Incorrect Content Security Policy on some brave:// pages

[antonok-edm]

Opening brave://adblock results in the following printed to the devtools console, and to stderr:

Unrecognized Content-Security-Policy directive 'defaultframe-ancestors'.

That error is caused by an incorrectly set CSP header from the request to the brave://adblock page, which has the following value:

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://brave-resources 'self';defaultframe-ancestors 'none';

...which appears to be the result of an incorrectly combined set of directives.

[antonok-edm]

This also occurs on the webcompat reporter UI (brave://webcompat), Tor internals (brave://tor-internals), rewards internals (brave://rewards-internals), and tipping banner (brave://tip)

[antonok-edm]

This appears to have been fixed at some point.