topic
Verified 2026-09-18

Reporting Endpoints and Network Error Logging

Reporting fields tell browsers where to send structured policy and network failure reports.

Use Reporting-Endpoints with policies such as CSP and NEL when you have an endpoint that can authenticate, rate-limit, and safely process reports.

httpsecuritymonitoringprivacy

Reference (http)

Reporting-Endpoints: csp="https://reports.example.com/csp"
NEL: {"report_to":"default","max_age":86400}

Use Reporting-Endpoints with policies such as CSP and NEL when you have an endpoint that can authenticate, rate-limit, and safely process reports.

Common mistakes

  • Logging sensitive report payloads without access controls or assuming every browser supports the reporting feature.
Permalink: https://merginit.com/reference/http/reporting-endpoints