[wietze]

For how Report URI works in your browser, see the original RFC [1] from 2015. The OWASP recommendation for HTTP Security Headers [2] gives some useful extra information on the how the HTTP Security headers hang together.

1: https://tools.ietf.org/html/rfc7469#section-2.1.4

2: https://www.owasp.org/index.php/OWASP_Secure_Headers_Project...