> The most commonly disabled security header was CSP Good. It drives me crazy how many user agents modify our site somehow, immediately footgun themselves by h

> The most commonly disabled security header was CSP Good. It drives me crazy how many user agents modify our site somehow, immediately footgun themselves by honoring the CSP, and then send us a report about it. Fully disabling the CSP is reckless overkill but they should indeed be modifying it.