reportOnly

Includes the Content-Security-Policy-Report-Only header in the response.