Checks

Reporting endpoints configured

The response publishes Reporting-Endpoints, Report-To, or NEL.

Why it matters

Browsers can send reports about network or policy failures to an endpoint you chose.

What to do

No change is required. Confirm the reporting endpoint is yours and that you want those reports.

Reference

Security response headers reduce XSS, clickjacking, and protocol downgrade risk.

OWASP Secure Headers Project