Backbencher.dev

How to View CSP Violations in CloudFlare

Last updated on 25 Nov, 2022

When Page Shield is enabled in Cloudflare, CloudFlare automatically adds Content-Security-Policy-Report-Only header to all the pages.

content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/...

Basically it means that if there is any CSP violation occurrence, it is reported to CloudFlare. And in CloudFlare, we can see the report.

CSP Cloudflare

In order to view the report:

  • Login to cloudflare
  • Go to Security menu
  • Under that, click on Page Shield

There you can see all the scripts and the violations made by them.

--- ○ ---
Joby Joseph
Web Architect