Add a content-security-policy (CSP) flag.

lib/compiler/implementation/apiimpl.dart

Index: lib/compiler/implementation/apiimpl.dart
diff --git a/lib/compiler/implementation/apiimpl.dart b/lib/compiler/implementation/apiimpl.dart
index d65f8c79a237ba20ac9b1220e2968810133b2e15..96582debc8baeebfb3fff327a8b96917b4c5a150 100644
--- a/lib/compiler/implementation/apiimpl.dart
+++ b/lib/compiler/implementation/apiimpl.dart
@@ -31,6 +31,8 @@ class Compiler extends leg.Compiler {
             enableUserAssertions: hasOption(options, '--enable-checked-mode'),
             enableMinification: hasOption(options, '--minify'),
             emitJavaScript: !hasOption(options, '--output-type=dart'),
+            enableContentSecurityPolicy:

[kasperl, 2012/10/17 09:37:11]

This is probably fine, but essentially you could also make this --disable-eval
because that is what you need to do to make the code adhere to the content
security policy.

[floitsch, 2012/10/17 21:15:01]

Done.

+              hasOption(options, '--enable-content-security-policy'),
             strips: getStrips(options),
             enableConcreteTypeInference:
               hasOption(options, '--enable-concrete-type-inference'));