Fix iframe security policy directives for viewing isolate content

appengine/isolate/handlers_frontend.py

Index: appengine/isolate/handlers_frontend.py
diff --git a/appengine/isolate/handlers_frontend.py b/appengine/isolate/handlers_frontend.py
index 5b72d8fc03ba6540230383f5878082325292fe6b..b409905d07f53f8284124379eed9ae52b58ba894 100644
--- a/appengine/isolate/handlers_frontend.py
+++ b/appengine/isolate/handlers_frontend.py
@@ -205,6 +205,11 @@ class BrowseHandler(auth.AuthenticatingHandler):
         self.abort(404, 'Unable to retrieve the entry')
     self.response.write(template.render('isolate/browse.html', params))
 
+  def get_content_security_policy(self):
+    csp = super(BrowseHandler, self).get_content_security_policy()
+    csp.setdefault('child-src', []).append("'self'")
+    return csp
+
 
 class ContentHandler(auth.AuthenticatingHandler):
   @auth.autologin
@@ -280,7 +285,6 @@ class ContentHandler(auth.AuthenticatingHandler):
 
     self.response.write(content)
 
-

[M-A Ruel, 2017/02/09 21:37:09]

add back, we keep two empty lines between file level symbols.

[jonesmi, 2017/02/09 21:49:04]

Done.

 class StatsHandler(webapp2.RequestHandler):
   """Returns the statistics web page."""
   def get(self):