Take script URLs into account when applying script content settings.

chrome/browser/renderer_host/chrome_resource_dispatcher_host_delegate.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/renderer_host/chrome_resource_dispatcher_host_delegate.h"
 
 #include "base/logging.h"
 #include "chrome/browser/browser_process.h"
 #include "chrome/browser/content_settings/host_content_settings_map.h"
 #include "chrome/browser/download/download_request_limiter.h"
@@ skipping 315 matching lines @@
       if (state->IsEnabledForHost(
               &domain_state, request->url().host(), has_sni) ||
           state->HasPinsForHost(
               &domain_state, request->url().host(), has_sni)) {
         filter->Send(new ChromeViewMsg_AddStrictSecurityHost(
             info->route_id(), request->url().host()));
       }
     }
   }
 
-  // We must send the content settings for the URL before sending response
-  // headers to the renderer.
-  const content::ResourceContext& resource_context = filter->resource_context();
-  ProfileIOData* io_data =
-      reinterpret_cast<ProfileIOData*>(resource_context.GetUserData(NULL));
-  HostContentSettingsMap* map = io_data->GetHostContentSettingsMap();
-  filter->Send(new ChromeViewMsg_SetContentSettingsForLoadingURL(
-      info->route_id(), request->url(),
-      map->GetContentSettings(request->url())));
-
   // See if the response contains the X-Auto-Login header.  If so, this was
   // a request for a login page, and the server is allowing the browser to
   // suggest auto-login, if available.
   AutoLoginPrompter::ShowInfoBarIfPossible(request, info->child_id(),
                                            info->route_id());
 }
 
 void ChromeResourceDispatcherHostDelegate::OnRequestRedirected(
     net::URLRequest* request,
     ResourceResponse* response,
     ResourceMessageFilter* filter) {
   LoadTimingObserver::PopulateTimingInfo(request, response);
 }