Bug 945460 - Enable Content Security Policy