NoScript appears to block post requests to report Content-Security-Policy violations. With scripts globally activated, reporting works as expected.
Output from the web console:
Content Security Policy: Tried to send report to invalid URI: “https://csp-reports.tocco.ch/e"
Content Security Policy ...
Search found 2 matches
- Wed Dec 07, 2016 11:50 pm
- Forum: NoScript Support
- Topic: NoScript blocks CSP report-uri
- Replies: 1
- Views: 1455
- Thu Jul 28, 2016 9:38 pm
- Forum: NoScript Mobile
- Topic: NSA breaks latest Firefox (48.*)
- Replies: 11
- Views: 103497
Re: NSA breaks latest Firefox beta (48.0b*)
Same issue here. Seem to be related to the XSS protection. Everything work fine as long as "Enable XSS Filter" is unchecked.