Content-Security-Policy: throw if directive value lacks necessary quotes

Content-Security-Policy: throw if directive value lacks necessary quotes #223