CSP: Allow external scripts with SRI hashes matching CSP
*** This bug has been marked as a duplicate of bug 233911 ***