new setting 'content-security-policy'

new setting 'content-security-policy'

Add a new setting 'content-security-policy', that will set the
'Content-Security-Policy' HTTP-Header on the response, before webkit
processing it.

This setting allow to implement a request-policy based on WebKit
security feature, by whitelisting where the application expects to load
resources.