SecurityPolicyViolationEvent: originalPolicy property

The originalPolicy read-only property of the SecurityPolicyViolationEvent interface is a string containing the Content Security Policy (CSP) whose enforcement uncovered the violation.

Value

A string representing the policy whose enforcement uncovered the violation.

This is the string in the Content-Security-Policy HTTP header that contains the list of directives and their values that make the CSP policy.

document.addEventListener("securitypolicyviolation", (e) => {
  console.log(e.originalPolicy);
});

Specification
Content Security Policy Level 3 # dom-securitypolicyviolationevent-originalpolicy

	Desktop						Mobile
	Chrome	Edge	Firefox	Opera	Safari	Chrome Android	Firefox for Android	Opera Android	Safari on IOS	Samsung Internet	WebView Android
`originalPolicy`	41	15	63	28	10	41	63	28	10	4.0	41