default-src 'self'; report-uri https://endpoint.com; report-to groupname