Content Security Policy (CSP) : first pass
: add CSP API
: add AuraCSPFilter
: add filter to web.xml
CSP : add report endpoint
: start gathering example reports with a fully locked-down policy
: add file headers
CSP : documentation and slight cleanup
CSP
: changes to LoggingService
: set policy to allow inline JS/CSS for framework files only
CSP : quick fixes found during review
Merging origin/jtroup/master-pending-csp into master