Give shared workers their own content security policies

LayoutTests/http/tests/security/contentSecurityPolicy/resources/worker.php

 <?php
   header("Expires: Thu, 01 Dec 2003 16:00:00 GMT");
   header("Cache-Control: no-cache, must-revalidate");
   header("Pragma: no-cache");
   if ($_GET["csp"]) {
     $csp = $_GET["csp"];
     // If the magic quotes option is enabled, the CSP could be escaped and
     // the test would fail.
     if (get_magic_quotes_gpc()) {
       $csp = stripslashes($csp);
@@ skipping 16 matching lines @@
 postMessage(id === 0 ? "eval blocked" : "eval allowed");
 
 <?php
 } else if ($_GET["type"] == "function-function") {
 ?>
 
 var fn = function() {
     postMessage('Function() function blocked');
 }
 try {
-    fn = new Function("", "postMessage('Function() function allowed');"); 
+    fn = new Function("", "postMessage('Function() function allowed');");
 }
 catch(e) {
 }
 fn();
 
 <?php
 } else if ($_GET["type"] == "importscripts") {
 ?>
 
 try {
     importScripts("http://localhost:8000/security/contentSecurityPolicy/resources/post-message.js");
     postMessage("importScripts allowed");
 } catch(e) {
     postMessage("importScripts blocked: " + e);
 }
 
 <?php
 } else if ($_GET["type"] == "make-xhr") {
 ?>
 
 try {
     var xhr = new XMLHttpRequest;
-    xhr.open("GET", "http://127.0.0.1:8000/xmlhttprequest/resources/get.txt", true); 
+    xhr.open("GET", "http://127.0.0.1:8000/xmlhttprequest/resources/get.txt", true);
     postMessage("xhr allowed");
 } catch(e) {
     postMessage("xhr blocked");
 }
 
 <?php
+} else if ($_GET["type"] == "shared-make-xhr") {
+?>
+
+onconnect = function (e) {
+    var port = e.ports[0];
+    try {
+        var xhr = new XMLHttpRequest;
+        xhr.open(
+            "GET",
+            "http://127.0.0.1:8000/xmlhttprequest/resources/get.txt",
+            true);
+        port.postMessage("xhr allowed");
+    } catch(e) {
+        port.postMessage("xhr blocked");
+    }
+}
+
+<?php
 } else if ($_GET["type"] == "set-timeout") {
 ?>
 
 var id = 0;
 try {
     id = setTimeout("postMessage('handler invoked')", 100);
 } catch(e) {
 }
 postMessage(id === 0 ? "setTimeout blocked" : "setTimeout allowed");
 
 <?php
 } else if ($_GET["type"] == "alert-pass") {
 ?>
 
 alert('PASS');
 
 <?php
 } else if ($_GET["type"] == "report-referrer") {
 ?>
 
 var xhr = new XMLHttpRequest;
 xhr.open("GET", "http://127.0.0.1:8000/security/resources/echo-referrer-header.php", true);
 xhr.onload = function () {
     postMessage(this.responseText);
 };
 xhr.send();
 
 <?php
+} else if ($_GET["type"] == "shared-report-referrer") {
+?>
+
+onconnect = function (e) {
+    var port = e.ports[0];
+    var xhr = new XMLHttpRequest;
+    xhr.open(
+        "GET",
+        "http://127.0.0.1:8000/security/resources/echo-referrer-header.php",
+        true);
+    xhr.onload = function () {
+        port.postMessage(this.responseText);
+    };
+    xhr.send();
+};
+
+<?php
 }
 ?>