Unable to get chrome/any browser to send reports generated with Report-To header
Hi, I am trying to collect Deprecation/Crash/Intervention reports generated by browsers visiting web pages that trigger an event. I have an endpoint set up that currently receives CSP reports when a browser visits the page, but even though there is a deprecation error in the console and in the log viewer a deprecation report has been generated, it is not being sent by chrome (or safari or firefox).
The Report-To header is being delivered, along with the NEL header (which also fails to send reports but is not my focus), as can be seen by scanning my page with securityheaders.com:
(The max age is short here for a test but I have tried with a full year)
Logs
Using chrome://net-export/ and visiting the page with deprecated JS on it, I can see that in the "Per origin config" section the correct information is being set:
and the deprecated JS is generating deprecation reports:
but for some reason the reports never send. Sometimes in the log dump it says there have been multiple attempts to send the reports.
Tests
I have tried using chrome with the command-line flags --enable-features=Reporting and --enable-blink-features=Reporting (although I think the three report types are enabled anyway; Intervention, Deprecation and Crash). I have also used safari and firefox and received deprecation alerts in the console but the only reports that are sent are CSP reports.