`script-src https://example.com/path/` should allow `https://example.com/path/to/javascript.js`, but deny `https://example.com/anotherpath/to/another.js`.
We should probably create an ENABLE flag for CSP 1.1 features so we can work on this stuff while the spec is in flux.
*** This bug has been marked as a duplicate of bug 89750 ***