Apply content-security-policy to the HTML options page. This is a

chrome/browser/resources/options/certificate_import_error_overlay.js

-// Copyright (c) 2010 The Chromium Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style license that can be
-// found in the LICENSE file.
-
-cr.define('options', function() {
-
-  var OptionsPage = options.OptionsPage;
-
-  /**
-   * CertificateImportErrorOverlay class
-   * Displays a list of certificates and errors.
-   * @class
-   */
-  function CertificateImportErrorOverlay() {
-    OptionsPage.call(this, 'certificateImportErrorOverlay', '',
-                     'certificateImportErrorOverlay');
-  }
-
-  cr.addSingletonGetter(CertificateImportErrorOverlay);
-
-  CertificateImportErrorOverlay.prototype = {
-    // Inherit CertificateImportErrorOverlay from OptionsPage.
-    __proto__: OptionsPage.prototype,
-
-    /**
-     * Initialize the page.
-     */
-    initializePage: function() {
-      // Call base class implementation to start preference initialization.
-      OptionsPage.prototype.initializePage.call(this);
-
-      $('certificateImportErrorOverlayOk').onclick = function(event) {
-        OptionsPage.closeOverlay();
-      };
-    },
-  };
-
-  /**
-   * Show an alert overlay with the given message, button titles, and
-   * callbacks.
-   * @param {string} title The alert title to display to the user.
-   * @param {string} message The alert message to display to the user.
-   * @param {Array} certErrors The list of cert errors.  Each error should have
-   *                           a .name and .error attribute.
-   */
-  CertificateImportErrorOverlay.show = function(title, message, certErrors) {
-    $('certificateImportErrorOverlayTitle').textContent = title;
-    $('certificateImportErrorOverlayMessage').textContent = message;
-
-    ul = $('certificateImportErrorOverlayCertErrors');
-    ul.innerHTML = '';
-    for (var i = 0; i < certErrors.length; ++i) {
-      li = document.createElement("li");
-      li.textContent = localStrings.getStringF('certificateImportErrorFormat',
-                                               certErrors[i].name,
-                                               certErrors[i].error);
-      ul.appendChild(li);
-    }
-
-    OptionsPage.navigateToPage('certificateImportErrorOverlay');
-  }
-
-  // Export
-  return {
-    CertificateImportErrorOverlay: CertificateImportErrorOverlay
-  };
-
-});