"Content-Security-Policy-Report-Only", "default-src 'self'; report-uri https://attacat.de:8666/logger/log.jsp"