Apply content-security-policy to chrome://net-internals.

chrome/test/functional/special_tabs.py

Index: chrome/test/functional/special_tabs.py
===================================================================
--- chrome/test/functional/special_tabs.py	(revision 93041)
+++ chrome/test/functional/special_tabs.py	(working copy)
@@ -58,7 +58,8 @@
     'chrome://history2': { 'title': 'History', 'CSP': False },
     'chrome://media-internals': { 'title': 'Media Internals', 'CSP': False },
     'chrome://memory-redirect': { 'title': 'About Memory' },
-    'chrome://net-internals': { 'CSP': False },
+    'chrome://net-internals': {},

[eroman, 2011/07/20 01:50:34]

Should this have a 'title' property?

[Tom Sepez, 2011/07/25 16:59:13]

Only if there is a title tag on the page itself. Otherwise, the title can be
determined from the URL.

+    'chrome://net-internals/help.html': {},
     'chrome://newtab': { 'title': 'New Tab', 'CSP': False },
     'chrome://plugins': { 'title': 'Plug-ins' },
     'chrome://sessions': { 'title': 'Sessions', 'CSP': False },
@@ -270,7 +271,7 @@
       else:
         include_list.extend(['X-WebKit-CSP'])
         exclude_list.extend(['<script>', 'onclick=', 'onload=',
-                             'onchange=', 'onsubmit='])
+                             'onchange=', 'onsubmit=', 'javascript:'])
       if 'includes' in properties:
         include_list.extend(properties['includes'])
       if 'excludes' in properties: