Content-Security-Policy-Report-Only xml tag support