topic
Verified 2026-09-18Reporting Endpoints and Network Error Logging
Reporting fields tell browsers where to send structured policy and network failure reports.
Use Reporting-Endpoints with policies such as CSP and NEL when you have an endpoint that can authenticate, rate-limit, and safely process reports.
httpsecuritymonitoringprivacy
Reference (http)
Reporting-Endpoints: csp="https://reports.example.com/csp"
NEL: {"report_to":"default","max_age":86400}Use Reporting-Endpoints with policies such as CSP and NEL when you have an endpoint that can authenticate, rate-limit, and safely process reports.
Common mistakes
- Logging sensitive report payloads without access controls or assuming every browser supports the reporting feature.