The code for CSP checks originally lived partially in Blink and partially on the browser side, but this will be subject to change with PlzNavigate.

For initial impl we can probably abort prefetching when CSP is encountered.