Content-Type: text/html
Content-Security-Policy-Report-Only: img-src 'self';