Not receiving reports

[lordraiden]

I have this in my nginx

# Add the Report-To header, which specifies the reporting endpoint
add_header Report-To '{"group":"default","max_age":10886400,"endpoints":[{"url":"http://metlocsp:8080"}],"include_subdomains":true}' always;
# Content-Security-Policy-Report-Only header to enable CSP reporting
add_header Content-Security-Policy-Report-Only "default-src 'self'; font-src 'self'; img-src 'self'; script-src 'self'; style-src 'self'; report-uri http://metlocsp:8080; report-to default;" always;

And I can curl http://metlocsp:8080 from nginx so no conectivity issue.
Still I don't get any report, any idea why?

Tried this as well and nothing

add_header Content-Security-Policy-Report-Only: "default-src 'self'; script-src 'self'; style-src 'self'; img-src 'self'; font-src 'self'; connect-src 'self'; object-src 'self'; frame-src 'self'; frame-ancestors 'self'; upgrade-insecure-requests; report-uri http://metlocsp:8080; report-to http://metlocsp:8080" always;

[CircleCrop]

I met the same problem. It seems that some browsers, like Google Chrome, send with the content-type application/csp-report. So the backend returns 415 Unsupported Media Type Expected request with Content-Type: application/json``.
Maybe we should try another csp-reporter backend.

[CircleCrop]

The repo was committed last 2 years ago. It is outdated.