twitter/secureheaders — pull request #37 by oreoshake (2013-02-21 01:47:40+00:00)
Title: push the chrome-extension logic to the Webkit strategy, noop elsewhere

Bug from day one: Firefox CSP headers were getting chrome-extension added to each directive. That's a byte-wasting noop. Fix.