Index: Source/core/frame/csp/CSPSourceList.cpp |
diff --git a/Source/core/frame/csp/CSPSourceList.cpp b/Source/core/frame/csp/CSPSourceList.cpp |
index 2879466ff3b4430054087d9fdf14ad832d684493..9caeb9340d6a66a0b0480e6b466375fd44838ca0 100644 |
--- a/Source/core/frame/csp/CSPSourceList.cpp |
+++ b/Source/core/frame/csp/CSPSourceList.cpp |
@@ -48,7 +48,7 @@ bool CSPSourceList::matches(const KURL& url, ContentSecurityPolicy::RedirectStat |
if (m_allowStar) |
return true; |
- KURL effectiveURL = SecurityOrigin::shouldUseInnerURL(url) ? SecurityOrigin::extractInnerURL(url) : url; |
+ KURL effectiveURL = m_policy->selfMatchesInnerURL() && SecurityOrigin::shouldUseInnerURL(url) ? SecurityOrigin::extractInnerURL(url) : url; |
if (m_allowSelf && m_policy->urlMatchesSelf(effectiveURL)) |
return true; |