Add a new check to find out if CSP is reporting somewhere

[st3fan]

Ideally we later change that to see if the site is reporting CSP violations to our reporting server.