Enable CSP on more WebUI pages

content/public/browser/url_data_source.cc

Index: content/public/browser/url_data_source.cc
diff --git a/content/public/browser/url_data_source.cc b/content/public/browser/url_data_source.cc
index 0c76c50afd0f41af02359306f6b042c96ceb2831..b2bd5d3b73c2424ea1f6766564526b4c5910437a 100644
--- a/content/public/browser/url_data_source.cc
+++ b/content/public/browser/url_data_source.cc
@@ -33,6 +33,13 @@ bool URLDataSource::ShouldAddContentSecurityPolicy() const {
   return true;
 }
 
+std::string URLDataSource::GetContentSecurityPolicyScriptSrc() const {
+  // Specific resources require unsafe-eval in the Content Security Policy.
+  // TODO(tsepez,mfoltz): Remove 'unsafe-eval' when tests have been fixed to
+  // not use eval()/new Function().  http://crbug.com/525224
+  return "script-src chrome://resources 'self' 'unsafe-eval';";
+}
+
 std::string URLDataSource::GetContentSecurityPolicyObjectSrc() const {
   return "object-src 'none';";
 }