Reporting API 管线：汇聚 CSP/COEP/Permissions-Policy 违例

概述Reporting API 允许浏览器将策略违例与运行时问题异步上报到站点配置的端点。相比传统 `report-uri`，支持多端点与更丰富事件类型。配置（已验证）Reporting-Endpoints: default="https://reports.example.com/_rpt"; group="sec"; endpoints=[{"url":"https://reports.example.com/sec"}] Report-To: {"group":"sec","max_age":86400,"endpoints":[{"url":"https://reports.example.com/sec"}]} Content-Security-Policy: default-src 'self'; report-to sec; report-sample Cross-Origin-Embedder-Policy: require-corp; report-to="sec" Permissions-Policy: geolocation=(); report-to="sec" 实施建议端点设计：批处理写入与速率控制；区分组与事件类型数据治理：脱敏与聚合，构建可视化看板与告警规则