evilpacket/helmet — pull request #82 by pinktrink (2014-10-21 21:16:20+00:00)
Title: Do not send CSP for Android Browser < 4.4.

Android Browser < 4.4 doesn't simply silently fail when CSP headers are sent, as one might expect. It just doesn't load _any_ resources.