ApplicationText-based

`application/csp-report`

CSP Report

Reference for application/csp-report, the MIME type for Content Security Policy violation reports sent by browsers.

MIME Type Detector

Drop a file to detect its MIME type — no upload, runs in your browser

📄

Drop any file here or click to choose

HTTP Content-Type Header

HTTP Header

Content-Type: application/csp-report; charset=utf-8

Quick Facts

MIME Type	application/csp-report
Category	Application
Type	Text-based (human-readable)

Common Usage

When a browser detects a Content Security Policy violation, it sends a JSON report to the URI specified in the report-uri or report-to directive. These reports help web developers identify and fix security issues, mixed content, and unauthorized resource loading.

Code Examples

HTML

<!-- Set MIME type in meta or fetch headers -->
<meta http-equiv="Content-Type" content="application/csp-report">

Node.js

// Express.js
app.get('/file', (req, res) => {
  res.type('application/csp-report');
  res.send(data);
});

// Node.js http
res.writeHead(200, { 'Content-Type': 'application/csp-report' });

nginx

# nginx.conf — add to types block or use default
types {
    application/csp-report  report;
}

# Or set for a specific location
location /api/ {
    default_type application/csp-report;
}