CSP source *.x.y should not match host x.y

Source/core/frame/csp/CSPSource.cpp

Index: Source/core/frame/csp/CSPSource.cpp
diff --git a/Source/core/frame/csp/CSPSource.cpp b/Source/core/frame/csp/CSPSource.cpp
index 461f566fc55746d1002d568cc0e85c6d26c70cf2..36ae0f588458c610f766c07efe934c1d0da53653 100644
--- a/Source/core/frame/csp/CSPSource.cpp
+++ b/Source/core/frame/csp/CSPSource.cpp
@@ -44,10 +44,11 @@ bool CSPSource::schemeMatches(const KURL& url) const
 bool CSPSource::hostMatches(const KURL& url) const
 {
     const String& host = url.host();
-    if (equalIgnoringCase(host, m_host))
-        return true;
-    return m_hostWildcard == HasWildcard && host.endsWith("." + m_host, TextCaseInsensitive);
 
+    if (m_hostWildcard == HasWildcard)
+        return host.endsWith("." + m_host, TextCaseInsensitive);

[Mike West, 2015/09/23 04:36:49]

Can you add a counter here as well, tracking the number of times the old style
would match, but this style doesn't? I worry a bit that we've poisoned the well
with the existing behavior, and might need to revert this (or reach out to folks
to change their sites) if the numbers are high.

[jww, 2015/09/23 05:33:10]

Done.

+
+    return equalIgnoringCase(host, m_host);
 }
 
 bool CSPSource::pathMatches(const KURL& url) const