Bug 817674 - Add CSP Linting step

`<iframe mozbrowser>` does not respect app status, see https://bugzilla.mozilla.org/show_bug.cgi?id=858787#c14 for more info. Try it without this attribute (why do you need it?)