W3cubDocs

/DOM

SecurityPolicyViolationEvent.constructor

This is an experimental technology
Check the Browser compatibility table carefully before using this in production.

The SecurityPolicyViolationEvent constructor creates a new SecurityPolicyViolationEvent object instance.

Syntax

let SPVEvt = new SecurityPolicyViolationEvent(type, eventInitDict);

Properties

type
A DOMString representing the type of security policy violation that occurred.
eventInitDict Optional
A dictionary object containing information about the properties of the SecurityPolicyViolationEvent to be constructed. This can include the following properties, but bear in mind that if you do include an eventInitDict, certain properties must be included (marked below with required):
  • blockedURI: The blockedURI of the SecurityPolicyViolationEvent. If not included, the default value is "".
  • columnNumber: The columnNumber of the SecurityPolicyViolationEvent. If not included, the default value is 0.
  • disposition: The disposition of the SecurityPolicyViolationEvent (required).
  • documentURI: The documentURI of the SecurityPolicyViolationEvent (required).
  • effectiveDirective: The effectiveDirective of the SecurityPolicyViolationEvent (required).
  • lineNumber: The lineNumber of the SecurityPolicyViolationEvent. If not included, the default value is 0.
  • originalPolicy: The originalPolicy of the SecurityPolicyViolationEvent (required).
  • referrer: The referrer of the SecurityPolicyViolationEvent. If not included, the default value is "".
  • sample: The sample of the SecurityPolicyViolationEvent. If not included, the default value is "".
  • sourceFile: The sourceFile of the SecurityPolicyViolationEvent. If not included, the default value is "".
  • statusCode: The statusCode of the SecurityPolicyViolationEvent (required).
  • violatedDirective: The violatedDirective of the SecurityPolicyViolationEvent (required).

Return value

A SecurityPolicyViolationEvent object instance.

Example

let SPVEvt = new SecurityPolicyViolationEvent('foo', {
  ...
});

Specifications

Browser compatibilityUpdate compatibility data on GitHub

Desktop
Chrome Edge Firefox Internet Explorer Opera Safari
Basic support Yes Yes 63
63
59
Disabled
Disabled From version 59: this feature is behind the security.csp.enable_violation_events preference (needs to be set to true). To change preferences in Firefox, visit about:config.
No Yes Yes
Mobile
Android webview Chrome for Android Edge Mobile Firefox for Android Opera for Android iOS Safari Samsung Internet
Basic support Yes Yes Yes 63
63
59
Disabled
Disabled From version 59: this feature is behind the security.csp.enable_violation_events preference (needs to be set to true). To change preferences in Firefox, visit about:config.
Yes Yes Yes

See also

© 2005–2018 Mozilla Developer Network and individual contributors.
Licensed under the Creative Commons Attribution-ShareAlike License v2.5 or later.
https://developer.mozilla.org/en-US/docs/Web/API/SecurityPolicyViolationEvent/SecurityPolicyViolationEvent