Merge pull request #3899 from overleaf/ae-csp-report-sample

Add 'report-sample' to script-src CSP directive

GitOrigin-RevId: 1a2c26339e7ef353a89fc264b0f186a1d313e1bc

services/web/app/src/infrastructure/CSP.js

@@ -24,7 +24,7 @@ module.exports = function({
         res.locals.scriptNonce = scriptNonce
 
         const directives = [
-          `script-src 'nonce-${scriptNonce}' 'unsafe-inline' 'strict-dynamic' https:`,
+          `script-src 'nonce-${scriptNonce}' 'unsafe-inline' 'strict-dynamic' https: 'report-sample'`,
           `object-src 'none'`,
           `base-uri 'none'`
         ]