Bug 817674 - Add CSP Linting step

I assume this code (scanning for inline elements and event handler keywords known to be) is working, and you're asking about the code that loads the `.html` files and looks for CSP violations.