I'm using babel, but even if you don't use Babel here is the issue. You have 2 contexts: web and manager. If you don't want everything on the manager that doesn't come from your site (eg. images etc from another site) and you want to be informed about violations against it then you need a report-uri in your csp header.
The problem is that if you are in another context you are not allowed to call the other context...But you can only specify 1 report-uri for HPKP and CSP... How can I make the reportmanager page accessible from any context? So an accessible website wide page...
