We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Rohkem teavet

Teema arhiveeriti. Please ask a new question if you need help.

Couldn’t process unknown directive ‘report-to’

  • 1 vastus
  • 0 on selline probleem
  • 33 views
  • Viimati vastas Standard8

Puvipavan
Puvipavan
more options

Hello there, I'm getting following warnings when I set report-to directive.

Content-Security-Policy: Couldn’t process unknown directive ‘report-to’ Content-Security-Policy: This site (http://puvipavan.local) has a Report-Only policy without a report URI. CSP will not block and cannot report violations of this policy.

These are the passed headers:

Content-Security-Policy-Report-Only: default-src https:; report-to csp-endpoint; Report-To: { "group": "csp-endpoint", "max_age": 5000, "endpoints": [ { "url": "https://example.com/csp-reports" } ] }

Am I missing something? I'm using the latest version of Firefox as of July-31-2023(115.0.3 (64-bit))

Hello there, I'm getting following warnings when I set report-to directive. Content-Security-Policy: Couldn’t process unknown directive ‘report-to’ Content-Security-Policy: This site (http://puvipavan.local) has a Report-Only policy without a report URI. CSP will not block and cannot report violations of this policy. These are the passed headers: Content-Security-Policy-Report-Only: default-src https:; report-to csp-endpoint; Report-To: { "group": "csp-endpoint", "max_age": 5000, "endpoints": [ { "url": "https://example.com/csp-reports" } ] } Am I missing something? I'm using the latest version of Firefox as of July-31-2023(115.0.3 (64-bit))

All Replies (1)

Standard8
Standard8
more options

Hi,

According to this table to this table, Firefox does not currently support report-to.

You can probably use the report-uri directive instead for the time being.