content-security-policy/plugin-types/plugintypes-nourl-allowed.html.sub.headers

Set-Cookie: plugintypes-nourl-allowed={{$id:uuid()}}; Path=/content-security-policy/plugin-types/
Content-Security-Policy: plugin-types application/x-shockwave-flash;  report-uri /reporting/resources/report.py?op=put&reportID={{$id}}