HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=UTF-8
Content-Security-Policy: default-src 'none'; report-uri /report
Content-Length: 351
CSP Demo
Report CSP violation (unsafe-inline script)
Should log:
no options Object {...}requestBody Object {...}blocking Object {...}