chromium/third_party/blink/web_tests/external/wpt/trusted-types/trusted-types-eval-reporting-report-only.html.headers

Content-Security-Policy: script-src http: https: 'nonce-123' 'unsafe-eval'
Content-Security-Policy: object-src 'none'
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'