Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add keys to reporting API feature #2601

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

ddbeck
Copy link
Collaborator

@ddbeck ddbeck commented Feb 3, 2025

This brings many more keys under the umbrella of the reporting API feature.

I lightly revised the description to match how handle other features, by naming the entry points.

The discussion on #2397 notwithstanding, the description of the feature included the whole kitchen sink, so I moved all the keys for the reporting API here, including the CSP-related keys.

@github-actions github-actions bot added the feature definition Creating or defining new features or groups of features. label Feb 3, 2025
Copy link
Contributor

@captainbrosset captainbrosset left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A couple of comments on the description. Apart from that, I agree with adding these new keys to the feature. It seems like the Reporting API happened in pretty much one go, with no later additions. I don't see a need to split this up further.

@@ -1,7 +1,39 @@
name: Reporting API
description: The Reporting API makes consistent reports about Content Security Policy violations, Permissions-Policy violations, deprecated feature usage, crashes, and other web platform features available to your server endpoints.
spec: https://w3c.github.io/reporting/
description: The `Reporting-Endpoints` HTTP header specifies URLs to receive reports of Content Security Policy (CSP) violations, Permissions-Policy violations, deprecated feature usage, and crashes, while the `ReportingObsever()` API dispatches reports to a callback function.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I know we usually try to mention entry points first in the description, but reversing the order of things makes it clearer to me. Up to you which one you prefer:

Suggested change
description: The `Reporting-Endpoints` HTTP header specifies URLs to receive reports of Content Security Policy (CSP) violations, Permissions-Policy violations, deprecated feature usage, and crashes, while the `ReportingObsever()` API dispatches reports to a callback function.
description: Content Security Policy (CSP) violations, Permissions-Policy violations, deprecated feature usage, and crashes can be sent to server endpoints by using the `Reporting-Endpoints` HTTP header, and to JavavaScript callback functions by using the `ReportingObserver()` API

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm realizing that the description doesn't mention browser interventions. If I'm correct, there are 5 types of reports: csp, deprecation, crashes, permissions, and interventions. If we list the first 4, we should add the 5th to the list.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature definition Creating or defining new features or groups of features.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants