Use default CSP for resource loading in webview (instead of platform app's CSP)

extensions/browser/extensions_browser_client.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef EXTENSIONS_BROWSER_EXTENSIONS_BROWSER_CLIENT_H_
 #define EXTENSIONS_BROWSER_EXTENSIONS_BROWSER_CLIENT_H_
 
 #include <string>
 #include <vector>
 
@@ skipping 78 matching lines @@
   virtual bool IsExtensionIncognitoEnabled(
       const std::string& extension_id,
       content::BrowserContext* context) const = 0;
 
   // Returns true if |extension| can see events and data from another
   // sub-profile (incognito to original profile, or vice versa).
   virtual bool CanExtensionCrossIncognito(
       const extensions::Extension* extension,
       content::BrowserContext* context) const = 0;
 
+  // Returns true if |request| corresponds to a resource request from a
+  // <webview>.
+  virtual bool IsWebViewRequest(net::URLRequest* request) const = 0;

[James Cook, 2014/04/15 17:21:21]

It's unfortunate that ExtensionsBrowserClient needs a method to support a
specific tag.  Likewise we hope to support <webview> in apps/shell some day. 
However, I'm not sure how else to do this and maybe webview is enough of a
special case to merit it.  yoz, opinion?

If yoz is OK with this you'll also need to override this function in
extensions/browser/test_extensions_browser_client.h

[Yoyo Zhou, 2014/04/15 21:40:06]

I think it's okay to add this for now; when we make webview available to
appshell, we'll need to refactor things like ExtensionRendererState (which
tracks both tabs and webviews).

[lazyboy, 2014/04/15 22:17:03]

Updated test_extensions_browser_client.h

+
   // Returns an URLRequestJob to load an extension resource from the embedder's
   // resource bundle (.pak) files. Returns NULL if the request is not for a
   // resource bundle resource or if the embedder does not support this feature.
   // Used for component extensions. Called on the IO thread.
   virtual net::URLRequestJob* MaybeCreateResourceBundleRequestJob(
       net::URLRequest* request,
       net::NetworkDelegate* network_delegate,
       const base::FilePath& directory_path,
       const std::string& content_security_policy,
       bool send_cors_header) = 0;
@@ skipping 56 matching lines @@
   // Returns the single instance of |this|.
   static ExtensionsBrowserClient* Get();
 
   // Initialize the single instance.
   static void Set(ExtensionsBrowserClient* client);
 };
 
 }  // namespace extensions
 
 #endif  // EXTENSIONS_BROWSER_EXTENSIONS_BROWSER_CLIENT_H_