Content Security Policy

Try Content Security Policy in report-only mode before enforcing it

CSP report-only mode reveals potential policy violations without blocking them. Use reports to test real workflows before enabling enforcement.