topic
Verified 2026-09-18Integrity-Policy-Report-Only
Reports integrity-policy violations without enforcing the block.
Use report-only mode to inventory missing integrity metadata before enforcement, together with Reporting-Endpoints where supported.
httpheadersecurityintegritybrowser
Reference (http)
Integrity-Policy-Report-Only: blocked-destinations=(script)
Use report-only mode to inventory missing integrity metadata before enforcement, together with Reporting-Endpoints where supported.
Common mistakes
- Assuming report-only mode blocks compromised resources.