Adding onHeadersReceived listener to modify Content-Security-Policy. Partially fixes #4
Adding option to add unsafe-eval and unsafe-inline to script-src in CSP. Fixes #4