Zach Tollman goes deep on Content Security Policy reporting in browsers.