Guilherme Dumas Peres

CSP Violation Reporter adds a public WordPress REST endpoint for browser Content Security Policy violation reports and stores received violations in a local database table.
Reports can be reviewed from Tools > CSP Violations. The plugin supports the modern Reporting API payload format as well as the older <code>csp-report</code> JSON shape.
Endpoint:
<pre><code>/wp-json/csp-violation-reporter/v1/report
</code></pre>
The plugin does not create or modify Content Security Policy headers. Site owners should configure CSP headers in their web server, hosting dashboard, theme, or security tooling.
Example report endpoint configuration:
<pre><code>Content-Security-Policy: default-src 'self'; report-uri https://example.com/wp-json/csp-violation-reporter/v1/report
</code></pre>
For the modern Reporting API, use an HTTPS endpoint:
<pre><code>Reporting-Endpoints: csp-endpoint="https://example.com/wp-json/csp-violation-reporter/v1/report"

Content-Security-Policy: default-src 'self'; report-to csp-endpoint
</code></pre>
<h3>Privacy</h3>
This plugin stores CSP violation reports submitted by browsers. Stored fields can include the document URL, referrer URL, blocked URI, violated directive, source file, line and column numbers, a user agent string, a salted hash of the remote address, and the raw report payload.
The plugin does not store raw IP addresses and does not transmit report data to external services.

CSP Violation Reporter

Collect Content Security Policy violation reports through a WordPress REST endpoint and review them in the admin dashboard.

Johan Jonk Stenström

Be fully GDPR and CCPA compliant through Content Security Policy.
Block cookies and unwanted external content by setting Content Security Policy. A modal will be shown on the front end to let the visitor choose what kind of resources to accept. It also adds a layer of security for your site since iframes, scripts and images from unknown domains are blocked.
Multilingual support through <a href="https://wpml.org/" rel="nofollow ugc">WPML</a>, <a href="https://polylang.pro/" rel="nofollow ugc">Polylang</a> or probably any multilingual plugin out there since this plugin follows WordPress Coding Standards. See FAQ below on how to translate with WPML or Polylang.
Quickstart: Choose common resources from a list that are automatically added to your Domains list. So, it’s even easier to set it up! Check, check, check and check! 
Updated regularly.
<h3>Free stickers for translators!</h3>
Since we want this plugin to be available in as many languages as possible, I will send you a handful of the new <a href="https://plugins.followmedarling.se/2022/02/stickers-are-in-the-house/" rel="nofollow ugc">super cool stickers</a> if you translate the plugin! 
Just translate the plugin to your language, and when it is approved, <a href="https://plugins.followmedarling.se/2022/02/stickers-are-in-the-house/#respond" rel="nofollow ugc">comment this post</a> and I’ll send it to you, totally free! 
If you have already translated the plugin and want stickers, of course that counts too! Just comment the post.

Cookies and Content Security Policy

Looked around and decided to use this great little piece of software ... thanks Jonk.

Very Nice Soft


This is the best plugin for cookie consent banner / modal. It is also the easiest one to set up. I have tested more similar plugins and none of them worked so well like this one. Also, the author of the plugin is very helpful. Thank you!


The Best Plugin for Cookies Banner!


This plugin is awesome, thank you!



Compared to the others, there is no account required to block Google Maps / Analytics cookies based on consent.



Plus, it is easy to change colors, texts, and translate them with WPML :)


Very easy and customizable + no account required

Be fully GDPR and CCPA compliant through Content Security Policy. Blocks cookies and unwanted external content.

CSP Violation Reporter vs Cookies and Content Security Policy