Reporting: there's no complete list of possible report types (or named reporting endpoints)

[ddbeck]

MDN URL

https://developer.mozilla.org/en-US/docs/Web/API/Reporting_API

What specific section or headline is this issue about?

Report types [but also others]

What information was incorrect, unhelpful, or incomplete?

I could not find a complete list report types (or at least the current text doesn't tell me if the listed report types are exhaustive).

What did you expect to see?

On this page, I expected to find a complete list of all the possible values for a report body's type property. Short of that, I expected to be able to piece together the list from the ReportingObserver: observe() method page and the Reporting-Endpoints header page.

Likewise, I expected to find a complete list of named reporting endpoints (e.g., Reporting-Endpoints: crash-reporting="…"), plus the default endpoint.

Without this information, it's very difficult to know what reports one might expect to receive via the ReportingObserver API or via POST to a Reporting-Endpoints: default="…" header URL.

Finally, I would also expect to see an explicit enumeration of which reports types go to reporting endpoints, the ReportingObserver API, or both.

Do you have any supporting links, references, or citations?

The Report types section says:

The type of report can be determined from its type property, which for the reports above would be coep, deprecation, integrity-violation, intervention and csp-violation.

It does not say whether "the reports above" is an exhaustive list of report types.

The relevant specs are in a deeply confused state, so it's not easy to determine this from the specifications (see w3c/reporting#216 (comment) and that issue in general for more information).

Do you have anything more you want to share?

No response

MDN metadata

Page report details

• Folder: en-us/web/api/reporting_api
• MDN URL: https://developer.mozilla.org/en-US/docs/Web/API/Reporting_API
• GitHub URL: https://github.com/mdn/content/blob/main/files/en-us/web/api/reporting_api/index.md
• Last commit: 09d8ff0
• Document last modified: 2026-04-06T19:43:24.000Z

[ddbeck]

cc: @hamishwillee since you're the most recent (significant) editor to this page.

cc: @Elchi3 since we talked about this and you think this subject is potentially in-scope for OWD's security work.

[hamishwillee]

The lists are not exhaustive. If you look at the thread in w3c/reporting#216 (comment) it doesn't feel like anyone has an exhaustive list of the implemented reports needed for this.

When I last upated this all the reports I knew about had both observer and reporting endpoing support, so the https://developer.mozilla.org/en-US/docs/Web/API/ReportingObserver/ReportingObserver#types links seemed reasonable for a list. Since then I've found a few more, such as NEL which are reporting server only.

Upshot, yes, this has to happen. I will try do a first pass at this in the coming weeks as that will form a good basis for a project to back-fill the missing bits.

Self-assigning but very happy for others to join in the effort of working out what otehr report types might exist.