CSP3: Allow report batching.

[mikewest]

Something like report-uri 'batched' /endpoint would allow us to gather up several reports, and send them in a single request, rather than DDoSing the endpoint:

[
    {
        // report 1
    },
    {
        // report 2
    },
    ...
    {
        // report N
    }
]

[annevk]

That would actually be a rather sensible default, no? But I guess making this backwards compatible would be hard.

[devd]

maybe a new directive instead of report-uri 'batched'? I also don't want to get the DoS reports from the old browser.

[mikewest]

Sure. reports /endpoint? Then we can drop uri as well and make @annevk happy.

[annevk]

Except the JSON will still have it, but it's better, yes.

[mikewest]

shrug We'd already be changing the JSON to allow an array of reports. That would be an opportunity to make larger changes if warranted.

[annevk]

\o/