Index: content/browser/webui/url_data_manager_backend.cc |
diff --git a/content/browser/webui/url_data_manager_backend.cc b/content/browser/webui/url_data_manager_backend.cc |
index 1bcbdb76e9eaae056a461d785afb8dba9f71657a..69040d04bdfe246e3baa7396551439f77082f5b8 100644 |
--- a/content/browser/webui/url_data_manager_backend.cc |
+++ b/content/browser/webui/url_data_manager_backend.cc |
@@ -47,10 +47,12 @@ namespace content { |
namespace { |
+// TODO(jacobr) remove https://www.google.com when the dependency on the |
+// Google Charts API is removed from the Dart Observatory. |
// TODO(tsepez) remove unsafe-eval when bidichecker_packaged.js fixed. |
const char kChromeURLContentSecurityPolicyHeaderBase[] = |
"Content-Security-Policy: script-src chrome://resources " |
- "'self' 'unsafe-eval'; "; |
+ "'self' https://www.google.com 'unsafe-eval'; "; |
const char kChromeURLXFrameOptionsHeader[] = "X-Frame-Options: DENY"; |