Disallow JS execution on WebUI pages.

      As a side effect TapWebViewElementWithId now actually opens windows instead of
popups, which is definitely a correct behavior.

BUG=692378

Review-Url: https://codereview.chromium.org/2761173002
Cr-Commit-Position: refs/heads/master@{#459149}