Added CSP protection with reporting as option