CSP 1.1: Introduce the 'child-src' directive.

Source/core/loader/DocumentLoader.cpp

Index: Source/core/loader/DocumentLoader.cpp
diff --git a/Source/core/loader/DocumentLoader.cpp b/Source/core/loader/DocumentLoader.cpp
index 1874fc27a3275dff0a669db2e228c755f94a566a..e53ad70a6e272431e9f5e8053d91e99c8723779e 100644
--- a/Source/core/loader/DocumentLoader.cpp
+++ b/Source/core/loader/DocumentLoader.cpp
@@ -303,6 +303,7 @@ bool DocumentLoader::shouldContinueForNavigationPolicy(const ResourceRequest& re
         // Fire a load event, as timing attacks would otherwise reveal that the
         // frame was blocked. This way, it looks like every other cross-origin
         // page load.
+        m_frame->document()->enforceSandboxFlags(SandboxOrigin);
         m_frame->ownerElement()->dispatchEvent(Event::create(EventTypeNames::load));
         return false;
     }