[HTML Import] Respect Content Security Policy Model

Source/core/html/HTMLImportsController.cpp

Index: Source/core/html/HTMLImportsController.cpp
diff --git a/Source/core/html/HTMLImportsController.cpp b/Source/core/html/HTMLImportsController.cpp
index 68d4b6b74e50c3a57bc69f057041d55438671244..c578f25ddc7be740b5ad7f6aef23abe730ac1d49 100644
--- a/Source/core/html/HTMLImportsController.cpp
+++ b/Source/core/html/HTMLImportsController.cpp
@@ -90,7 +90,7 @@ void LinkImport::process()
 
     CachedResourceRequest request = builder.build(true);
     request.setPotentiallyCrossOriginEnabled(controller->securityOrigin(), DoNotAllowStoredCredentials);
-    CachedResourceHandle<CachedRawResource> resource = controller->cachedResourceLoader()->requestRawResource(request);
+    CachedResourceHandle<CachedRawResource> resource = controller->cachedResourceLoader()->requestImport(request);
     if (!resource)
         return;
 
@@ -180,6 +180,7 @@ HTMLImportLoader::State HTMLImportLoader::startParsing(const ResourceResponse& r
         return StateError;
 
     m_importedDocument = HTMLDocument::create(DocumentInit(response.url(), 0, this));
+    m_importedDocument->initContentSecurityPolicy();
     m_writer = DocumentWriter::create(m_importedDocument.get(), response.mimeType(), response.textEncodingName());
 
     return StateLoading;