← back to v133 · csp-hash-reporting-for-scripts

conformance · v133

v133 · csp-hash-reporting-for-scripts — conformance probe

5 assertions drawn from the spec. Each is a single contract the spec text makes. Pass/fail reflects what this browser executed; blocked means the contract was not run because it needs user mediation, hardware, or another unavailable precondition. Open the page in Chrome stable / canary / Firefox / Safari to compare.

browser: spec: https://github.com/w3c/webappsec-csp/pull/693 chromestatus: #6337535507431424 generated 2026-06-01T08:12:59Z by conformance-author-v1-subagent
0
pass
0
fail
0
blocked
5
total
id contract kind verdict detail
securitypolicyviolationevent-exposed SecurityPolicyViolationEvent is exposed for receiving CSP report data including the new script hash field. exists
securitypolicyviolationevent-scriptsample-attr SecurityPolicyViolationEvent.prototype exposes the scriptSample property used for script-src violation context. script
reportingobserver-exposed ReportingObserver is exposed for collecting CSP violation reports including script hashes. exists
report-interface-exposed The Report interface is exposed when ReportingObserver reports are materialized; ReportingObserver remains the feature-detection surface. script
csp-meta-with-sha256-accepted A CSP meta tag can carry a sha256 hash in script-src without mutating the current document policy. script