Use report-to with group which configured in the separate header

[olksdr]

According to MDN

The Content-Security-Policy Report-To HTTP response header field instructs the user agent to store reporting endpoints for an origin.

the report-to directive seems need to be configured as following

Content-Security-Policy: …; report-to groupname

and then Report-To header contains the definition of the group with the above defined name

fix: #9199
fix: getsentry/sentry#52794
related to: getsentry/sentry#38940 and getsentry/relay#2645

@oioki just to double check if that makes sense.

We also use the report-to configuration with similar config for NEL and that seems like it works as expected.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
sentry-docs	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Mar 14, 2024 9:09am

[olksdr]

@vivianyentran we tested the docs changes and the report-to works as expected.
But there is also a Relay bug which we have to fix to fully support report-to directive. Will put this on my todo list.

[vivianyentran]

Thanks!