koehnlein, (edited ) I had trouble with Content-Security-Policy reporting on a password protected staging environment in combination with Firefox. I found a nice solution and blogged about it:
https://www.koehnlein.eu/en/blog/2024/csp-reporting-basic-auth/