CSP: Allow hashed inline event handlers only with 'unsafe-hashed-attributes'

CSP: Allow hashed inline event handlers only with 'unsafe-hashed-attributes'

The original implementation didn't gate this on any particular signal in
the policy. Based on the discussion at https://github.com/w3c/webappsec-csp/issues/13,
we should be a bit more cautious. So, 'unsafe-hashed-attributes' it is.

BUG=546106
Committed: https://crrev.com/fb02ae61a30adf416bdb3f8fabcf1581bcf0b12f
Cr-Commit-Position: refs/heads/master@{#390418}

[Mike West, 2016-04-27 12:49:58]

mkwst@chromium.org changed reviewers:
+ jochen@chromium.org

[Mike West, 2016-04-27 12:49:58]

WDYT, Jochen?

[jochen (gone - plz use gerrit), 2016-04-27 13:18:04]

lgtm

[Mike West, 2016-04-28 16:30:56]

The CQ bit was checked by mkwst@chromium.org

[commit-bot: I haz the power, 2016-04-28 16:31:06]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1923273002/1
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1923273002/1

[commit-bot: I haz the power, 2016-04-28 17:47:24]

Committed patchset #1 (id:1)

[commit-bot: I haz the power, 2016-04-30 17:19:30]

Patchset 1 (id:??) landed as
https://crrev.com/fb02ae61a30adf416bdb3f8fabcf1581bcf0b12f
Cr-Commit-Position: refs/heads/master@{#390418}

[commit-bot: I haz the power, 2016-04-30 17:56:27]

Description was changed from

==========
CSP: Allow hashed inline event handlers only with 'unsafe-hashed-attributes'

The original implementation didn't gate this on any particular signal in
the policy. Based on the discussion at
https://github.com/w3c/webappsec-csp/issues/13,
we should be a bit more cautious. So, 'unsafe-hashed-attributes' it is.

BUG=546106
==========

to

==========
CSP: Allow hashed inline event handlers only with 'unsafe-hashed-attributes'

The original implementation didn't gate this on any particular signal in
the policy. Based on the discussion at
https://github.com/w3c/webappsec-csp/issues/13,
we should be a bit more cautious. So, 'unsafe-hashed-attributes' it is.

BUG=546106

Committed: https://crrev.com/fb02ae61a30adf416bdb3f8fabcf1581bcf0b12f
Cr-Commit-Position: refs/heads/master@{#390418}
==========