Bowser violates CSP due to inject of owr.js

Bowser does treat the locally injected owr.js as insecure and thus fails to load it for any pages which implemented a CSP.

Refused to connect to 'http://localhost:10717/owr.js' because it violates the following Content Security Policy directive: "connect-src 'self' wss://spreed.me/ws blob:".
13.01.2016 17:13:43
SecurityError: DOM Exception 18: An attempt was made to break through the security policy of the user agent.

This essentially makes it impossible to support Bowser with Spreed WebRTC as configured on https://spreed.me/ - The question for Bowser support came up in https://github.com/strukturag/spreed-webrtc/issues/251

Start by reproducing the CSP failure on https://spreed.me/ and inspect how the locally injected owr.js is loaded. Compare the browser console error with the CSP directive, then verify that Bowser with Spreed WebRTC can load owr.js on a CSP-protected page.

Written by the indexing model from the issue text.