Add a content-security-policy (CSP) flag.

lib/compiler/implementation/apiimpl.dart

 // Copyright (c) 2012, the Dart project authors.  Please see the AUTHORS file
 // for details. All rights reserved. Use of this source code is governed by a
 // BSD-style license that can be found in the LICENSE file.
 
 #library('leg_apiimpl');
 
 #import('dart:uri');
 
 #import('../compiler.dart', prefix: 'api');
 #import('leg.dart', prefix: 'leg');
@@ skipping 13 matching lines @@
 
   Compiler(this.provider, this.handler, this.libraryRoot, this.packageRoot,
            List<String> options)
       : this.options = options,
         super(
             tracer: new ssa.HTracer(),
             enableTypeAssertions: hasOption(options, '--enable-checked-mode'),
             enableUserAssertions: hasOption(options, '--enable-checked-mode'),
             enableMinification: hasOption(options, '--minify'),
             emitJavaScript: !hasOption(options, '--output-type=dart'),
+            enableContentSecurityPolicy:

[kasperl, 2012/10/17 09:37:11]

This is probably fine, but essentially you could also make this --disable-eval
because that is what you need to do to make the code adhere to the content
security policy.

[floitsch, 2012/10/17 21:15:01]

Done.

+              hasOption(options, '--enable-content-security-policy'),
             strips: getStrips(options),
             enableConcreteTypeInference:
               hasOption(options, '--enable-concrete-type-inference'));
 
   static List<String> getStrips(List<String> options) {
     for (String option in options) {
       if (option.startsWith('--force-strip=')) {
         return option.substring('--force-strip='.length).split(',');
       }
     }
@@ skipping 115 matching lines @@
       handler(translateUri(span.uri, null), span.begin, span.end,
               message, kind);
     }
   }
 
   bool get isMockCompilation {
     return mockableLibraryUsed
       && (options.indexOf('--allow-mock-compilation') !== -1);
   }
 }