Apply content-security-policy to the HTML options page. This is a

chrome/browser/resources/shared/js/options/alert_overlay.js

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 cr.define('options', function() {
   var OptionsPage = options.OptionsPage;
 
   /**
    * AlertOverlay class
    * Encapsulated handling of a generic alert.
@@ skipping 124 matching lines @@
     // Intentionally don't show the URL in the location bar as we don't want
     // people trying to navigate here by hand.
     OptionsPage.showPageByName('alertOverlay', false);
   }
 
   // Export
   return {
     AlertOverlay: AlertOverlay
   };
 });