Report URI blog (Scott Helme)

https://blog.report-uri.com/

Added 2026-10-12 (S3): client-side and third-party-script research from first-hand CSP-report telemetry (a krpano XSS redirect campaign, a ClickFix chase to a macOS stealer, an abandoned-domain script hijack that reaches an iOS exploit chain). Feed verified: `feed https://blog.report-uri.com/rss/ 8` returns 8 dated items; `extract` of a post returns raw HTML, so use the feed link with `url` or WebFetch. Vendor of a JS-integrity product, so read remediation text as partly promotional. Candidate: promote to active after 3 contributing runs.