Report URI

@reporturi

Client-side security to control what code actually runs on your website.

Earth

report-uri.com

Replies Reposts Media

Report URI
@reporturi
Sep 16
We deployed an update at 14:00 UTC that introduced a new JavaScript dependency. At 14:04 UTC, Script Watch alerted us to it. That is the visibility you need in the browser: know when new code appears on your site, whether the change is expected or not. Four minutes from
Report URI
@reporturi
Sep 15
Magento has shipped with CSP enabled by default since 2.3.5, but most stores never configure a reporting endpoint. We found 2,236 Magento sites taking card payments with this exact gap, so we built a free module to fix it:
Magento already ships CSP: start monitoring it today
From blog.report-uri.com
Report URI
@reporturi
Sep 8
Dependabot alerted us to a DOM XSS vulnerability in the software behind our own documentation site. We developed a working PoC to understand the risk, but when we tested it against production, our CSP blocked the injected JavaScript and Report URI captured the evidence.
How Report URI saved Report URI: an XSS CVE in our own docs
From blog.report-uri.com
Report URI
@reporturi
Sep 4
Our logo's in good company this weekend. 🏁 Will Orton & Jessica Hawkins go into Donington Park leading British GT4! 😎 Proud to back the #21 Aston Martin. MK Racing @AMR_Official #BritishGT #GT4
Made with AI
Report URI
@reporturi
Sep 3
Do you know exactly what JavaScript ran in your users’ browsers? We fingerprint every executed script, alert when something changes, and preserve a verified copy for investigation. Zero code on your page.
We can prove exactly what JavaScript ran in your users’ browsers
From blog.report-uri.com