Content-Security-Policy (closes #626)
Squashed commit of the following:

commit 440cb26a90a39347179e658692b26065ac15f298
Author: Raymond Penners <raymond.penners@intenct.nl>
Date:   Sat Jul 26 16:56:57 2014 +0200

    Integrated Content-Security-Policy related fix

commit d2a723972124959d52f6c23526aa008ae0e1c168
Author: andrean <andrean.franc@gmail.com>
Date:   Thu Jul 24 14:09:35 2014 +0200

    fix unittest of facebook provider

commit 6a4652798b60e19c81a57cc5146e0703390dfdf3
Author: andrean <andrean.franc@gmail.com>
Date:   Thu Jul 24 13:57:52 2014 +0200

    escape quotes of json parameters

commit 3d66ec3410cc7ea88ad5b959089003a6b7cfd439
Author: andrean <andrean.franc@gmail.com>
Date:   Thu Jul 24 13:34:23 2014 +0200

    fix #626 - content-security-policy issue with inline javascript used by the facebook provider