Web/API/SecurityPolicyViolationEvent/SecurityPolicyViolationEvent

This is an experimental technologyCheck the Browser compatibility table carefully before using this in production.

The SecurityPolicyViolationEvent constructor creates a new SecurityPolicyViolationEvent object instance.

Syntax

let SPVEvt = new SecurityPolicyViolationEvent(type, eventInitDict);

Properties

type

A DOMString representing the type of security policy violation that occurred.

eventInitDict Optional

A dictionary object containing information about the properties of the SecurityPolicyViolationEvent to be constructed. This can include the following properties, but bear in mind that if you do include an eventInitDict, certain properties must be included (marked below with required):

blockedURI

• The blockedURI of the SecurityPolicyViolationEvent. If not included, the default value is "".
• columnNumber: The columnNumber of the SecurityPolicyViolationEvent. If not included, the default value is 0.
• disposition: The disposition of the SecurityPolicyViolationEvent (required).
• documentURI: The documentURI of the SecurityPolicyViolationEvent (required).
• effectiveDirective: The effectiveDirective of the SecurityPolicyViolationEvent (required).
• lineNumber: The lineNumber of the SecurityPolicyViolationEvent. If not included, the default value is 0.
• originalPolicy: The originalPolicy of the SecurityPolicyViolationEvent (required).
• referrer: The referrer of the SecurityPolicyViolationEvent. If not included, the default value is "".
• sample: The sample of the SecurityPolicyViolationEvent. If not included, the default value is "".
• sourceFile: The sourceFile of the SecurityPolicyViolationEvent. If not included, the default value is "".
• statusCode: The statusCode of the SecurityPolicyViolationEvent (required).
• violatedDirective: The violatedDirective of the SecurityPolicyViolationEvent (required).

Return value

A SecurityPolicyViolationEvent object instance.

Example

let SPVEvt = new SecurityPolicyViolationEvent('foo', {
  ...
});

Specifications

Specification	Status	Comment
Content Security Policy Level 3The definition of 'SecurityPolicyViolationEvent' in that specification.	Working Draft	Initial definition

Browser compatibility

The compatibility table on this page is generated from structured data. If you'd like to contribute to the data, please check out https://github.com/mdn/browser-compat-data and send us a pull request.

Update compatibility data on GitHub

	Desktop						Mobile
	Chrome	Edge	Firefox	Internet Explorer	Opera	Safari	Android webview	Chrome for Android	Firefox for Android	Opera for Android	Safari on iOS	Samsung Internet
SecurityPolicyViolationEvent() constructor	Chrome Full support Yes	Edge Full support ≤18	Firefox Full support 63 Full support 63 Full support 59 Disabled' Disabled' From version 59: this feature is behind the security.csp.enable_violation_events preference (needs to be set to true). To change preferences in Firefox, visit about:config.	IE No support No	Opera Full support Yes	Safari Full support Yes	WebView Android Full support Yes	Chrome Android Full support Yes	Firefox Android Full support 63 Full support 63 Full support 59 Disabled' Disabled' From version 59: this feature is behind the security.csp.enable_violation_events preference (needs to be set to true). To change preferences in Firefox, visit about:config.	Opera Android Full support Yes	Safari iOS Full support Yes	Samsung Internet Android Full support Yes

Legend

Full support  

Full support

No support  

No support

User must explicitly enable this feature.'

User must explicitly enable this feature.

See also

• Content Security Policy (CSP)

SecurityPolicyViolationEvent.SecurityPolicyViolationEvent() by Mozilla Contributors is licensed under CC-BY-SA 2.5.