Fixing 'default-src' in CSP2.

This addresses w3c/webappsec#514 in the editor's draft. @hillbrad
will work out what that means for the CR->PR->REC transitions.

2/index.html

@@ -88,7 +88,7 @@
   <div class="head">
    <p data-fill-with="logo"><a class="logo" href="http://www.w3.org/"> <img alt="W3C" height="48" src="https://www.w3.org/Icons/w3c_home" width="72"> </a> </p>
    <h1 class="p-name no-ref" id="title">Content Security Policy Level 2</h1>
-   <h2 class="no-num no-toc no-ref heading settled" id="subtitle"><span class="content">Editor’s Draft, <time class="dt-updated" datetime="2015-08-29">29 August 2015</time></span></h2>
+   <h2 class="no-num no-toc no-ref heading settled" id="subtitle"><span class="content">Editor’s Draft, <time class="dt-updated" datetime="2016-04-25">25 April 2016</time></span></h2>
    <div data-fill-with="spec-metadata">
     <dl>
      <dt>This version:
@@ -1418,8 +1418,7 @@ <h3 class="heading settled" data-level="7.4" id="directive-default-src"><span cl
 <pre>directive-name    = "default-src"
 directive-value   = <a data-link-type="dfn" href="#source_list">source-list</a>
 </pre>
-     <p>Let the <dfn data-dfn-type="dfn" data-noexport="" id="default-sources">default sources<a class="self-link" href="#default-sources"></a></dfn> be the result of <a data-link-type="dfn" href="#parse-a-source-list">parsing the <code>default-src</code> directive’s value as a source list</a> if a <code>default-src</code> directive is explicitly specified, and otherwise the U+002A ASTERISK
-    character (*).</p>
+     <p>Let the <dfn data-dfn-type="dfn" data-noexport="" id="default-sources">default sources<a class="self-link" href="#default-sources"></a></dfn> be the result of <a data-link-type="dfn" href="#parse-a-source-list">parsing the <code>default-src</code> directive’s value as a source list</a> if a <code>default-src</code> directive is explicitly specified, and and otherwise a list including all possible sources.</p>
      <p>To enforce the <code>default-src</code> directive, the user agent
     MUST enforce the following directives:</p>
      <ul>

2/index.src.html

@@ -2154,8 +2154,8 @@ <h3 id="directive-default-src"><code>default-src</code></h3>
     Let the <dfn>default sources</dfn> be the result of
     <a lt="parse a source list">parsing the <code>default-src</code>
     directive's value as a source list</a> if a <code>default-src</code>
-    directive is explicitly specified, and otherwise the U+002A ASTERISK
-    character (*).
+    directive is explicitly specified, and otherwise a list including all
+    possible sources.
 
     To enforce the <code>default-src</code> directive, the user agent
     MUST enforce the following directives: