PlzNavigate: Enforce 'frame-src' CSP on the browser.

content/browser/frame_host/interstitial_page_navigator_impl.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/frame_host/interstitial_page_navigator_impl.h"
 
 #include "content/browser/frame_host/interstitial_page_impl.h"
 #include "content/browser/frame_host/navigation_controller_impl.h"
 #include "content/browser/frame_host/navigator_delegate.h"
 #include "content/browser/renderer_host/render_view_host_impl.h"
@@ skipping 16 matching lines @@
   return controller_;
 }
 
 void InterstitialPageNavigatorImpl::DidStartProvisionalLoad(
     RenderFrameHostImpl* render_frame_host,
     const GURL& url,
     const std::vector<GURL>& redirect_chain,
     const base::TimeTicks& navigation_start) {
   // The interstitial page should only navigate once.
   DCHECK(!render_frame_host->navigation_handle());
-  render_frame_host->SetNavigationHandle(
-      NavigationHandleImpl::Create(url, redirect_chain,
-                                   render_frame_host->frame_tree_node(),
-                                   false,  // is_renderer_initiated
-                                   false,  // is_synchronous
-                                   navigation_start,
-                                   0,      // pending_nav_entry_id
-                                   false)  // started_in_context_menu
-      );
+  render_frame_host->SetNavigationHandle(NavigationHandleImpl::Create(
+      url, redirect_chain, render_frame_host->frame_tree_node(),
+      false,  // is_renderer_initiated
+      false,  // is_synchronous
+      navigation_start,
+      0,      // pending_nav_entry_id
+      false,  // started_in_context_menu
+      false)  // should_bypass_main_world_csp
+                                         );

[alexmos, 2017/02/14 06:57:20]

nit: this looks a bit weird on its own line.  Can you just combine this with the
) on the previous line into "));"?  
If the comment outside the ) seems too weird, you could always use /*
should_bypass_main_world_csp */ inside the parens, like you do below.

[arthursonzogni, 2017/02/15 09:26:09]

Yes, it looks weird to me too. The code formatter forces me to keep it like
this. I will apply your suggestion.

edit: I can't align the comments now :-(

 }
 
 void InterstitialPageNavigatorImpl::DidNavigate(
     RenderFrameHostImpl* render_frame_host,
     const FrameHostMsg_DidCommitProvisionalLoad_Params& input_params,
     std::unique_ptr<NavigationHandleImpl> navigation_handle) {
   navigation_handle->DidCommitNavigation(
       input_params, false, GURL(), NAVIGATION_TYPE_NEW_PAGE, render_frame_host);
   navigation_handle.reset();
 
   // TODO(nasko): Move implementation here, but for the time being call out
   // to the interstitial page code.
   interstitial_->DidNavigate(render_frame_host->render_view_host(),
                              input_params);
 }
 
 }  // namespace content