Add content-security-policy (CSP) to chrome://flags.

chrome/browser/ui/webui/chrome_web_ui_data_source.h

Index: chrome/browser/ui/webui/chrome_web_ui_data_source.h
===================================================================
--- chrome/browser/ui/webui/chrome_web_ui_data_source.h	(revision 88884)
+++ chrome/browser/ui/webui/chrome_web_ui_data_source.h	(working copy)
@@ -18,6 +18,9 @@
  public:
   explicit ChromeWebUIDataSource(const std::string& source_name);
 
+  // Adds a string and its equivalent to our dictionary.
+  void AddString(const std::string& name, const string16& value);

[Evan Stade, 2011/06/18 00:37:25]

I don't see much point in this function since it has a one-line implementation.
(Unless you plan to use it publicly. Do you?)

+
   // Adds a name and its equivaled localized string to our dictionary.
   void AddLocalizedString(const std::string& name, int ids);