Blog

Notes from the field

CSP violation reporting, browser telemetry, and what actually runs inside your users’ browsers. Also available as an Atom feed.

GuidesAugust 20, 2026

CSP violation reports are a free breach sensor you’re already ignoring

Most CSP violation reports are noise: extensions, antivirus injection, privacy tools. Buried in that noise are malicious extensions phoning home. A field guide to reading the reports.

Read the post →