report-to directive to support multiple endpoints #785
Description
Hello all,
My company is looking to give full support for Reporting-Endpoints, and I realized that a customer may want to keep using whatever system they're using while trying my company's solution.
For instance, they may have this:
Reporting-Endpoints: csp-endpoint="https://example.com/csp-reports"
Content-Security-Policy: default-src 'self'; report-to csp-endpoint
But may want to send the same report to multiple endpoints:
Reporting-Endpoints: csp-endpoint="https://example.com/csp-reports", other-provider="https://foo.com/bar"
Content-Security-Policy: default-src 'self'; report-to csp-endpoint, other-provider
What are your thoughts?