1391243 - CSP: Implement report-to

Status: RESOLVED FIXED

(Core :: DOM: Core & HTML, enhancement, P3)

Description

[Christoph Kerschbaumer [:ckerschb}]

https://www.w3.org/TR/CSP/#directive-report-to

Comment 3

[csaba.kabai]

issue still open since 6+ years blocking consensus for transition report-uri -> report-to.
see: https://w3c.github.io/webappsec-csp/#directive-report-uri

Comment 4

[Freya]

Attachment: Bug 1391243 - Implementing Report-To Directive

Updated report processing to include support for
report-to directive. Currently supports report-building
and sending through nsCSPContext::SendReports.

Comment 6

[Freya]

Attachment: Bug 1391243 - Revised ReportDeliver Notify Method

Changed how ReportDeliver::Notify is dispatched from ReportDeliver::AppendReportData. Now, instead of relying on a predetermined timer to call Notify, it is dispatched to the current thread queue in a Runnable.
Additionally changed credentials mode to RequestCredentials::Same_origin in ReportDeliver::SendReports to align with W3C reporting specifications,

Comment 7

[Mirko Brodesser (:mbrodesser) -- not reading bugmails currently]

Is this still being worked on?

Comment 8

[Sean Feng [:sefeng211]]

Yeah, Freya is still working on this.

Comment 9

[Pulsebot]

Pushed by [e-mail]:
https://hg.mozilla.org/integration/autoland/rev/17a0209f5595
Implementing Report-To Directive r=sefeng,farre
https://hg.mozilla.org/integration/autoland/rev/1dd7df601ace
Revised ReportDeliver Notify Method r=sefeng
https://hg.mozilla.org/integration/autoland/rev/dcdf8bd23501
1860588: apply code formatting via Lando

Comment 10

[Iulian Moraru]

https://hg.mozilla.org/mozilla-central/rev/17a0209f5595
https://hg.mozilla.org/mozilla-central/rev/1dd7df601ace
https://hg.mozilla.org/mozilla-central/rev/dcdf8bd23501

Comment 11

[Hamish Willee]

FF130 MDN docs work for this can be tracked in https://github.com/mdn/content/issues/35279

EDIT, note, I'm clearing my request for information. After extensive testing I think I know how this works. If I'm wrong we can correct in a post process.

Comment 12

[Armen [:armenzg]]

Does someone know if the preference is going to be removed?