Implement ContentSecurityPolicy on the browser-side.

content/renderer/BUILD.gn

 # Copyright 2014 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 import("//build/config/chromecast_build.gni")
 import("//build/config/features.gni")
 import("//build/config/ui.gni")
 import("//build/split_static_library.gni")
 import("//media/media_options.gni")
 import("//ppapi/features/features.gni")
@@ skipping 51 matching lines @@
     "cache_storage/cache_storage_message_filter.cc",
     "cache_storage/cache_storage_message_filter.h",
     "cache_storage/webserviceworkercachestorage_impl.cc",
     "cache_storage/webserviceworkercachestorage_impl.h",
     "categorized_worker_pool.cc",
     "categorized_worker_pool.h",
     "child_frame_compositing_helper.cc",
     "child_frame_compositing_helper.h",
     "clipboard_utils.cc",
     "clipboard_utils.h",
+    "content_security_policy_util.cc",
+    "content_security_policy_util.h",
     "context_menu_params_builder.cc",
     "context_menu_params_builder.h",
     "cursor_utils.cc",
     "cursor_utils.h",
     "device_sensors/device_light_event_pump.cc",
     "device_sensors/device_light_event_pump.h",
     "device_sensors/device_motion_event_pump.cc",
     "device_sensors/device_motion_event_pump.h",
     "device_sensors/device_orientation_event_pump.cc",
     "device_sensors/device_orientation_event_pump.h",
@@ skipping 859 matching lines @@
     # For the defines in mojo_media_config.
     public_configs = [ "//media/mojo/services:mojo_media_config" ]
   }
 
   if (!is_component_build) {
     public_deps = [
       ":renderer",
     ]
   }
 }