Implement ContentSecurityPolicy on the browser-side.

content/common/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/config/features.gni")
 import("//build/config/ui.gni")
 import("//media/media_options.gni")
 import("//mojo/public/tools/bindings/mojom.gni")
 import("//ppapi/features/features.gni")
 import("//sandbox/features.gni")
@@ skipping 61 matching lines @@
     "content_constants_internal.cc",
     "content_constants_internal.h",
     "content_export.h",
     "content_ipc_logging.cc",
     "content_message_generator.cc",
     "content_message_generator.h",
     "content_param_traits.cc",
     "content_param_traits.h",
     "content_param_traits_macros.h",
     "content_paths.cc",
+    "content_security_policy/csp_context.cc",
+    "content_security_policy/csp_context.h",
+    "content_security_policy/csp_directive.cc",
+    "content_security_policy/csp_directive.h",
+    "content_security_policy/csp_policy.cc",
+    "content_security_policy/csp_policy.h",
+    "content_security_policy/csp_source.cc",
+    "content_security_policy/csp_source.h",
+    "content_security_policy/csp_source_list.cc",
+    "content_security_policy/csp_source_list.h",
     "content_security_policy_header.h",
     "content_switches_internal.cc",
     "content_switches_internal.h",
     "cross_site_document_classifier.cc",
     "cross_site_document_classifier.h",
     "cursors/webcursor.cc",
     "cursors/webcursor.h",
     "cursors/webcursor_android.cc",
     "cursors/webcursor_aura.cc",
     "cursors/webcursor_aurawin.cc",
@@ skipping 508 matching lines @@
     "//ui/gfx/geometry/mojo",
     "//ui/gfx/mojo",
     "//url/mojo:url_mojom_gurl",
     "//url/mojo:url_mojom_origin",
   ]
 
   export_class_attribute = "CONTENT_EXPORT"
   export_define = "CONTENT_IMPLEMENTATION=1"
   export_header = "content/common/content_export.h"
 }