Includes the Content-Security-Policy-Report-Only header in the response.
Content-Security-Policy-Report-Only