Bug 1056882: disallow cross-origin imports

This should prevent the polyfill from bypassing the most CSP issues indicated in bug 1056882.