Index: chrome/browser/ui/webui/system_info_ui.cc |
diff --git a/chrome/browser/ui/webui/system_info_ui.cc b/chrome/browser/ui/webui/system_info_ui.cc |
index 7aa85064f3ed80f6e9d09f6b65feaa2129992668..11631235af9b81e29c735dca1d50890b0a5e56b0 100644 |
--- a/chrome/browser/ui/webui/system_info_ui.cc |
+++ b/chrome/browser/ui/webui/system_info_ui.cc |
@@ -59,7 +59,15 @@ class SystemInfoUIHTMLSource : public content::URLDataSource{ |
std::string GetMimeType(const std::string&) const override { |
return "text/html"; |
} |
- bool ShouldAddContentSecurityPolicy() const override { return false; } |
+ std::string GetContentSecurityPolicyScriptSrc() const override { |
+ // 'unsafe-inline' is added to script-src. |
+ return "script-src 'self' chrome://resources 'unsafe-eval' " |
+ "'unsafe-inline';"; |
+ } |
+ |
+ std::string GetContentSecurityPolicyStyleSrc() const override { |
+ return "style-src 'self' chrome://resources 'unsafe-inline';"; |
+ } |
private: |
~SystemInfoUIHTMLSource() override {} |