Insert meta tag turning on content-security-protection for chrome://settings, history, downloads ...

chrome/test/data/webui/test_api.js

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // Library providing basic test framework functionality.
 
 (function() {
   // Indicates a pass to the C++ backend.
   function pass() {
     chrome.send('Pass', []);
@@ skipping 35 matching lines @@
       throw new Error('Test Error' +
                       ' (type mismatch)\nActual Type: ' + typeof actual +
                       '\nExpected Type:' + typeof expected + '\n' + message);
     }
   }
 
   function assertNotReached(message) {
     throw new Error(message);
   }
 
-  function runTest(currentTest, testArguments) {
+  function runTest(testFunction, testArguments) {
     try {
-      currentTest = eval(currentTest);
+      // Avoid eval() if at all possible, since it will not work on pages
+      // that have enabled content-security-policy.
+      currentTest = this[testFunction];    // global object -- not a method.
+      if (typeof currentTest === "undefined") {
+        currentTest = eval(testFunction);
+      }
       console.log('Running test ' + currentTest.name);
       currentTest.apply(null, testArguments);
     } catch (e) {
       console.log(
           'Failed: ' + currentTest.name + '\nwith exception: ' + e.message);
 
       fail(e.message);
       return;
     }
 
 
     // All tests passed.
     pass('');
   }
 
   // Exports.
   window.assertTrue = assertTrue;
   window.assertFalse = assertFalse;
   window.assertEquals = assertEquals;
   window.assertNotReached = assertNotReached;
   window.runTest = runTest;
 })();