Bug 885433 - CSP should not block inline scripts or eval unless script-src or default-src are included. r=imelven, a=lsblakk
Bug 888172 - CSP 1.0 does not process 'unsafe-inline' or 'unsafe-eval' for default-src. r=imelven a=lsblakk