CVE-2021-23969 affects multiple packages. As specified in the W3C Content Security Policy draft, when creating a violation report, "User agents need to ensure that the source file is the URL requested by the page, pre-redirects. See references for individual vulnerability details.