trusted-types/trusted-types-eval-reporting.tentative.https.html.headers

Content-Security-Policy: trusted-types *
Content-Security-Policy: script-src http: https: 'nonce-123' 'unsafe-eval'
Content-Security-Policy: plugin-types bla/blubb
Content-Security-Policy: require-trusted-types-for 'script'