Apply content-security-policy to chrome://plugins page. This involves

chrome/third_party/jstemplate/compile.py

Index: chrome/third_party/jstemplate/compile.py
===================================================================
--- chrome/third_party/jstemplate/compile.py	(revision 87333)
+++ chrome/third_party/jstemplate/compile.py	(working copy)
@@ -4,13 +4,14 @@
 # found in the LICENSE file.
 
 # A python script that combines the javascript files needed by jstemplate into
-# a single file.
+# a single file.  Writes to standard output; you are responsible for putting
+# the file into the tree where it belongs.
 
 import httplib
+import sys
 import urllib
 
 srcs ="util.js jsevalcontext.js jstemplate.js exports.js".split()
-out = "jstemplate_compiled.js"
 
 # Wrap the output in an anonymous function to prevent poluting the global
 # namespace.
@@ -32,7 +33,5 @@
 conn = httplib.HTTPConnection('closure-compiler.appspot.com')
 conn.request('POST', '/compile', params, headers)
 response = conn.getresponse()
-out_file = file(out, 'w')
-out_file.write(output_wrapper % response.read())
-out_file.close()
+sys.stdout.write(output_wrapper % response.read())
 conn.close()