This is part of an experimental feature in Content Security Policy.

This patch introduces a new header Allow-CSP-From that allows the embedded iframe
to use a whitelist to enforce upon itself embedder's CSP.

BUG=647588

Review-Url: https://codereview.chromium.org/2404373003
Cr-Commit-Position: refs/heads/master@{#425955}
10 files changed