Block framebusts without a user gesture

chrome/app/generated_resources.grd

Index: chrome/app/generated_resources.grd
diff --git a/chrome/app/generated_resources.grd b/chrome/app/generated_resources.grd
index f51c71bb4cbcf417225ae2cfafd87c97bf3d5893..318a187881993fe9600b9d8ff417918f06e8c0c6 100644
--- a/chrome/app/generated_resources.grd
+++ b/chrome/app/generated_resources.grd
@@ -15210,6 +15210,12 @@ Please check your email at <ph name="ACCOUNT_EMAIL">$2<ex>jane.doe@gmail.com</ex
     <message name="IDS_FLAGS_FONT_CACHE_SCALING_DESCRIPTION" desc="Description for the flag to enable FontCache scaling">
       Reuse a cached font in the renderer to serve different sizes of font for faster layout.
     </message>
+    <message name="IDS_FLAGS_FRAMEBUSTING_NAME" desc="Title for the flag to enable FontCache Framebusting restrictions">

[jochen (gone - plz use gerrit), 2016/09/07 14:24:54]

please rephrase this description so that the translation team can derive the
meaning of the string to be translated

+      Framebusting requires same-origin or a user gesture
+    </message>
+    <message name="IDS_FLAGS_FRAMEBUSTING_DESCRIPTION" desc="Description for the flag to enable Framebusting restrictions">
+      Don't permit an iframe to navigate the top level browsing context unless they are same-origin or the iframe is processing a user gesture.
+    </message>
     <if expr="is_macosx">
       <message name="IDS_ANNOUNCEMENT_COMPLETION_AVAILABLE_MAC" desc="Text to be
 read aloud to screenreader users to announce that a completion is available.">