GitLab

Only whitelisted webUIs could embed webview tag, specifically, they have to be declared in _api_features.json and they have to relax CSP to allow internal browser plugins.

BUG=

Review URL: https://codereview.chromium.org/572633003

Cr-Commit-Position: refs/heads/master@{#296251}