Missing 'csp' in EventType

[Talb2005]

Description:
CSP violation events reported by Sentry have event.type === 'csp', but the current EventType type in the SDK does not include 'csp'. This causes TypeScript errors when handling CSP events in beforeSend.

Reference:
EventType definition (line 69)

Proposed fix:
Add 'csp' to EventType:

export type EventType =
  | 'transaction'
  | 'profile'
  | 'replay_event'
  | 'feedback'
  | 'csp'
  | undefined;

Why:
The SDK emits CSP events with type: 'csp', so TypeScript definitions should accurately represent this.

[linear]

JS-755 Missing 'csp' in EventType

[Talb2005]

Additional Note:
In addition to the missing 'csp' event type in EventType, the SDK currently lacks a built-in CspReport interface to describe the event.csp payload for CSP violation events. It would be useful to have a dedicated type (e.g., CspReport) with properties like blocked_uri, effective_directive, and source_file, to avoid having to define custom interfaces.

[Lms24]

Hey @Talb2005 if you're talking about Sentry's CSP reporting feature, then the SDK is not involved in sending these events. The browser directly sends them to the Sentry ingestion endpoints. Why would you need this additional EventType?

[Talb2005]

You're right — CSP reports skip the SDK and beforeSend. Turns out I trusted ChatGPT, which sent me on a wild goose chase to filter them there. My bad for believing the robot. 🤖🙃

Closing this issue, thanks for the clarification!