https://www.w3.org/TR/reporting-1/#generate-a-report performs some, but not all steps of https://www.w3.org/TR/CSP3/#strip-url-for-use-in-reports Most notably, it skips the first step where it skips for non-http URLs. Is it intentional that this algorithm is not reused? For reusability and consistency among specifications, I would expect the CSP implementation to be suitable for this use case.