Make sure to CSPify main document first, load platform.js first in th…

…e output js file.

lib/vulcan.js

@@ -301,14 +301,14 @@ function handleMainDocument() {
       }
     };
 
+    // CSPify main page
+    $('script').each(fn).remove();
+
     // CSPify imports
     var tempoutput = cheerio.load(output);
     tempoutput('script').each(fn).remove();
     output = tempoutput.html();
 
-    // CSPify main page
-    $('script').each(fn).remove();
-
     // join scripts with ';' to prevent breakages due to EOF semicolon insertion
     var script_name = path.basename(options.output, '.html') + '.js';
     fs.writeFileSync(path.resolve(options.outputDir, script_name), scripts.join(';' + EOL), 'utf8');