title: XML parsing error for Content Security Policy
body: <p>I'm having trouble getting the XML syntax correct for my blog's content security policy. It works when it's simple, but as soon as I add more policies, I get a parsing error.</p>
  
  <p><strong>Current policy (works):</strong></p>
  
  <p><code>&lt;meta http-equiv='Content-Security-Policy' content='upgrade-insecure-requests'/&gt;</code></p>
  
  <p><strong>New policy (parse error):</strong></p>
  
  <p><code>&lt;meta http-equiv='Content-Security-Policy' content='upgrade-insecure-requests';'report-uri' 'https://redacted.report-uri.com/r/d/csp/enforce'/&gt;</code></p>
  
  <p><strong>Error:</strong> Element type "meta" must be followed by either attribute specifications, ">" or "/>"</p>
  
  <p>I've read up on XML syntax and looked at examples confirming that the contents should be delimited with a semicolon, and each policy is space delimited. I've tried with and without quotes on the strings, and adjusting the spacing, but I just can't figure out this parsing error. I am more familiar with Python, so I'm sure this is a simple issue to someone who is more experienced with XML. Thank you for helping out an XML newbie! :)</p>