Includes: Adding relevant boilerplate for WebAppSec.

I'm starting to experiment with porting Content Security Policy over to
bikeshed. This patch contains the boilerplate files I've needed thus
far. I'm sure I'll find more as I go. :)
Merge pull request #137 from mikewest/webappsec

Includes: Adding relevant boilerplate for WebAppSec.