developer 36f00d49b9 CSP violation reports: ingest endpoint, ClickHouse storage, UI view ...

- POST /v1/csp collects browser CSP reports in both wire formats (legacy
  application/csp-report and Reporting API application/reports+json), with
  CORS limited to the operator's domains (any subdomain of k6n.net,
  tornberg.me, knatofs.se) and preflight handling.
- Reports are stored in a dedicated typed ClickHouse table (csp_reports,
  90-day TTL) with a JSONL file fallback (OTEL_CSP_PATH).
- New authenticated view endpoints /api/csp/reports and /api/csp/summary
  plus a 'CSP reports' screen in the UI (tab 12) with time window, site and
  directive filters and report drill-down.
- Documented in instrumentation.md; unit tests for parsing/handlers/file
  store and an env-gated ClickHouse integration test.

2026-09-23 16:50:43 +00:00

..

alert-test

display notifications

2026-09-23 10:58:42 +02:00

bad-actors

include db for gitea build

2026-09-20 11:01:56 +02:00

issue-model

fix

2026-09-20 10:07:25 +02:00

needle-sidecar

fixes

2026-09-20 09:52:49 +02:00

normalized-backfill

all the changes

2026-09-19 23:25:59 +02:00

normalized-preview

ml

2026-09-19 06:50:19 +00:00

server

CSP violation reports: ingest endpoint, ClickHouse storage, UI view

2026-09-23 16:50:43 +00:00

spike-alerts

fix

2026-09-20 11:39:20 +02:00

training-sample

fix

2026-09-20 10:07:25 +02:00

triage-eval

all the changes

2026-09-19 23:25:59 +02:00

window-features

fix

2026-09-20 11:39:20 +02:00