• by theandrewbailey on 6/28/2024, 1:31:24 PM

    I have a strict CSP with report-URI on my blog, but all the reports I get are from obscure browser extensions injecting CSS and JS into my pages.