Restrict app sandbox's CSP to disallow loading web content in them.

chrome/browser/extensions/sandboxed_pages_apitest.cc

Index: chrome/browser/extensions/sandboxed_pages_apitest.cc
diff --git a/chrome/browser/extensions/sandboxed_pages_apitest.cc b/chrome/browser/extensions/sandboxed_pages_apitest.cc
index 45ae8653a4408528c046568353262f70d01fa980..42451062963f463e60c2071717bf91116af9f935 100644
--- a/chrome/browser/extensions/sandboxed_pages_apitest.cc
+++ b/chrome/browser/extensions/sandboxed_pages_apitest.cc
@@ -7,3 +7,14 @@
 IN_PROC_BROWSER_TEST_F(ExtensionApiTest, SandboxedPages) {
   EXPECT_TRUE(RunExtensionSubtest("sandboxed_pages", "main.html")) << message_;
 }
+
+IN_PROC_BROWSER_TEST_F(ExtensionApiTest, SandboxedPagesCSP) {
+  ASSERT_TRUE(StartEmbeddedTestServer());
+
+  // This app attempts to load remote web content inside a sandboxed page.
+  // Loading web content will fail because of CSP. In addition to that we will
+  // show manifest warnings, hence the kFlagIgnoreManifestWarnings.
+  EXPECT_TRUE(RunExtensionSubtest("sandboxed_pages_csp", "main.html",
+                                  kFlagIgnoreManifestWarnings))
+      << message_;
+}