Added validation of the policy specified in the 'csp' attribute

third_party/WebKit/Source/core/loader/FrameLoader.cpp

Index: third_party/WebKit/Source/core/loader/FrameLoader.cpp
diff --git a/third_party/WebKit/Source/core/loader/FrameLoader.cpp b/third_party/WebKit/Source/core/loader/FrameLoader.cpp
index b13748ddc5ff7272492da1bd0516391cd35a218b..8eb7392c94cadf0a67b6dc1c03542826373e35d6 100644
--- a/third_party/WebKit/Source/core/loader/FrameLoader.cpp
+++ b/third_party/WebKit/Source/core/loader/FrameLoader.cpp
@@ -1571,8 +1571,7 @@ void FrameLoader::ModifyRequestForCSP(ResourceRequest& resource_request,
                                       Document* document) const {
   if (RuntimeEnabledFeatures::embedderCSPEnforcementEnabled() &&
       !RequiredCSP().IsEmpty()) {
-    // TODO(amalika): Strengthen this DCHECK that requiredCSP has proper format
-    DCHECK(RequiredCSP().GetString().ContainsOnlyASCII());
+    DCHECK(ContentSecurityPolicy::IsValidCSPAttr(RequiredCSP().GetString()));
     resource_request.SetHTTPHeaderField(HTTPNames::Required_CSP, RequiredCSP());
   }