PlzNavigate: Enforce 'frame-src' CSP on the browser.

content/public/browser/navigation_handle.h

Index: content/public/browser/navigation_handle.h
diff --git a/content/public/browser/navigation_handle.h b/content/public/browser/navigation_handle.h
index 0f3892c7015bb271d10eb5716dbc3c3aad61d274..8ada024d361d0d9ff9641015313d3aea559ea186 100644
--- a/content/public/browser/navigation_handle.h
+++ b/content/public/browser/navigation_handle.h
@@ -278,6 +278,11 @@ class CONTENT_EXPORT NavigationHandle {
   // ResourceDispatcherHostDelegate::GetNavigationData during commit. This will
   // be a clone of the NavigationData.
   virtual NavigationData* GetNavigationData() = 0;
+
+  // Whether or not the navigation has been issued by an isolated world. For
+  // instance from a chrome-extension. When it returns true, the navigation

[alexmos, 2017/02/14 06:57:20]

See my comment about the earlier copy of this comment :)

[arthursonzogni, 2017/02/15 09:26:10]

Done.

+  // should not be blocked by the main world Content-Security-Policy(CSP).
+  virtual bool ShouldBypassMainWorldCSP() const = 0;
 };
 
 }  // namespace content