Block Service Workers containing parts of their query string as XSS.

Source/web/WebEmbeddedWorkerImpl.h

 /*
  * Copyright (C) 2013 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 109 matching lines @@
     bool m_loadingShadowPage;
     bool m_askedToTerminate;
 
     enum WaitingForDebuggerState {
         WaitingForDebuggerBeforeLoadingScript,
         WaitingForDebuggerAfterScriptLoaded,
         NotWaitingForDebugger
     };
 
     WaitingForDebuggerState m_waitingForDebuggerState;
+
+    String checkForReflectedXSS();

[jww, 2015/08/21 17:55:46]

We might want to generalize this in some way into a utility function, in case we
want to extend this to other types of dynamically loaded script eventually.

 };
 
 } // namespace blink
 
 #endif // WebEmbeddedWorkerImpl_h