Includes: Adding relevant boilerplate for WebAppSec.

I'm starting to experiment with porting Content Security Policy over to
bikeshed. This patch contains the boilerplate files I've needed thus
far. I'm sure I'll find more as I go. :)