moved inline style and js to different files. merged event handler and non-controller parts out of scanctrl.js to a main.js. added CSP in meta tag. but we have to allow eval/Function because of acorn.js :(
Merge pull request #26 from mozilla/csp-rewrite

rewriting html/js/css to support CSP