Apply CSP default-src hash values to script-src and style src.

Source/core/frame/csp/CSPDirectiveList.cpp

Index: Source/core/frame/csp/CSPDirectiveList.cpp
diff --git a/Source/core/frame/csp/CSPDirectiveList.cpp b/Source/core/frame/csp/CSPDirectiveList.cpp
index d88ffc3725a9747107df8c71f57d77f543c839fa..822ff1b5b5150d48faa197cda5a181d7f0c5eedd 100644
--- a/Source/core/frame/csp/CSPDirectiveList.cpp
+++ b/Source/core/frame/csp/CSPDirectiveList.cpp
@@ -748,6 +748,8 @@ void CSPDirectiveList::addDirective(const String& name, const String& value)
 
     if (equalIgnoringCase(name, ContentSecurityPolicy::DefaultSrc)) {
         setCSPDirective<SourceListDirective>(name, value, m_defaultSrc);
+        m_policy->usesScriptHashAlgorithms(m_defaultSrc->hashAlgorithmsUsed());
+        m_policy->usesStyleHashAlgorithms(m_defaultSrc->hashAlgorithmsUsed());

[Mike West, 2015/09/22 04:37:38]

Hrm. I wonder if we can get away with combining these? I suspect that most pages
aren't going to use different algorithms for script and style. *shrug* Something
for a future CL... perhaps you could add a `TODO(mkwst)`?

[jww, 2015/09/22 16:55:38]

Sure, I think another CL makes sense.

     } else if (equalIgnoringCase(name, ContentSecurityPolicy::ScriptSrc)) {
         setCSPDirective<SourceListDirective>(name, value, m_scriptSrc);
         m_policy->usesScriptHashAlgorithms(m_scriptSrc->hashAlgorithmsUsed());