---
title: "SecurityPolicyViolationEvent | JavaScript maps SDK"
description: "Documentation for MapTiler SDK"
---

> For AI agents: a documentation index is available at [/llms.txt](https://docs.maptiler.com/llms.txt). Markdown versions of all pages are available by appending .md to any URL.

# Interface SecurityPolicyViolationEvent

The **`SecurityPolicyViolationEvent`** interface inherits from Event, and represents the event object of a securitypolicyviolation event sent on an Element, Document, or worker when its Content Security Policy (CSP) is violated.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent)

interface SecurityPolicyViolationEvent {  
    [AT\_TARGET](#at_target): 2;  
    [blockedURI](#blockeduri): string;  
    [bubbles](#bubbles): boolean;  
    [BUBBLING\_PHASE](#bubbling_phase): 3;  
    [cancelable](#cancelable): boolean;  
    [cancelBubble](#cancelbubble): boolean;  
    [CAPTURING\_PHASE](#capturing_phase): 1;  
    [columnNumber](#columnnumber): number;  
    [composed](#composed): boolean;  
    [currentTarget](#currenttarget): EventTarget | null;  
    [defaultPrevented](#defaultprevented): boolean;  
    [disposition](#disposition): [SecurityPolicyViolationEventDisposition](https://docs.maptiler.com/sdk-js/api-reference/types/Externals.SecurityPolicyViolationEventDisposition/);  
    [documentURI](#documenturi): string;  
    [effectiveDirective](#effectivedirective): string;  
    [eventPhase](#eventphase): number;  
    [isTrusted](#istrusted): boolean;  
    [lineNumber](#linenumber): number;  
    [NONE](#none): 0;  
    [originalPolicy](#originalpolicy): string;  
    [referrer](#referrer): string;  
    [returnValue](#returnvalue): boolean;  
    [sample](#sample): string;  
    [sourceFile](#sourcefile): string;  
    [srcElement](#srcelement): EventTarget | null;  
    [statusCode](#statuscode): number;  
    [target](#target): EventTarget | null;  
    [timeStamp](#timestamp): number;  
    [type](#type): string;  
    [violatedDirective](#violateddirective): string;  
    [composedPath](#composedpath-1)(): EventTarget\[\];  
    [initEvent](#initevent-1)(type: string, bubbles?: boolean, cancelable?: boolean): void;  
    [preventDefault](#preventdefault-1)(): void;  
    [stopImmediatePropagation](#stopimmediatepropagation-1)(): void;  
    [stopPropagation](#stoppropagation-1)(): void;  
}

#### Hierarchy

-   Event
    -   SecurityPolicyViolationEvent

##### Index

### Properties[](#properties)

[AT\_TARGET](#at_target) [blockedURI](#blockeduri) [bubbles](#bubbles) [BUBBLING\_PHASE](#bubbling_phase) [cancelable](#cancelable) [cancelBubble](#cancelbubble) [CAPTURING\_PHASE](#capturing_phase) [columnNumber](#columnnumber) [composed](#composed) [currentTarget](#currenttarget) [defaultPrevented](#defaultprevented) [disposition](#disposition) [documentURI](#documenturi) [effectiveDirective](#effectivedirective) [eventPhase](#eventphase) [isTrusted](#istrusted) [lineNumber](#linenumber) [NONE](#none) [originalPolicy](#originalpolicy) [referrer](#referrer) [returnValue](#returnvalue) [sample](#sample) [sourceFile](#sourcefile) [srcElement](#srcelement) [statusCode](#statuscode) [target](#target) [timeStamp](#timestamp) [type](#type) [violatedDirective](#violateddirective)

### Methods[](#methods)

[composedPath](#composedpath) [initEvent](#initevent) [preventDefault](#preventdefault) [stopImmediatePropagation](#stopimmediatepropagation) [stopPropagation](#stoppropagation)

## Properties[](#properties-1)

### `Readonly`AT\_TARGET[](#at_target)

AT\_TARGET: 2

Inherited from Event.AT\_TARGET

### `Readonly`blockedURI[](#blockeduri)

blockedURI: string

The **`blockedURI`** read-only property of the SecurityPolicyViolationEvent interface is a string representing the URI of the resource that was blocked because it violates a Content Security Policy (CSP).

[MDN Reference](https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent/blockedURI)

### `Readonly`bubbles[](#bubbles)

bubbles: boolean

The **`bubbles`** read-only property of the Event interface indicates whether the event bubbles up through the DOM tree or not.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/bubbles)

Inherited from Event.bubbles

### `Readonly`BUBBLING\_PHASE[](#bubbling_phase)

BUBBLING\_PHASE: 3

Inherited from Event.BUBBLING\_PHASE

### `Readonly`cancelable[](#cancelable)

cancelable: boolean

The **`cancelable`** read-only property of the Event interface indicates whether the event can be canceled, and therefore prevented as if the event never happened.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/cancelable)

Inherited from Event.cancelable

### cancelBubble[](#cancelbubble)

cancelBubble: boolean

The **`cancelBubble`** property of the Event interface is deprecated. Use Event.stopPropagation() instead. Setting its value to true before returning from an event handler prevents propagation of the event. In later implementations, setting this to false does nothing. See Browser compatibility for details.

#### Deprecated[](#deprecated)

[MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/cancelBubble)

Inherited from Event.cancelBubble

### `Readonly`CAPTURING\_PHASE[](#capturing_phase)

CAPTURING\_PHASE: 1

Inherited from Event.CAPTURING\_PHASE

### `Readonly`columnNumber[](#columnnumber)

columnNumber: number

The **`columnNumber`** read-only property of the SecurityPolicyViolationEvent interface is the column number in the document or worker script at which the Content Security Policy (CSP) violation occurred.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent/columnNumber)

### `Readonly`composed[](#composed)

composed: boolean

The read-only **`composed`** property of the Event interface returns a boolean value which indicates whether or not the event will propagate across the shadow DOM boundary into the standard DOM.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/composed)

Inherited from Event.composed

### `Readonly`currentTarget[](#currenttarget)

currentTarget: EventTarget | null

The **`currentTarget`** read-only property of the Event interface identifies the element to which the event handler has been attached.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/currentTarget)

Inherited from [KeyboardEvent](https://docs.maptiler.com/sdk-js/api-reference/interfaces/Externals.KeyboardEvent/).[currentTarget](https://docs.maptiler.com/sdk-js/api-reference/interfaces/Externals.KeyboardEvent/#currenttarget)

### `Readonly`defaultPrevented[](#defaultprevented)

defaultPrevented: boolean

The **`defaultPrevented`** read-only property of the Event interface returns a boolean value indicating whether or not the call to Event.preventDefault() canceled the event.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/defaultPrevented)

Inherited from Event.defaultPrevented

### `Readonly`disposition[](#disposition)

disposition: [SecurityPolicyViolationEventDisposition](https://docs.maptiler.com/sdk-js/api-reference/types/Externals.SecurityPolicyViolationEventDisposition/)

The **`disposition`** read-only property of the SecurityPolicyViolationEvent interface indicates how the violated Content Security Policy (CSP) is configured to be treated by the user agent.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent/disposition)

### `Readonly`documentURI[](#documenturi)

documentURI: string

The **`documentURI`** read-only property of the SecurityPolicyViolationEvent interface is a string representing the URI of the document or worker in which the Content Security Policy (CSP) violation occurred.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent/documentURI)

### `Readonly`effectiveDirective[](#effectivedirective)

effectiveDirective: string

The **`effectiveDirective`** read-only property of the SecurityPolicyViolationEvent interface is a string representing the Content Security Policy (CSP) directive that was violated.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent/effectiveDirective)

### `Readonly`eventPhase[](#eventphase)

eventPhase: number

The **`eventPhase`** read-only property of the Event interface indicates which phase of the event flow is currently being evaluated.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/eventPhase)

Inherited from Event.eventPhase

### `Readonly`isTrusted[](#istrusted)

isTrusted: boolean

The **`isTrusted`** read-only property of the Event interface is a boolean value that is true when the event was generated by the user agent (including via user actions and programmatic methods such as HTMLElement.focus()), and false when the event was dispatched via EventTarget.dispatchEvent(). The only exception is the click event, which initializes the isTrusted property to false in user agents.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/isTrusted)

Inherited from Event.isTrusted

### `Readonly`lineNumber[](#linenumber)

lineNumber: number

The **`lineNumber`** read-only property of the SecurityPolicyViolationEvent interface is the line number in the document or worker script at which the Content Security Policy (CSP) violation occurred.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent/lineNumber)

### `Readonly`NONE[](#none)

NONE: 0

Inherited from Event.NONE

### `Readonly`originalPolicy[](#originalpolicy)

originalPolicy: string

The **`originalPolicy`** read-only property of the SecurityPolicyViolationEvent interface is a string containing the Content Security Policy (CSP) whose enforcement uncovered the violation.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent/originalPolicy)

### `Readonly`referrer[](#referrer)

referrer: string

The **`referrer`** read-only property of the SecurityPolicyViolationEvent interface is a string representing the referrer for the resources whose Content Security Policy (CSP) was violated. This will be a URL or null.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent/referrer)

### returnValue[](#returnvalue)

returnValue: boolean

The Event property **`returnValue`** indicates whether the default action for this event has been prevented or not.

#### Deprecated[](#deprecated-1)

[MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/returnValue)

Inherited from Event.returnValue

### `Readonly`sample[](#sample)

sample: string

The **`sample`** read-only property of the SecurityPolicyViolationEvent interface is a string representing a sample of the resource that caused the Content Security Policy (CSP) violation.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent/sample)

### `Readonly`sourceFile[](#sourcefile)

sourceFile: string

The **`sourceFile`** read-only property of the SecurityPolicyViolationEvent interface is a string representing the URL of the script in which the Content Security Policy (CSP) violation occurred.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent/sourceFile)

### `Readonly`srcElement[](#srcelement)

srcElement: EventTarget | null

The deprecated **`Event.srcElement`** is an alias for the Event.target property. Use Event.target instead.

#### Deprecated[](#deprecated-2)

[MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/srcElement)

Inherited from [KeyboardEvent](https://docs.maptiler.com/sdk-js/api-reference/interfaces/Externals.KeyboardEvent/).[srcElement](https://docs.maptiler.com/sdk-js/api-reference/interfaces/Externals.KeyboardEvent/#srcelement)

### `Readonly`statusCode[](#statuscode)

statusCode: number

The **`statusCode`** read-only property of the SecurityPolicyViolationEvent interface is a number representing the HTTP status code of the window or worker in which the Content Security Policy (CSP) violation occurred.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent/statusCode)

### `Readonly`target[](#target)

target: EventTarget | null

The read-only **`target`** property of the Event interface is a reference to the object onto which the event was dispatched. It is different from Event.currentTarget when the event handler is called during the bubbling or capturing phase of the event.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/target)

Inherited from Event.target

### `Readonly`timeStamp[](#timestamp)

timeStamp: number

The **`timeStamp`** read-only property of the Event interface returns the time (in milliseconds) at which the event was created.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/timeStamp)

Inherited from Event.timeStamp

### `Readonly`type[](#type)

type: string

The **`type`** read-only property of the Event interface returns a string containing the event's type. It is set when the event is constructed and is the name commonly used to refer to the specific event, such as click, load, or error.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/type)

Inherited from Event.type

### `Readonly`violatedDirective[](#violateddirective)

violatedDirective: string

The **`violatedDirective`** read-only property of the SecurityPolicyViolationEvent interface is a string representing the Content Security Policy (CSP) directive that was violated.

[MDN Reference](https://developer.mozilla.org/docs/Web/API/SecurityPolicyViolationEvent/violatedDirective)

## Methods[](#methods-1)

### composedPath[](#composedpath)

-   composedPath(): EventTarget\[\][](#composedpath-1)
    
    The **`composedPath()`** method of the Event interface returns the event's path which is an array of the objects on which listeners will be invoked. This does not include nodes in shadow trees if the shadow root was created with its ShadowRoot.mode closed.
    
    [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/composedPath)
    
    #### Returns EventTarget\[\]
    
    Inherited from Event.composedPath
    

### initEvent[](#initevent)

-   initEvent(type: string, bubbles?: boolean, cancelable?: boolean): void[](#initevent-1)
    
    The **`Event.initEvent()`** method is used to initialize the value of an event created using Document.createEvent().
    
    #### Parameters
    
    -   type: string
    -   `Optional`bubbles: boolean
    -   `Optional`cancelable: boolean
    
    #### Returns void
    
    #### Deprecated[](#deprecated-3)
    
    [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/initEvent)
    
    Inherited from Event.initEvent
    

### preventDefault[](#preventdefault)

-   preventDefault(): void[](#preventdefault-1)
    
    The **`preventDefault()`** method of the Event interface tells the user agent that the event is being explicitly handled, so its default action, such as page scrolling, link navigation, or pasting text, should not be taken.
    
    [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/preventDefault)
    
    #### Returns void
    
    Inherited from Event.preventDefault
    

### stopImmediatePropagation[](#stopimmediatepropagation)

-   stopImmediatePropagation(): void[](#stopimmediatepropagation-1)
    
    The **`stopImmediatePropagation()`** method of the Event interface prevents other listeners of the same event from being called.
    
    [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/stopImmediatePropagation)
    
    #### Returns void
    
    Inherited from Event.stopImmediatePropagation
    

### stopPropagation[](#stoppropagation)

-   stopPropagation(): void[](#stoppropagation-1)
    
    The **`stopPropagation()`** method of the Event interface prevents further propagation of the current event in the capturing and bubbling phases. It does not, however, prevent any default behaviors from occurring; for instance, clicks on links are still processed. If you want to stop those behaviors, see the preventDefault() method. It also does not prevent propagation to other event-handlers of the current element. If you want to stop those, see stopImmediatePropagation().
    
    [MDN Reference](https://developer.mozilla.org/docs/Web/API/Event/stopPropagation)
    
    #### Returns void
    
    Inherited from Event.stopPropagation