CSP: Allow ':80' to match ':443' in source expressions.

third_party/WebKit/Source/core/frame/csp/CSPSource.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/frame/csp/CSPSource.h"
 
 #include "core/frame/UseCounter.h"
 #include "core/frame/csp/ContentSecurityPolicy.h"
 #include "platform/weborigin/KURL.h"
 #include "platform/weborigin/KnownPorts.h"
@@ skipping 73 matching lines @@
 bool CSPSource::portMatches(const KURL& url) const
 {
     if (m_portWildcard == HasWildcard)
         return true;
 
     int port = url.port();
 
     if (port == m_port)
         return true;
 
+    if (m_port == 80 && (port == 443 || (port == 0 && defaultPortForProtocol(url.protocol()) == 443)))
+        return true;
+
     if (!port)
         return isDefaultPortForProtocol(m_port, url.protocol());
 
     if (!m_port)
         return isDefaultPortForProtocol(port, url.protocol());
 
     return false;
 }
 
 bool CSPSource::isSchemeOnly() const
 {
     return m_host.isEmpty();
 }
 
 DEFINE_TRACE(CSPSource)
 {
     visitor->trace(m_policy);
 }
 
 } // namespace blink