Block Service Workers containing parts of their query string as XSS.

Source/web/WebEmbeddedWorkerImpl.h

Index: Source/web/WebEmbeddedWorkerImpl.h
diff --git a/Source/web/WebEmbeddedWorkerImpl.h b/Source/web/WebEmbeddedWorkerImpl.h
index 6f5d3e5b97aef2827413ef64f361c1da8f29e18a..49b316903dac57c238aff0be8e9f4a8d62bcbf6e 100644
--- a/Source/web/WebEmbeddedWorkerImpl.h
+++ b/Source/web/WebEmbeddedWorkerImpl.h
@@ -127,6 +127,8 @@ private:
     };
 
     WaitingForDebuggerState m_waitingForDebuggerState;
+
+    String checkForReflectedXSS();

[jww, 2015/08/21 17:55:46]

We might want to generalize this in some way into a utility function, in case we
want to extend this to other types of dynamically loaded script eventually.

 };
 
 } // namespace blink