Content-Security-Policy-Report-Only: require-trusted-types-for 'script'