Add 'report-sample' to script-src CSP directive GitOrigin-RevId: 1a2c26339e7ef353a89fc264b0f186a1d313e1bc