Figure out if we want isolated world/extension-content-script CSPs to support violation reporting. This entails figuring out if there is any possibility of leaking urls etc to extensions using this feature.