CSP 1.1: Be clear about not supporting report-only inside <meta>.