Report-only monitoring

Wire ON_VIOLATION to a logger (or your telemetry) to watch what the policy is doing - refusals, allowed sinks, a missing sanitizer - without changing behavior.

The config

window.DOMFortifyConfig = {
  ON_VIOLATION: (code, detail) => report(code, detail),
};

Try it

Event log:

no events yet