[4.0] Check whether CSP is enabled and enabled by the current client

[zero-24]

Summary of Changes

Check whether CSP is enabled and enabled by the current client

Testing Instructions

• Apply this PR
• configure the CSP via the options in com_csp
• check that the client filter (Site, Admin, both) works

Expected result

You can configure the CSP client

Actual result

You can not configure the CSP client

Documentation Changes Required

Yes: https://help.joomla.org/proxy?keyref=Help40:Components_CSP_Reports_Options && https://help.joomla.org/proxy?keyref=J4.x:Http_Header_Management

[richard67]

I have tested this item ✅ successfully on 9d01286

Works as expected:

• Client (admin/site/both) can be configured in the options as soon as csp is enabled.
• Stuff is only collected for the configured client.

  ---

  _{This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/29601.}

[Quy]

I have tested this item ✅ successfully on 9d01286

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/29601.}

[Quy]

RTC

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/29601.}

[wilsonge]

Thanks! Not sure whether this should be an option for the API or not. There should never be anything because it's json.... but given it's supposed to be a fail safe anyhow?