PlzNavigate: Enforce 'frame-src' CSP on the browser.

content/browser/frame_host/navigator_impl.cc

Index: content/browser/frame_host/navigator_impl.cc
diff --git a/content/browser/frame_host/navigator_impl.cc b/content/browser/frame_host/navigator_impl.cc
index b9e03c5be03966179ec456c75761e90c4b18855e..010f9ae3440620a17d4b33b8e1e1594eaf4ddf97 100644
--- a/content/browser/frame_host/navigator_impl.cc
+++ b/content/browser/frame_host/navigator_impl.cc
@@ -231,7 +231,8 @@ void NavigatorImpl::DidStartProvisionalLoad(
       validated_url, validated_redirect_chain,
       render_frame_host->frame_tree_node(), is_renderer_initiated,
       false,  // is_same_page
-      navigation_start, pending_nav_entry_id, started_from_context_menu));
+      navigation_start, pending_nav_entry_id, started_from_context_menu,
+      false));  // should_bypass_main_world_csp
 }
 
 void NavigatorImpl::DidFailProvisionalLoadWithError(
@@ -612,6 +613,7 @@ void NavigatorImpl::DidNavigate(
   // Navigating to a new location means a new, fresh set of http headers and/or
   // <meta> elements - we need to reset CSP and Feature Policy.
   if (!is_navigation_within_page) {
+    render_frame_host->ResetContentSecurityPolicy();
     render_frame_host->frame_tree_node()->ResetContentSecurityPolicy();
     render_frame_host->frame_tree_node()->ResetFeaturePolicyHeader();
   }