From 2c141901c66739029e261695a4dacfdf06c029e2 Mon Sep 17 00:00:00 2001
From: Yoav Weiss <yoav.weiss@shopify.com>
Date: Thu, 28 Nov 2024 14:43:23 +0100
Subject: [PATCH] fix example

---
 index.bs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/index.bs b/index.bs
index d2b1fc9022..dd99f5f508 100644
--- a/index.bs
+++ b/index.bs
@@ -1660,7 +1660,7 @@ this algorithm returns normally if compilation is allowed, and throws a
   When a document's response contains the headers:
 ```http
 Reporting-Endpoints: hashes-endpoint="https://example.com/reports"
-Content-Security-Policy: report-hash; report-to hashes-endpoint
+Content-Security-Policy: script-src 'report-sha256'; report-to hashes-endpoint
 ```
   and the document loads the script "main.js", a report similar to the following one will be sent:
 ```http