Use default CSP for resource loading in webview (instead of platform app's CSP)

extensions/browser/extensions_browser_client.h

Index: extensions/browser/extensions_browser_client.h
diff --git a/extensions/browser/extensions_browser_client.h b/extensions/browser/extensions_browser_client.h
index d7c02d95a38f57fc2d8a17bc816430fcce7ff931..e3b91b27756dd08661d9af06cbc1cf4cd9fc68f1 100644
--- a/extensions/browser/extensions_browser_client.h
+++ b/extensions/browser/extensions_browser_client.h
@@ -96,6 +96,10 @@ class ExtensionsBrowserClient {
       const extensions::Extension* extension,
       content::BrowserContext* context) const = 0;
 
+  // Returns true if |request| corresponds to a resource request from a
+  // <webview>.
+  virtual bool IsWebViewRequest(net::URLRequest* request) const = 0;

[James Cook, 2014/04/15 17:21:21]

It's unfortunate that ExtensionsBrowserClient needs a method to support a
specific tag.  Likewise we hope to support <webview> in apps/shell some day. 
However, I'm not sure how else to do this and maybe webview is enough of a
special case to merit it.  yoz, opinion?

If yoz is OK with this you'll also need to override this function in
extensions/browser/test_extensions_browser_client.h

[Yoyo Zhou, 2014/04/15 21:40:06]

I think it's okay to add this for now; when we make webview available to
appshell, we'll need to refactor things like ExtensionRendererState (which
tracks both tabs and webviews).

[lazyboy, 2014/04/15 22:17:03]

Updated test_extensions_browser_client.h

+
   // Returns an URLRequestJob to load an extension resource from the embedder's
   // resource bundle (.pak) files. Returns NULL if the request is not for a
   // resource bundle resource or if the embedder does not support this feature.