mozilla/zamboni — pull request #2499 by andymckay (2014-09-04 00:25:50+00:00)
Title: late updating of CSP

* also removing of SITE_URL where 'self' is already specified
* based on http://www.w3.org/TR/CSP/ "the source expression 'self' represents the set of URIs which are in the same origin as the protected resource"