Fixing iframe jank in the local omnibox popup.

chrome/browser/search/local_ntp_source.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/search/local_ntp_source.h"
 
 #include "base/logging.h"
 #include "base/memory/ref_counted_memory.h"
 #include "base/string_util.h"
+#include "base/stringprintf.h"
 #include "chrome/common/url_constants.h"
 #include "googleurl/src/gurl.h"
 #include "grit/browser_resources.h"
 #include "grit/ui_resources.h"
 #include "net/url_request/url_request.h"
 #include "ui/base/resource/resource_bundle.h"
 
 namespace {
 
 const struct Resource{
@@ skipping 76 matching lines @@
   if (request->url().SchemeIs(chrome::kChromeSearchScheme)) {
     DCHECK(StartsWithASCII(request->url().path(), "/", true));
     std::string filename = request->url().path().substr(1);
     for (size_t i = 0; i < arraysize(kResources); ++i) {
       if (filename == kResources[i].filename)
         return true;
     }
   }
   return false;
 }
+
+std::string LocalNtpSource::GetContentSecurityPolicyFrameSrc() const {
+  // Allow embedding of chrome search suggestion host.
+  return base::StringPrintf("frame-src %s://%s/;",
+                            chrome::kChromeSearchScheme,
+                            chrome::kChromeSearchSuggestionHost);
+}