The CSP mode in force: the CSP_MODE lever when it names one of the three, otherwise
report-only on the paid plan and off on free. An unrecognised value falls back to that
default rather than to off, so a typo cannot switch the baseline off on a paid site.
The CSP mode in force: the
CSP_MODElever when it names one of the three, otherwisereport-onlyon the paid plan andoffon free. An unrecognised value falls back to that default rather than tooff, so a typo cannot switch the baseline off on a paid site.