fix(readme): typos

Co-Authored-By: Jimmy King <jimmy.king@aexp.com>

docs/api/server/Environment-Variables.md

@@ -435,7 +435,7 @@ ONE_CLIENT_REPORTING_URL=undefined
 * ✅ Production
 * ✅ Development
 
-URL where browser should send client side errors to. Defaults to `/_/report/security/csp-violation` if `NODE_ENV` is set to
+URL where browser should send [CSP](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy) errors to. Defaults to `/_/report/security/csp-violation` if `NODE_ENV` is set to
 `development` and is undefined otherwise.
 
 **Shape**
@@ -451,10 +451,9 @@ ONE_CLIENT_CSP_REPORTING_URL=https://my-app-csp-violations.example.com/client
 **Default Value**
 ```bash
 # if NODE_ENV=development
-ONE_CLIENT_REPORTING_URL=/_/report/security/csp-violation
+ONE_CLIENT_CSP_REPORTING_URL=/_/report/security/csp-violation
 # else
-ONE_CLIENT_REPORTING_URL=undefined
-```
+ONE_CLIENT_CSP_REPORTING_URL=undefined
 
 
 ## `ONE_CLIENT_ROOT_MODULE_NAME`
@@ -573,4 +572,4 @@ ONE_MAP_POLLING_MIN=0
 [`HTTPS_PUBLIC_CERT_CHAIN_PATH`]: #https_public_cert_chain_path
 [`HTTPS_TRUSTED_CA_PATH`]: #https_trusted_ca_path
 [`HTTPS_PRIVATE_KEY_PASS_FILE_PATH`]: #https_private_key_pass_file_path
-[`HTTPS_PORT`]: #https_port
+[`HTTPS_PORT`]: #https_port