件
P
Privacy International News Feed
美团技术团队
L
LangChain Blog
Know Your Adversary
Know Your Adversary
J
Java Code Geeks
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
The Register - Security
The Register - Security
N
Netflix TechBlog - Medium
Microsoft Security Blog
Microsoft Security Blog
Engineering at Meta
Engineering at Meta
I
InfoQ
量子位
Vercel News
Vercel News
博客园 - 三生石上(FineUI控件)
Spread Privacy
Spread Privacy
D
DataBreaches.Net
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
U
Unit 42
P
Privacy & Cybersecurity Law Blog
C
Cybersecurity and Infrastructure Security Agency CISA
T
The Blog of Author Tim Ferriss
Latest news
Latest news
K
Kaspersky official blog
MongoDB | Blog
MongoDB | Blog
L
LINUX DO - 热门话题
Simon Willison's Weblog
Simon Willison's Weblog
云风的 BLOG
云风的 BLOG
S
Securelist
AWS News Blog
AWS News Blog
F
Fortinet All Blogs
T
Threat Research - Cisco Blogs
Stack Overflow Blog
Stack Overflow Blog
Scott Helme
Scott Helme
Help Net Security
Help Net Security
Y
Y Combinator Blog
宝玉的分享
宝玉的分享
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
T
Tenable Blog

Recent Commits to webappsec-csp:main

[Editorial] Compare origins with 'same origin', not 'is'. · w3c/webappsec-csp@4e01ae7 Fixing 'policy' local link text. · w3c/webappsec-csp@0051d16 Fixing status. · w3c/webappsec-csp@b1de5f1 Export a dfn. · w3c/webappsec-csp@e156259 [Editorial] 'policy' is a local term, not global. (#812) · w3c/webappsec-csp@3e24aea Add "text" destination type, for JavaScript text imports · w3c/webappsec-csp@7845c09 Attach self-origin to CSP list (#805) · w3c/webappsec-csp@3a5e595 Fix algorithms called with missing parameters (#806) · w3c/webappsec-csp@a20d8fb [Editorial] Avoid nested parenthetical (#804) · w3c/webappsec-csp@8df1f5d Add 'unsafe-webtransport-hashes' keyword to connect-src (#791) · w3c/webappsec-csp@1b8a543 Add missing closing tag for section (#800) · w3c/webappsec-csp@5bc6639 [Editorial] Fix broken references to Trusted Types spec (#790) · w3c/webappsec-csp@a131bcb Apply `strict-dynamic` to inline scripts. (#787) · w3c/webappsec-csp@13c7d8e [Editorial] Reference the algorithm instead of the section for parse-… · w3c/webappsec-csp@9dd7cf1 [Editorial] Fix reference to parse-metadata in SRI (#777) · w3c/webappsec-csp@1137e96 Fix path matching in match-url-to-source-expression (#773) · w3c/webappsec-csp@97e4a82 Further clarify post-request check (#730) · w3c/webappsec-csp@7690298 Fix URL in report-uri request (#731) · w3c/webappsec-csp@5c12cbb [Editorial] Fix missing input param of match-response-source-list (#732) · w3c/webappsec-csp@7092cef
Change CSPViolationReportBody to dictionary (#737) · w3c/webappsec-csp@a441899
TimvdLippe · 2025-06-22 · via Recent Commits to webappsec-csp:main
Original file line numberDiff line numberDiff line change

@@ -1632,20 +1632,18 @@ this algorithm returns normally if compilation is allowed, and throws a

16321632

<code>ReportingObserver</code>s</a>.

16331633
16341634

<pre class="idl">

1635-

[Exposed=Window]

1636-

interface CSPViolationReportBody : ReportBody {

1637-

[Default] object toJSON();

1638-

readonly attribute USVString documentURL;

1639-

readonly attribute USVString? referrer;

1640-

readonly attribute USVString? blockedURL;

1641-

readonly attribute DOMString effectiveDirective;

1642-

readonly attribute DOMString originalPolicy;

1643-

readonly attribute USVString? sourceFile;

1644-

readonly attribute DOMString? sample;

1645-

readonly attribute SecurityPolicyViolationEventDisposition disposition;

1646-

readonly attribute unsigned short statusCode;

1647-

readonly attribute unsigned long? lineNumber;

1648-

readonly attribute unsigned long? columnNumber;

1635+

dictionary CSPViolationReportBody : ReportBody {

1636+

USVString documentURL;

1637+

USVString? referrer;

1638+

USVString? blockedURL;

1639+

DOMString effectiveDirective;

1640+

DOMString originalPolicy;

1641+

USVString? sourceFile;

1642+

DOMString? sample;

1643+

SecurityPolicyViolationEventDisposition disposition;

1644+

unsigned short statusCode;

1645+

unsigned long? lineNumber;

1646+

unsigned long? columnNumber;

16491647

};

16501648

</pre>

16511649