-
Notifications
You must be signed in to change notification settings - Fork 102
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add keys to reporting API feature #2601
base: main
Are you sure you want to change the base?
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A couple of comments on the description. Apart from that, I agree with adding these new keys to the feature. It seems like the Reporting API happened in pretty much one go, with no later additions. I don't see a need to split this up further.
@@ -1,7 +1,39 @@ | |||
name: Reporting API | |||
description: The Reporting API makes consistent reports about Content Security Policy violations, Permissions-Policy violations, deprecated feature usage, crashes, and other web platform features available to your server endpoints. | |||
spec: https://w3c.github.io/reporting/ | |||
description: The `Reporting-Endpoints` HTTP header specifies URLs to receive reports of Content Security Policy (CSP) violations, Permissions-Policy violations, deprecated feature usage, and crashes, while the `ReportingObsever()` API dispatches reports to a callback function. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I know we usually try to mention entry points first in the description, but reversing the order of things makes it clearer to me. Up to you which one you prefer:
description: The `Reporting-Endpoints` HTTP header specifies URLs to receive reports of Content Security Policy (CSP) violations, Permissions-Policy violations, deprecated feature usage, and crashes, while the `ReportingObsever()` API dispatches reports to a callback function. | |
description: Content Security Policy (CSP) violations, Permissions-Policy violations, deprecated feature usage, and crashes can be sent to server endpoints by using the `Reporting-Endpoints` HTTP header, and to JavavaScript callback functions by using the `ReportingObserver()` API |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm realizing that the description doesn't mention browser interventions. If I'm correct, there are 5 types of reports: csp, deprecation, crashes, permissions, and interventions. If we list the first 4, we should add the 5th to the list.
This brings many more keys under the umbrella of the reporting API feature.
I lightly revised the description to match how handle other features, by naming the entry points.
The discussion on #2397 notwithstanding, the description of the feature included the whole kitchen sink, so I moved all the keys for the reporting API here, including the CSP-related keys.