developer 36f00d49b9 CSP violation reports: ingest endpoint, ClickHouse storage, UI view ...

- POST /v1/csp collects browser CSP reports in both wire formats (legacy
  application/csp-report and Reporting API application/reports+json), with
  CORS limited to the operator's domains (any subdomain of k6n.net,
  tornberg.me, knatofs.se) and preflight handling.
- Reports are stored in a dedicated typed ClickHouse table (csp_reports,
  90-day TTL) with a JSONL file fallback (OTEL_CSP_PATH).
- New authenticated view endpoints /api/csp/reports and /api/csp/summary
  plus a 'CSP reports' screen in the UI (tab 12) with time window, site and
  directive filters and report drill-down.
- Documented in instrumentation.md; unit tests for parsing/handlers/file
  store and an env-gated ClickHouse integration test.

2026-09-23 16:50:43 +00:00

..

collector_test.go

alot more changes

2026-09-21 18:59:13 +02:00

collector.go

CSP violation reports: ingest endpoint, ClickHouse storage, UI view

2026-09-23 16:50:43 +00:00

csp_test.go

CSP violation reports: ingest endpoint, ClickHouse storage, UI view

2026-09-23 16:50:43 +00:00

csp.go

CSP violation reports: ingest endpoint, ClickHouse storage, UI view

2026-09-23 16:50:43 +00:00

handlers.go

alot more changes

2026-09-21 18:59:13 +02:00

issue_extract.go

all the changes

2026-09-19 23:25:59 +02:00

issue_traces_test.go

alot more changes

2026-09-21 18:59:13 +02:00

issue_traces.go

alot more changes

2026-09-21 18:59:13 +02:00

ratelimit.go

Improve agent-facing history endpoints (Phase 1)

2026-09-17 09:30:18 +00:00

source_ips_test.go

alot more changes

2026-09-21 18:59:13 +02:00

source_ips.go

alot more changes

2026-09-21 18:59:13 +02:00

todos_test.go

update

2026-09-21 19:38:09 +02:00

todos.go

better rum todo

2026-09-22 09:15:00 +02:00

vitals.go

better otel i think

2026-09-19 19:14:51 +02:00