Enable CSP on more WebUI pages

chrome/browser/ui/webui/ntp/new_tab_ui.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_BROWSER_UI_WEBUI_NTP_NEW_TAB_UI_H_
 #define CHROME_BROWSER_UI_WEBUI_NTP_NEW_TAB_UI_H_
 
 #include <map>
 #include <string>
 
@@ skipping 50 matching lines @@
 
     // content::URLDataSource implementation.
     std::string GetSource() const override;
     void StartDataRequest(
         const std::string& path,
         int render_process_id,
         int render_frame_id,
         const content::URLDataSource::GotDataCallback& callback) override;
     std::string GetMimeType(const std::string&) const override;
     bool ShouldReplaceExistingSource() const override;
-    bool ShouldAddContentSecurityPolicy() const override;
+    std::string GetContentSecurityPolicyScriptSrc() const override;
+    std::string GetContentSecurityPolicyStyleSrc() const override;
+    std::string GetContentSecurityPolicyImgSrc() const override;
+    std::string GetContentSecurityPolicyFrameSrc() const override;
 
     // Adds |resource| to the source. |resource_id| is resource id or 0,
     // which means return empty data set. |mime_type| is mime type of the
     // resource.
     void AddResource(const char* resource,
                      const char* mime_type,
                      int resource_id);
 
    private:
     // Pointer back to the original profile.
     Profile* profile_;
 
     // Maps resource files to mime types an resource ids.
     std::map<std::string, std::pair<std::string, int> > resource_map_;
 
     DISALLOW_COPY_AND_ASSIGN(NewTabHTMLSource);
   };
 
   void OnShowBookmarkBarChanged();
 
   Profile* GetProfile() const;
 
   PrefChangeRegistrar pref_change_registrar_;
 
   DISALLOW_COPY_AND_ASSIGN(NewTabUI);
 };
 
 #endif  // CHROME_BROWSER_UI_WEBUI_NTP_NEW_TAB_UI_H_