---
schema_version: "1"
id: f374f3d29cd09f191569fc6719199014c7da4c5757116ceff2359bdf267d8cd7
title: Boost Security with Content Security Policy Reporting
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/commerce/264-0-0/rn_b2c_page_shield_roll_out_je.md
canonical_url: https://help.salesforce.com/s/articleView?id=commerce.rn_b2c_page_shield_roll_out_je.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: bec9a5549a0265d164f42c453db1c5b4cddb3f0d8070396a699c19b5644f8ecb
description: To improve monitoring capabilities, we’re adding the capability to monitor JavaScript dependencies on ecommerce websites.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Boost Security with Content Security Policy Reporting

To improve monitoring capabilities, we’re adding the capability to monitor JavaScript dependencies on ecommerce websites.

When: Rollout across the security grid begins March 1, 2022 and is expected to be completed March 14, 2022.

How: Salesforce Commerce Cloud uses the Content Security Policy (CSP) report data for internal visibility and enhancements. Monitoring uses CSP reporting that is native to browser API technology. Commerce Cloud adds a Content-Security-Policy-Report-Only header to web pages as they pass through our edge. When JavaScript files attempt to execute on a webpage, browsers send a report to our reporting endpoint–the report doesn’t contain customer data. The report is sent to a non-customer domain and doesn’t impact customer traffic.

No customer action is required for the additional CSP report header.