Apply content-security-policy to the HTML options page. This is a

chrome/browser/resources/shared/js/options/language_options.js

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // TODO(kochi): Generalize the notification as a component and put it
 // in js/cr/ui/notification.js .
 
 cr.define('options', function() {
   const OptionsPage = options.OptionsPage;
   const LanguageList = options.LanguageList;
@@ skipping 748 matching lines @@
   LanguageOptions.uiLanguageSaved = function() {
     $('language-options-ui-language-button').style.display = 'none';
     $('language-options-ui-notification-bar').style.display = 'block';
   };
 
   // Export
   return {
     LanguageOptions: LanguageOptions
   };
 });