http/tests/security/contentSecurityPolicy/report-only-from-header.php

<?php
header("X-WebKit-CSP-Report-Only: script-src 'self'; report-uri resources/save-report.php");
?>
<script>
// This script block will trigger a violation report but shouldn't be blocked.
alert('PASS');
</script>
<script src="resources/go-to-echo-report.js"></script>