class Roda::RodaPlugins::ContentSecurityPolicy::Policy

def header_key

The header name to use, depends on whether report only mode has been enabled. 
def header_key
  @report_only ? 'Content-Security-Policy-Report-Only' : 'Content-Security-Policy'
end