Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Couldn’t process unknown directive ‘report-to’

  • 1 svar
  • 0 har dette problemet
  • 33 views
  • Siste svar av Standard8

more options

Hello there, I'm getting following warnings when I set report-to directive.

Content-Security-Policy: Couldn’t process unknown directive ‘report-to’ Content-Security-Policy: This site (http://puvipavan.local) has a Report-Only policy without a report URI. CSP will not block and cannot report violations of this policy.

These are the passed headers:

Content-Security-Policy-Report-Only: default-src https:; report-to csp-endpoint; Report-To: { "group": "csp-endpoint", "max_age": 5000, "endpoints": [ { "url": "https://example.com/csp-reports" } ] }

Am I missing something? I'm using the latest version of Firefox as of July-31-2023(115.0.3 (64-bit))

Hello there, I'm getting following warnings when I set report-to directive. Content-Security-Policy: Couldn’t process unknown directive ‘report-to’ Content-Security-Policy: This site (http://puvipavan.local) has a Report-Only policy without a report URI. CSP will not block and cannot report violations of this policy. These are the passed headers: Content-Security-Policy-Report-Only: default-src https:; report-to csp-endpoint; Report-To: { "group": "csp-endpoint", "max_age": 5000, "endpoints": [ { "url": "https://example.com/csp-reports" } ] } Am I missing something? I'm using the latest version of Firefox as of July-31-2023(115.0.3 (64-bit))

All Replies (1)

more options

Hi,

According to this table to this table, Firefox does not currently support report-to.

You can probably use the report-uri directive instead for the time being.