Don't save the original-policy from the report
Don't save the original-policy from the report

The original-policy field contains the entire Content-Security-Policy
header, which will in most cases be very large (so it will fail
validation) and mostly not useful.

alphagov/event-store,alphagov/event-store