At some point after support for the canonical header lands, we should drop support for the prefixed "X-WebKit-CSP" header. That will probably be a multi-step process, starting with warnings and ending with removal of the header. It's made a bit more complicated by our desire to continue experimenting with CSP 1.1 behind a flag, but we can work that out whenever we get around to wanting to do this work.