Haketilo

Fix license notices on JS and SH files

Other files have been left, as no model notice is available

rename the extension to "Haketilo"

Make it impossible to check "Allow native scripts" for pages with payload.

simplify CSP handling

All page's CSP rules are now removed when a payload is to be injected. When there is no payload, CSP rules are not modified but only supplemented with Hachette's own.

merge changes before version 0.1

only apply stream filter modifications when reasonably necessary

enable toggling of global script blocking policy\n\nThis commit also introduces `light_storage' module which is later going to replace the storage code we use right now.\nAlso included is a hack to properly display scrollbars under Mozilla (needs testing on newer Mozilla browsers).

put simplest, asynchronous local storage operations in a separate file

filter HTTP request headers to remove Hachette cookies in case they slip through

improve signing\n\nSignature timestamp is now handled in a saner way. Sha256 implementation is no longer pulled in contexts that don't require it.