Implement ContentSecurityPolicy on the browser-side.

content/test/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/config/chrome_build.gni")
 import("//build/config/chromecast_build.gni")
 import("//build/config/compiler/compiler.gni")
 import("//build/config/crypto.gni")
 import("//build/config/features.gni")
 import("//build/config/ui.gni")
@@ skipping 1283 matching lines @@
     "../child/url_loader_client_impl_unittest.cc",
     "../child/url_response_body_consumer_unittest.cc",
     "../child/v8_value_converter_impl_unittest.cc",
     "../child/web_data_consumer_handle_impl_unittest.cc",
     "../child/web_url_loader_impl_unittest.cc",
     "../child/worker_thread_registry_unittest.cc",
     "../common/android/address_parser_unittest.cc",
     "../common/android/gin_java_bridge_value_unittest.cc",
     "../common/bluetooth/web_bluetooth_device_id_unittest.cc",
     "../common/common_param_traits_unittest.cc",
+    "../common/content_security_policy/csp_context_unittest.cc",
+    "../common/content_security_policy/csp_policy_unittest.cc",
+    "../common/content_security_policy/csp_source_list_unittest.cc",
+    "../common/content_security_policy/csp_source_unittest.cc",
     "../common/cross_site_document_classifier_unittest.cc",
     "../common/cursors/webcursor_unittest.cc",
     "../common/database_connections_unittest.cc",
     "../common/database_identifier_unittest.cc",
     "../common/dom_storage/dom_storage_map_unittest.cc",
     "../common/fileapi/file_system_util_unittest.cc",
     "../common/host_shared_bitmap_manager_unittest.cc",
     "../common/indexed_db/indexed_db_key_unittest.cc",
     "../common/input/event_with_latency_info_unittest.cc",
     "../common/input/gesture_event_stream_validator_unittest.cc",
@@ skipping 465 matching lines @@
   if (is_android) {
     deps += [ "//testing/android/native_test:native_test_native_code" ]
   }
 }
 
 group("fuzzers") {
   deps = [
     "//content/test/fuzzer",
   ]
 }