Content-Security-Policy-Report-Only header support added