-
Q. for Content Security Policy (CSP) Gods like @mikewest: Could report-uri (developers.google.com/web/fundamentals/security/prevent-mixed-content/fixing-mixed-content?hl=en#finding-mixed-content-with-content-security-policy) be abused for tracking (http "pixel")?