Log XHR URLs on your site to build a CSP

xhr-logger.js

(function(XHR) {
  var open = XHR.prototype.open;
  var send = XHR.prototype.send;

  XHR.prototype.open = function(method, url, async, user, pass) {
    this._url = url;
    open.call(this, method, url, async, user, pass);
  };

  XHR.prototype.send = function(data) {
    var url = this._url;
    console.log(url);
    send.call(this, data);
  }
})(XMLHttpRequest);