Update comments about CSP

- found that load-jquery.html can't run on github.com because the site's
  CSP forbids loading from jquery.com
- figure out how to catch and surface that error