Bug 817674 - Add CSP Linting step

I'm confused by this function, as you don't use `filename` anywhere. Assuming that you are manually setting `cspframe.innerHTML` in an attempt to trigger a CSP violation.