Implement support for <extensionoptions> embedding in WebUI

content/browser/webui/web_ui_data_source_impl.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/webui/web_ui_data_source_impl.h"
 
 #include <string>
 
 #include "base/bind.h"
 #include "base/memory/ref_counted_memory.h"
@@ skipping 71 matching lines @@
   }
   virtual bool AllowCaching() const OVERRIDE {
     return false;
   }
   virtual bool ShouldAddContentSecurityPolicy() const OVERRIDE {
     return parent_->add_csp_;
   }
   virtual std::string GetContentSecurityPolicyObjectSrc() const OVERRIDE {
     if (parent_->object_src_set_)
       return parent_->object_src_;
-    return URLDataSource::GetContentSecurityPolicyObjectSrc();
+    return "object-src chrome://chrome/extensions/ chrome://extensions-frame/;";

[not at google - send to devlin, 2014/08/07 23:06:03]

you must get somebody else to look at this. I can't remember who the person was
to ask, maybe you can find it.

[ericzeng, 2014/08/08 00:23:47]

Acknowledged.

   }
   virtual std::string GetContentSecurityPolicyFrameSrc() const OVERRIDE {
     if (parent_->frame_src_set_)
       return parent_->frame_src_;
     return URLDataSource::GetContentSecurityPolicyFrameSrc();
   }
   virtual bool ShouldDenyXFrameOptions() const OVERRIDE {
     return parent_->deny_xframe_options_;
   }
 
@@ skipping 149 matching lines @@
 }
 
 void WebUIDataSourceImpl::SendFromResourceBundle(
     const URLDataSource::GotDataCallback& callback, int idr) {
   scoped_refptr<base::RefCountedStaticMemory> response(
       GetContentClient()->GetDataResourceBytes(idr));
   callback.Run(response.get());
 }
 
 }  // namespace content