Prototype an 'allow-unsandboxed-auxiliary' sandbox flag.

Source/core/dom/SandboxFlags.cpp

Index: Source/core/dom/SandboxFlags.cpp
diff --git a/Source/core/dom/SandboxFlags.cpp b/Source/core/dom/SandboxFlags.cpp
index 4df79990cba5112f93c3e5f9fd8fc20a19f26501..e591416e361d5850d22ffe76e4c1f0bcec2f710d 100644
--- a/Source/core/dom/SandboxFlags.cpp
+++ b/Source/core/dom/SandboxFlags.cpp
@@ -28,6 +28,7 @@
 #include "core/dom/SandboxFlags.h"
 
 #include "core/html/parser/HTMLParserIdioms.h"
+#include "platform/RuntimeEnabledFeatures.h"
 #include "wtf/text/StringBuilder.h"
 
 namespace blink {
@@ -65,6 +66,9 @@ SandboxFlags parseSandboxPolicy(const SpaceSplitString& policy, String& invalidT
             flags &= ~SandboxPointerLock;
         } else if (equalIgnoringCase(sandboxToken, "allow-orientation-lock")) {
             flags &= ~SandboxOrientationLock;
+        } else if (equalIgnoringCase(sandboxToken, "allow-unsandboxed-auxiliary")) {
+            if (RuntimeEnabledFeatures::unsandboxedAuxiliaryEnabled())

[philipj_slow, 2015/05/13 10:36:19]

Should this check not be moved into the containing if so that when it's disabled
the token will still be treated as an error?

[Mike West, 2015/05/13 11:22:01]

It should!

+            flags &= ~SandboxUnsandboxedAuxiliary;
         } else {
             if (numberOfTokenErrors)
                 tokenErrors.appendLiteral(", '");