Limit CSP cache key size
Bug 607067 CSP violation messages for base restrictions are awful
Bug 909241 - Remove console logging from sendReports() and into its own function, logToConsole()
Implement multi-policy CSP (CSP 1.0 spec)
Update tests for multi-policy CSP
Bug 916881 - Remove stray refinePolicy entry in CSPUtils.jsm
Bug 925186 - Prioritize CSP 1.0 headers over X-CSP headers
Don't return early when "*" is found (breaks "style-src * 'unsafe-inline'" etc.)
Fix Bug #916881 bustage: add missing parenthesis
Revert "Always disable FF compatmode on Facebook to prevent CSP violation errors."

This reverts commit 35d04f15099503eef9dfe99ff20850a21bd720a9.
CSP1.0 sec fix: Treat XSLT as script, not as style, in accordance with the spec.
(CVE-2014-1485)
Merge branch 'CSP-work'
Version bump