Link: <https://arturjanc.com/foo2.js>; rel=preload; as=script; nonce=123
Content-Security-Policy: script-src 'nonce-123'; object-src 'none'; report-uri /foo