Give shared workers their own content security policies

Source/core/workers/InProcessWorkerBase.cpp

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "config.h"
 #include "core/workers/InProcessWorkerBase.h"
 
 #include "bindings/core/v8/ExceptionState.h"
 #include "core/events/MessageEvent.h"
 #include "core/fetch/ResourceFetcher.h"
@@ skipping 60 matching lines @@
 }
 
 bool InProcessWorkerBase::hasPendingActivity() const
 {
     // The worker context does not exist while loading, so we must ensure that the worker object is not collected, nor are its event listeners.
     return (m_contextProxy && m_contextProxy->hasPendingActivity()) || m_scriptLoader;
 }
 
 PassRefPtr<ContentSecurityPolicy> InProcessWorkerBase::contentSecurityPolicy()
 {
-    return m_contentSecurityPolicy;
+    return WorkerScriptLoaderClient::contentSecurityPolicy();
 }
 
 void InProcessWorkerBase::didReceiveResponse(unsigned long identifier, const ResourceResponse& response)
 {
-    if (!response.url().protocolIs("blob") && !response.url().protocolIs("file") && !response.url().protocolIs("filesystem")) {
-        m_contentSecurityPolicy = ContentSecurityPolicy::create();
-        m_contentSecurityPolicy->setOverrideURLForSelf(response.url());
-        m_contentSecurityPolicy->didReceiveHeaders(ContentSecurityPolicyResponseHeaders(response));
-    }
+    processContentSecurityPolicy(response);
     InspectorInstrumentation::didReceiveScriptResponse(executionContext(), identifier);
 }
 
 void InProcessWorkerBase::notifyFinished()
 {
     if (m_scriptLoader->failed()) {
         dispatchEvent(Event::createCancelable(EventTypeNames::error));
     } else {
         ASSERT(m_contextProxy);
         WorkerThreadStartMode startMode = DontPauseWorkerGlobalScopeOnStart;
         if (InspectorInstrumentation::shouldPauseDedicatedWorkerOnStart(executionContext()))
             startMode = PauseWorkerGlobalScopeOnStart;
         m_contextProxy->startWorkerGlobalScope(m_scriptLoader->url(), executionContext()->userAgent(m_scriptLoader->url()), m_scriptLoader->script(), startMode);
         InspectorInstrumentation::scriptImported(executionContext(), m_scriptLoader->identifier(), m_scriptLoader->script());
     }
     m_scriptLoader = nullptr;
 }
 
 DEFINE_TRACE(InProcessWorkerBase)
 {
     AbstractWorker::trace(visitor);
 }
 
 } // namespace blink