Apply content-security-policy to chrome://net-internals.

chrome/browser/resources/net_internals/index.js

+// Copyright (c) 2011 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+<include src="util.js"/>
+<include src="view.js"/>
+<include src="tabswitcherview.js"/>
+<include src="dataview.js"/>
+<include src="httpcacheview.js"/>
+<include src="testview.js"/>
+<include src="hstsview.js"/>
+<include src="logdumputil.js"/>
+<include src="main.js"/>
+<include src="dnsview.js"/>
+<include src="eventsview.js"/>
+<include src="detailsview.js"/>
+<include src="sourceentry.js"/>
+<include src="resizableverticalsplitview.js"/>
+<include src="topmidbottomview.js"/>
+<include src="timelineviewpainter.js"/>
+<include src="logviewpainter.js"/>
+<include src="loggrouper.js"/>
+<include src="proxyview.js"/>
+<include src="socketpoolwrapper.js"/>
+<include src="socketsview.js"/>
+<include src="spdyview.js"/>
+<include src="serviceprovidersview.js"/>
+<include src="httpthrottlingview.js"/>
+<include src="logsview.js"/>
+<include src="prerenderview.js"/>
+
+document.addEventListener("DOMContentLoaded", function () {
+  document.getElementById("help-for-bug-dump").addEventListener(

[Evan Stade, 2011/07/20 01:36:16]

$()

[eroman, 2011/07/20 01:52:54]

I am pretty sure net-internals does not define $ anywhere, so I doubt that will
work...

+      "click", window.open.bind(window, "chrome://net-internals/help.html"));

[Evan Stade, 2011/07/20 01:36:16]

this usage of bind is not wrong, but it seems a little roundabout, and less
clear than

function() { window.open(...); }

[eroman, 2011/07/20 01:50:34]

nit: rather than adding an event listener, could probably just change the
original link to be:

<a href="chrome://net-internals/help.html" target="_blank">

[Tom Sepez, 2011/07/25 16:59:13]

Done.

+  document.getElementById("reloaded-link").addEventListener(
+      "click", history.go.bind(history, 0));
+  onLoaded();  // from main.js
+});