Implementation of W3C compliant CSP script-src nonce.

Source/core/loader/ResourceLoader.cpp

 /*
  * Copyright (C) 2006, 2007, 2010, 2011 Apple Inc. All rights reserved.
  *           (C) 2007 Graham Dennis (graham.dennis@gmail.com)
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
  *     notice, this list of conditions and the following disclaimer. 
@@ skipping 305 matching lines @@
 {
     if (documentLoader()->applicationCacheHost()->maybeLoadFallbackForRedirect(this, request, redirectResponse))
         return;
 
     // Store the previous URL because we may modify it.
     KURL previousURL = m_request.url();
     RefPtr<ResourceLoader> protect(this);
 
     ASSERT(!request.isNull());
     if (!redirectResponse.isNull()) {
-        if (!m_documentLoader->cachedResourceLoader()->canRequest(m_resource->type(), request.url())) {
+        if
+        (!m_documentLoader->cachedResourceLoader()->canRequest(m_resource->type(), request.url(), NULL)) {

[abarth-chromium, 2013/05/14 21:11:08]

These two lines should be merged.

Also, we don't use NULL as a constant.  We use 0 instead.  :)

Why is 0 the right thing to pass here?  Does that mean we'll incorrectly block a
request if there's a redirect?  Specifically, if there's a <script nonce="..."
src="..."> and the we get a redirect, is the script still allowed?  In any case,
please add a test for this case.

[jww, 2013/05/14 22:55:30]

Can you elaborate on the example you're concerned about? I don't understand the
redirect issue you want me to test.

On 2013/05/14 21:11:08, abarth wrote:

             cancel();
             return;
         }
         if (m_resource->type() == CachedResource::ImageResource && m_documentLoader->cachedResourceLoader()->shouldDeferImageLoad(request.url())) {
             cancel();
             return;
         }
         m_resource->willSendRequest(request, redirectResponse);
     }
 
@@ skipping 193 matching lines @@
     info.addMember(m_request, "request");
     info.addMember(m_originalRequest, "originalRequest");
     info.addMember(m_deferredRequest, "deferredRequest");
     info.addMember(m_options, "options");
     info.addMember(m_resource, "resource");
     info.addMember(m_documentLoader, "documentLoader");
     info.addMember(m_requestCountTracker, "requestCountTracker");
 }
 
 }