Content Security Policy (CSP) violations are reported natively by browsers whenever a page tries to load or execute a resource that its CSP header disallows. New Relic Browser can capture these as SecurityPolicyViolation events, giving you visibility into blocked resources, report-only vs. enforced policy behavior, and signs of client-side attacks like clickjacking or malicious script injection.