CSP: Inline element behavior processing.

[mikewest]

It looks like the work that landed in WHATWG's HTML as whatwg/html#384 made it only partially into the current HTML 5.1 draft:

1. Links to the "Should element's inline behavior be blocked by Content Security Policy?" algorithm are broken (they simply aren't linkified). See the occurrences right around https://w3c.github.io/html/webappapis.html#event-handler-content-event-handler-content-attribute and http://w3c.github.io/html/dom.html#the-style-attribute for example.
2. The algorithm isn't called from "prepare a script" https://w3c.github.io/html/semantics-scripting.html#prepare-a-script (and the formatting in that section is strange).
3. The algorithm isn't called from "update a style block" http://w3c.github.io/html/document-metadata.html#update-a-style-block.

Please take a look. :)

[mikewest]

Note that whatwg/html#1051 is in-flight, and adds an argument to this algorithm.