Unverified50% confidenceFactExact time
There are two CSP reporting mechanisms: the legacy method sends application/csp-report format JSON via the report-uri directive in the CSP header; the new standard declares endpoints via the Reporting-Endpoints header and uses the report-to directive, with reports in application/reports+json format.
1
Sources
50%
Confidence
Long-term
Relevance
10/18/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedCSP (Content Security Policy) is a set of browser security rules delivered by the server via HTTP response headers (such as Content-Security-Policy), used to declare which sources of resources a page is allowed to load, with typical directives including script-src, img-src, connect-src, and frame-ancestors.65% similarUnverifiedPage Shield collects script behavior data through the Content Security Policy (CSP) reporting mechanism, then uses machine learning models to score and alert on anomalous activity.59% similarUnverifiedThe /api/csp-violation-replay endpoint fetches the target page, extracts the CSP header, meta CSP, Reporting-Endpoints header and report-uri/report-to configuration, and replays four violation scenarios—script_violation, style_violation, connect_violation and img_violation—against each declared endpoint.57% similarUnverifiedThe publisher demonstrated a hands-on case: uploading a CSV file, which the model turns into an interactive financial analysis page.56% similarUnverified案例中通过 Dify 工作流输出的表格内容与系统原生界面完全一致，仅展示方式不同，可下载为 CSV 文件54% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1061964API
curl https://kongchang.com/api/v1/knowledge/claims/1061964MCP
get_claim(id=1061964)