in csp/middleware.py [0:0]
def get_policy_parts( self, request: HttpRequest, response: HttpResponseBase, report_only: bool = False,