Use the report-only header name (Content-Security-Policy-Report-Only).
Content-Security-Policy-Report-Only
Usage
Source
ContentSecurityPolicy.report_only()