TL;DR
| Supported data types | 3rd party detection | Hunters detection | IOC search | Search | Table name | Log format | Collection method |
|---|---|---|---|---|---|---|---|
| Test Test CSP Reports | ✅ | ✅ | ✅ | ✅ | test_test_csp | JSON | S3 |
Overview
The Test product generates Content Security Policy (CSP) violation reports, capturing instances where web applications attempt actions blocked by browser security policies. These logs are structured JSON objects that include details about the blocked action, the resource involved, project context, and metadata such as timestamps and event counts. Integrating these logs with Hunters provides valuable visibility into potential cross-site scripting (XSS) attempts, data exfiltration risks, and misconfigurations in web application security policies. Monitoring CSP violations helps organizations detect and respond to suspicious or unauthorized web activity, strengthening overall application security posture.
Supported data types
Test Test CSP Reports
Table name: test_test_csp
This data type contains structured reports of Content Security Policy (CSP) violations detected by web applications. Each log captures details about the blocked action (such as blocked connections), the source and directive involved, project metadata, and event statistics. These events help security teams identify suspicious web activity, attempted policy bypasses, and potential XSS or data exfiltration attempts.
Expected format
Logs are expected in JSON format.
{"id":"a2b4c6d8","shortId":"WEB-APP-V2-1A23","title":"Blocked 'connect' from 'api-client-config.europe.analytics.com'","culprit":"connect-src","permalink":"https://sentry.example.org/organizations/demo/issues/a2b4c6d8/","logger":"csp","level":"error","status":"unresolved","statusDetails":{},"substatus":"new","isPublic":false,"platform":"other","project":{"id":"99","name":"web-app-v2","slug":"web-app-v2","platform":"javascript"},"type":"csp","metadata":{"message":"Blocked 'connect' from 'api-client-config.europe.analytics.com'","uri":"api-client-config.europe.analytics.com","directive":"connect-src"},"numComments":0,"isBookmarked":false,"isSubscribed":false,"hasSeen":false,"annotations":[],"issueType":"error","issueCategory":"error","isUnhandled":false,"count":"3","userCount":1,"firstSeen":"2026-05-17T00:04:03Z","lastSeen":"2026-05-17T00:04:03Z","stats":{"24h":[[1778893200,0],[1778896800,3]]},"lifetime":{"count":"168888","userCount":9027,"firstSeen":"2025-11-14T08:41:29.650494Z","lastSeen":"2026-05-17T00:04:03Z"},"filtered":{"count":"3","userCount":1,"firstSeen":"2026-05-17T00:04:03Z","lastSeen":"2026-05-17T00:04:03Z"}}
Send data to Hunters
Hunters supports the collection of Test logs using S3.
To connect Test logs:
- Route Test product CSP violation logs into an AWS S3 bucket.
- Once logs are in S3, follow the steps in this section to configure Hunters to collect and process the logs.