CSP 차단 출처 분류 보강

lib/csp-report.js

@@ -71,14 +71,14 @@ export const normalizeCspBlockedOrigin = (value) => {
   const normalized = String(value || '').trim().toLowerCase()
 
   if (!normalized) {
-    return 'unknown'
+    return 'empty'
   }
 
   if (['inline', 'eval', 'self'].includes(normalized)) {
     return normalized
   }
 
-  if (/^(data|blob|filesystem):/.test(normalized)) {
+  if (/^(about|data|blob|filesystem|chrome-extension|moz-extension|safari-web-extension|ms-browser-extension):/.test(normalized)) {
     return `${normalized.split(':', 1)[0]}:`
   }