Content-Security-Policy: style-src 'none'; report-uri https://example.com/ignored/;