Introduce loophole to workaround content security policy violations

Hacked it into the vendored emmet-app script. We'll need to be sure to
reintroduce these hacks if we update the script.
Merge pull request #52 from atom/csp

Introduce loophole to workaround content security policy violations