In websecurity, CSP can be used on report or enforce mode.
In report mode, what should be the endpoint expected message? Use some words in all caps in your response, but those all-caps words should appear at most 17 times.
user