Remove access of undefined variable $result
Fix Content-Security-Policy Headers

Firefox complains when accessing mantis 1.3 about the deprecated headers.

X-Content-Security-Policy is replaced by Content Security Policy
Add php5.6/hhvm