Bug 889320 - [CSP] removes inlined styles and scripts, also HTTP headers

Fixes #3511 and https://bugzilla.mozilla.org/show_bug.cgi?id=889320