Public part of hero CL

Change-Id: Ib25fc8454cac9db5c17e0fd4c1952bbe7a2a4c28
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2342388Reviewed-by: Tommy Steimel <steimel@chromium.org>
Commit-Queue: Becca Hughes <beccahughes@chromium.org>
Cr-Commit-Position: refs/heads/master@{#796487}

chrome/browser/media/kaleidoscope/kaleidoscope_ui.cc

@@ -231,12 +231,11 @@ content::WebUIDataSource* CreateUntrustedWebUIDataSource() {
   untrusted_source->OverrideContentSecurityPolicy(
       network::mojom::CSPDirectiveName::ImgSrc, "img-src * data:;");
   untrusted_source->OverrideContentSecurityPolicy(
-      network::mojom::CSPDirectiveName::MediaSrc, "media-src *;");
+      network::mojom::CSPDirectiveName::MediaSrc, "media-src * data:;");
 
-  // Allow access to Google APIs.
+  // Allow access to anywhere using fetch.
   untrusted_source->OverrideContentSecurityPolicy(
-      network::mojom::CSPDirectiveName::ConnectSrc,
-      base::StringPrintf("connect-src %s;", backend_url.spec().c_str()));
+      network::mojom::CSPDirectiveName::ConnectSrc, "connect-src *;");
 
   // Add the URL to the backend.
   untrusted_source->AddString("googleApiUrl", backend_url.spec());