I`ve tried: (example CSP: script-src 'self'; report-to cspendpoint) 1) Reporting-Endpoints: cspendpoint="https://csp.example.com/reporting-api/csp, https://csp.example.com/" 2) Reporting-Endpoints: cspendpoint="https://csp.example.com/reporting-api/csp",cspendpoint="https://csp.example.com/" Nothing is working. How to specify 2 endpoints for same CSP violation?