Full CSP (content-security-policy-report-only)

x-nonce header:
32a2a530-7af0-42ee-a8c4-9a2abb9fb047
content-security-policy-report-only header:
default-src 'self'; script-src 'report-sample' 'self' 'nonce-32a2a530-7af0-42ee-a8c4-9a2abb9fb047' 'strict-dynamic'; style-src 'report-sample' 'self' 'nonce-32a2a530-7af0-42ee-a8c4-9a2abb9fb047'; connect-src 'self' *.vercel-insights.com plausible.io; font-src 'self' data:; img-src 'self' data:; worker-src 'self' blob:; frame-ancestors 'none'; form-action 'self'

Full CSP | Report Only | Pages router example