PlzNavigate: Enforce 'frame-src' CSP on the browser.

third_party/WebKit/Source/web/LocalFrameClientImpl.cpp

Index: third_party/WebKit/Source/web/LocalFrameClientImpl.cpp
diff --git a/third_party/WebKit/Source/web/LocalFrameClientImpl.cpp b/third_party/WebKit/Source/web/LocalFrameClientImpl.cpp
index 6d50696d85e1d6b79dc869674c6a5deff572ea12..1b9c061515e52c0978bfa4536cb38582bbb5b23c 100644
--- a/third_party/WebKit/Source/web/LocalFrameClientImpl.cpp
+++ b/third_party/WebKit/Source/web/LocalFrameClientImpl.cpp
@@ -528,7 +528,9 @@ NavigationPolicy LocalFrameClientImpl::decidePolicyForNavigation(
     NavigationPolicy policy,
     bool replacesCurrentHistoryItem,
     bool isClientRedirect,
-    HTMLFormElement* form) {
+    HTMLFormElement* form,
+    ContentSecurityPolicyDisposition
+        shouldCheckMainWorldContentSecurityPolicy) {
   if (!m_webFrame->client())
     return NavigationPolicyIgnore;
 
@@ -565,6 +567,9 @@ NavigationPolicy LocalFrameClientImpl::decidePolicyForNavigation(
   navigationInfo.isHistoryNavigationInNewChildFrame =
       isHistoryNavigationInNewChildFrame;
   navigationInfo.isClientRedirect = isClientRedirect;
+  navigationInfo.shouldBypassMainWorldCSP =
+      shouldCheckMainWorldContentSecurityPolicy ==
+      DoNotCheckContentSecurityPolicy;
   // Caching could be disabled for requests initiated by DevTools.
   // TODO(ananta)
   // We should extract the network cache state into a global component which