[HTTP] CSP: Implement report-to

[Rumyra]

Acceptance criteria

• The listed features are documented sufficiently on MDN
• BCD is updated
• Interactive example and data repos are updated if appropriate
• The content has been reviewed as needed

For folks helping with Firefox related documentation

• Set bugs to dev-doc-complete
• Add entry to Firefox release notes for enabled/preview features
• Add/remove entry to Firefox experimental features page for preference/released features

Features to document

Docs worth a check, but looks like a bcd/release note task

Related Gecko bugs

https://bugzilla.mozilla.org/show_bug.cgi?id=1391243

Other

• Check content open issues to see if any pertain to the subject matter. If there are any that can be closed because of the work, do so. If there are any that can be fixed relatively quickly because of the knowledge from completing this issue and you have time, feel free to go ahead and fix them.

[hamishwillee]

Trying to work out how it all works - https://bugzilla.mozilla.org/show_bug.cgi?id=1391243#c11

Note, behind a pref dom.reporting.enabled - not in release.

Status:

• BCD
  • Ff130 csp report to browser-compat-data#24047
  • FF65 Reporting API updates  browser-compat-data#24112
• Docs
  • FF130 CSP report-to directive #35331
  • Reporting API - tidy up CSPViolationReportBody #35602
  • Securitypolicyviolationevent sidebar #35384 - fixes SecurityPolicyViolationEvent docs have unexpected HTTP sidebar #35320
  • reportError() global function is DOM API #35409
• dev-docs-complete
• Experimental Features/Release note FF130: Expr Features - CSP report-to and friends #35563