Fix bug 946512 - Implement Content Security Policy