PlzNavigate: Enforce 'frame-src' CSP on the browser.

third_party/WebKit/Source/web/LocalFrameClientImpl.cpp

Index: third_party/WebKit/Source/web/LocalFrameClientImpl.cpp
diff --git a/third_party/WebKit/Source/web/LocalFrameClientImpl.cpp b/third_party/WebKit/Source/web/LocalFrameClientImpl.cpp
index 88f3598d04025b551f9f9f5f5b45302634dbbead..9b9a39bb7a0c3e1db7a61f14db9711b54da3cade 100644
--- a/third_party/WebKit/Source/web/LocalFrameClientImpl.cpp
+++ b/third_party/WebKit/Source/web/LocalFrameClientImpl.cpp
@@ -525,7 +525,9 @@ NavigationPolicy LocalFrameClientImpl::decidePolicyForNavigation(
     NavigationPolicy policy,
     bool replacesCurrentHistoryItem,
     bool isClientRedirect,
-    HTMLFormElement* form) {
+    HTMLFormElement* form,
+    ContentSecurityPolicyDisposition
+        shouldCheckMainWorldContentSecurityPolicy) {
   if (!m_webFrame->client())
     return NavigationPolicyIgnore;
 
@@ -562,6 +564,9 @@ NavigationPolicy LocalFrameClientImpl::decidePolicyForNavigation(
   navigationInfo.isHistoryNavigationInNewChildFrame =
       isHistoryNavigationInNewChildFrame;
   navigationInfo.isClientRedirect = isClientRedirect;
+  navigationInfo.shouldBypassMainWorldCSP =
+      shouldCheckMainWorldContentSecurityPolicy ==
+      DoNotCheckContentSecurityPolicy;
   // Caching could be disabled for requests initiated by DevTools.
   // TODO(ananta)
   // We should extract the network cache state into a global component which