CSP: Don't perform NFC normalization prior to hashing

third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.cpp

Index: third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.cpp
diff --git a/third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.cpp b/third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.cpp
index b99bb2809e1da107ab7d3bd4b9f86c5b03cddaf8..aa01bf6a1fc80a36198ad8eff90f43fa28fb611f 100644
--- a/third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.cpp
+++ b/third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.cpp
@@ -26,8 +26,8 @@ namespace {
 String getSha256String(const String& content)
 {
     DigestValue digest;
-    StringUTF8Adaptor normalizedContent = normalizeSource(content);
-    bool digestSuccess = computeDigest(HashAlgorithmSha256, normalizedContent.data(), normalizedContent.length(), digest);
+    StringUTF8Adaptor utf8Content(content);

[jww, 2015/10/29 21:22:14]

Since we're supposed to use the "script block's source" (for script elements;
it's similar for stylesheets, too), I don't think that technically we should be
using utf8 here necessarily
(http://www.w3.org/TR/html5/scripting-1.html#the-script-block's-source). But
that's not your problem, so I'll try address that in a future CL.

[jsbell, 2015/10/29 22:01:46]

Acknowledged.

+    bool digestSuccess = computeDigest(HashAlgorithmSha256, utf8Content.data(), utf8Content.length(), digest);
     if (!digestSuccess) {
         return "sha256-...";
     }