Update csp.js
Merge pull request #2 from KevinMartin/patch-1

Fix error when `options.reportOnly` is set.