{"id":11239,"date":"2026-05-28T10:30:27","date_gmt":"2026-05-28T02:30:27","guid":{"rendered":"https:\/\/aeosub.com\/csp-violation-reporter\/"},"modified":"2026-05-28T10:30:27","modified_gmt":"2026-05-28T02:30:27","slug":"csp-violation-reporter","status":"publish","type":"post","link":"https:\/\/aeosub.com\/zh\/csp-violation-reporter\/","title":{"rendered":"CSP Violation Reporter"},"content":{"rendered":"
\n\n\n\n\n\n\n\n
Developer<\/th>\nGuilherme Dumas Peres<\/a><\/td>\n<\/tr>\n
Version<\/th>\nv0.1.1<\/td>\n<\/tr>\n
Active Installs<\/th>\n0 +<\/td>\n<\/tr>\n
Requires \/ Tested<\/th>\n6.5 \/ 7.0<\/td>\n<\/tr>\n
Last Updated<\/th>\n2026-05-28 1:33am GMT<\/td>\n<\/tr>\n
Official Link<\/th>\nView Details \u2192<\/a><\/td>\n<\/tr>\n<\/table><\/div>\n
Collect Content Security Policy violation reports through a WordPress REST endpoint and review them in the admin dashboard.<\/div>\n

CSP Violation Reporter adds a public WordPress REST endpoint for browser Content Security Policy violation reports and stores received violations in a local database table.<\/p>\n

Reports can be reviewed from Tools > CSP Violations. The plugin supports the modern Reporting API payload format as well as the older csp-report<\/code> JSON shape.<\/p>\n

Endpoint:<\/p>\n

\/wp-json\/csp-violation-reporter\/v1\/report\n<\/code><\/pre>\n
The plugin does not create or modify Content Security Policy headers. Site owners should configure CSP headers in their web server, hosting dashboard, theme, or security tooling.<\/p>\n
Example report endpoint configuration:<\/p>\n
Content-Security-Policy: default-src 'self'; report-uri https:\/\/example.com\/wp-json\/csp-violation-reporter\/v1\/report\n<\/code><\/pre>\n
For the modern Reporting API, use an HTTPS endpoint:<\/p>\n
Reporting-Endpoints: csp-endpoint=\"https:\/\/example.com\/wp-json\/csp-violation-reporter\/v1\/report\"\n\nContent-Security-Policy: default-src 'self'; report-to csp-endpoint\n<\/code><\/pre>\n
Privacy<\/h3>\n
This plugin stores CSP violation reports submitted by browsers. Stored fields can include the document URL, referrer URL, blocked URI, violated directive, source file, line and column numbers, a user agent string, a salted hash of the remote address, and the raw report payload.<\/p>\n
The plugin does not store raw IP addresses and does not transmit report data to external services.<\/p>","protected":false},"excerpt":{"rendered":"
Collect Content Security Policy violation reports through a WordPress REST endpoint and review them in the admin dashboard.<\/p>","protected":false},"author":1,"featured_media":9317,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[252],"tags":[2346,2347,1484,1075,664,555],"class_list":["post-11239","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-trends","tag-content-security-policy","tag-csp","tag-reporting","tag-reports","tag-security","tag-wordpress-plugin"],"_links":{"self":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts\/11239","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/comments?post=11239"}],"version-history":[{"count":0,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/posts\/11239\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/media\/9317"}],"wp:attachment":[{"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/media?parent=11239"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/categories?post=11239"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aeosub.com\/zh\/wp-json\/wp\/v2\/tags?post=11239"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}