Bug 832193 - Content Security Policy: a source of *.something.com is mistakenly interpreted as a source of http://*:80 (r=sstamm)