Apply frame-src content-security-policy to WebUI pages.

Apply frame-src content-security-policy to WebUI pages.

BUG=143003
Committed: http://src.chromium.org/viewvc/chrome?view=rev&revision=153520

[Tom Sepez, 2012-08-21 19:46:24]

Adds the frame-src directive to WebUI Content-security-policies, provding for
exceptions.  Also converts the execption mechanism to a more general per-URL map
to directives, since I expect these will need to be more fine-tuned per URL.

[Evan Stade, 2012-08-21 20:56:21]

lgtm

[Evan Stade, 2012-08-21 20:56:26]

http://codereview.chromium.org/10829465/diff/2002/chrome/browser/ui/webui/chr...
File chrome/browser/ui/webui/chrome_url_data_manager_backend.cc (right):

http://codereview.chromium.org/10829465/diff/2002/chrome/browser/ui/webui/chr...
chrome/browser/ui/webui/chrome_url_data_manager_backend.cc:92: // applied to the
WebUI page.
documentation for what this is a map from and to

[Tom Sepez, 2012-08-21 21:31:28]

On 2012/08/21 20:56:26, Evan Stade wrote:
>
http://codereview.chromium.org/10829465/diff/2002/chrome/browser/ui/webui/chr...
> File chrome/browser/ui/webui/chrome_url_data_manager_backend.cc (right):
> 
>
http://codereview.chromium.org/10829465/diff/2002/chrome/browser/ui/webui/chr...
> chrome/browser/ui/webui/chrome_url_data_manager_backend.cc:92: // applied to
the
> WebUI page.
> documentation for what this is a map from and to
Done.

[commit-bot: I haz the power, 2012-08-27 17:05:33]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/tsepez@chromium.org/10829465/4

[commit-bot: I haz the power, 2012-08-27 19:31:51]

Change committed as 153520