Replace frame-src with child-src in WebUI CSP

chrome/browser/ui/webui/uber/uber_ui.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/webui/uber/uber_ui.h"
 
 #include "base/stl_util.h"
 #include "build/build_config.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/ui/webui/chrome_web_ui_controller_factory.h"
@@ skipping 27 matching lines @@
 namespace {
 
 content::WebUIDataSource* CreateUberHTMLSource() {
   content::WebUIDataSource* source =
       content::WebUIDataSource::Create(chrome::kChromeUIUberHost);
 
   source->SetJsonPath("strings.js");
   source->AddResourcePath("uber.js", IDR_UBER_JS);
   source->AddResourcePath("uber_utils.js", IDR_UBER_UTILS_JS);
   source->SetDefaultResource(IDR_UBER_HTML);
-  source->OverrideContentSecurityPolicyFrameSrc("frame-src chrome:;");
+  source->OverrideContentSecurityPolicyChildSrc("child-src chrome:;");
 
   // Hack alert: continue showing "Loading..." until a real title is set.
   source->AddLocalizedString("pageTitle", IDS_TAB_LOADING_TITLE);
 
   source->AddString("extensionsFrameURL", chrome::kChromeUIExtensionsFrameURL);
   source->AddString("extensionsHost", chrome::kChromeUIExtensionsHost);
   source->AddString("helpFrameURL", chrome::kChromeUIHelpFrameURL);
   source->AddString("helpHost", chrome::kChromeUIHelpHost);
   source->AddString("historyFrameURL", chrome::kChromeUIHistoryFrameURL);
   source->AddString("historyHost", chrome::kChromeUIHistoryHost);
@@ skipping 49 matching lines @@
   source->AddLocalizedString("settingsDisplayName", IDS_SETTINGS_TITLE);
   bool overrides_history =
       HasExtensionType(browser_context, chrome::kChromeUIHistoryHost);
   source->AddString("overridesHistory", overrides_history ? "yes" : "no");
   source->AddBoolean(
       "hideHistory",
       base::FeatureList::IsEnabled(features::kMaterialDesignHistoryFeature)
       && !overrides_history);
 
   source->DisableDenyXFrameOptions();
-  source->OverrideContentSecurityPolicyFrameSrc("frame-src chrome:;");
+  source->OverrideContentSecurityPolicyChildSrc("child-src chrome:;");
 
   source->AddBoolean("profileIsGuest",
       Profile::FromBrowserContext(browser_context)->IsGuestSession());
 
   return source;
 }
 
 void UpdateHistoryNavigation(content::WebUI* web_ui) {
   bool overrides_history =
       HasExtensionType(web_ui->GetWebContents()->GetBrowserContext(),
@@ skipping 112 matching lines @@
   // opens the default history page if one is uninstalled or disabled.
   UpdateHistoryNavigation(web_ui());
 }
 
 void UberFrameUI::OnExtensionUnloaded(
     content::BrowserContext* browser_context,
     const extensions::Extension* extension,
     extensions::UnloadedExtensionInfo::Reason reason) {
   UpdateHistoryNavigation(web_ui());
 }