PlzNavigate: Do not disclose urls between cross-origin renderers.

content/common/content_security_policy/csp_context.cc

Index: content/common/content_security_policy/csp_context.cc
diff --git a/content/common/content_security_policy/csp_context.cc b/content/common/content_security_policy/csp_context.cc
index ab249dd3f25840268f907498e737c57f4e1f32eb..47159f305f8991a0bee965f4521aa45a24daee4d 100644
--- a/content/common/content_security_policy/csp_context.cc
+++ b/content/common/content_security_policy/csp_context.cc
@@ -66,6 +66,11 @@ bool CSPContext::SchemeShouldBypassCSP(const base::StringPiece& scheme) {
   return false;
 }
 
+bool CSPContext::IsOriginSafeToUseInCspViolation(
+    const url::Origin& origin) const {
+  return true;
+}
+
 bool CSPContext::SelfSchemeShouldBypassCsp() {
   if (!has_self_)
     return false;