Content-Security-Policy: font-src 'none'; report-uri http://mochi.test:8888/foo.sjs