trusted-types/trusted-types-eval-reporting-report-only.tentative.https.html.headers

Content-Security-Policy-Report-Only: trusted-types *
Content-Security-Policy: script-src http: https: 'nonce-123' 'unsafe-eval'
Content-Security-Policy: plugin-types bla/blubb