Replace frame-src with child-src in WebUI CSP

content/public/browser/url_data_source.h

 // Copyright (c) 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_URL_DATA_SOURCE_H_
 #define CONTENT_PUBLIC_BROWSER_URL_DATA_SOURCE_H_
 
 #include <string>
 
 #include "base/callback.h"
@@ skipping 89 matching lines @@
   // team.
   // By default, "script-src chrome://resources 'self' 'unsafe-eval';" is added
   // to CSP. Override to change this.
   virtual std::string GetContentSecurityPolicyScriptSrc() const;
 
   // It is OK to override the following methods to a custom CSP directive
   // thereby slightly reducing the protection applied to the page.
 
   // By default, "object-src 'none';" is added to CSP. Override to change this.
   virtual std::string GetContentSecurityPolicyObjectSrc() const;
-  // By default, "frame-src 'none';" is added to CSP. Override to change this.
-  virtual std::string GetContentSecurityPolicyFrameSrc() const;
+  // By default, "child-src 'none';" is added to CSP. Override to change this.
+  virtual std::string GetContentSecurityPolicyChildSrc() const;
   // By default empty. Override to change this.
   virtual std::string GetContentSecurityPolicyStyleSrc() const;
   // By default empty. Override to change this.
   virtual std::string GetContentSecurityPolicyImgSrc() const;
 
   // By default, the "X-Frame-Options: DENY" header is sent. To stop this from
   // happening, return false. It is OK to return false as needed.
   virtual bool ShouldDenyXFrameOptions() const;
 
   // By default, only chrome: and chrome-devtools: requests are allowed.
@@ skipping 23 matching lines @@
   // Gives the source an opportunity to rewrite |path| to incorporate extra
   // information from the URLRequest prior to serving.
   virtual void WillServiceRequest(
       const net::URLRequest* request,
       std::string* path) const {}
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_URL_DATA_SOURCE_H_