Teach 'LinkRequestBuilder' about the 'nonce' attribute.

Teach 'LinkRequestBuilder' about the 'nonce' attribute.

Rather than special-casing stylesheet loading, this patch teaches
'LinkRequestBuilder' to grab the nonce when creating requests associated
with '<link>' elements. This ensures that we deal correctly with
stylesheet and HTML imports.

The import tests added in 'http/tests/security/contentSecurityPolicy/nonces/'
verify the expected behavior: a CSP containing "script-src 'nonce-abc'" should
allow '<link rel="import" nonce="abc" href="...">'.

BUG=627762
R=jochen@chromium.org

Committed: https://crrev.com/dd6fbccfc7457596f386d41b822d9e93a22b4cac
Cr-Commit-Position: refs/heads/master@{#405454}

[Mike West, 2016-07-13 09:58:01]

Mind taking a look at this, Jochen?

aaj@: FYI.

[jochen (gone - plz use gerrit), 2016-07-13 09:59:58]

lgtm

[Mike West, 2016-07-14 07:34:26]

The CQ bit was checked by mkwst@chromium.org to run a CQ dry run

[commit-bot: I haz the power, 2016-07-14 07:34:41]

Dry run: CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[Mike West, 2016-07-14 07:48:33]

The CQ bit was unchecked by mkwst@chromium.org

[Mike West, 2016-07-14 07:48:35]

The CQ bit was checked by mkwst@chromium.org

[commit-bot: I haz the power, 2016-07-14 07:48:55]

CQ is trying da patch. Follow status at
 
https://chromium-cq-status.appspot.com/v2/patch-status/codereview.chromium.or...

[commit-bot: I haz the power, 2016-07-14 09:20:56]

Committed patchset #1 (id:1)

[commit-bot: I haz the power, 2016-07-14 09:22:30]

Description was changed from

==========
Teach 'LinkRequestBuilder' about the 'nonce' attribute.

Rather than special-casing stylesheet loading, this patch teaches
'LinkRequestBuilder' to grab the nonce when creating requests associated
with '<link>' elements. This ensures that we deal correctly with
stylesheet and HTML imports.

The import tests added in 'http/tests/security/contentSecurityPolicy/nonces/'
verify the expected behavior: a CSP containing "script-src 'nonce-abc'" should
allow '<link rel="import" nonce="abc" href="...">'.

BUG=627762
R=jochen@chromium.org
==========

to

==========
Teach 'LinkRequestBuilder' about the 'nonce' attribute.

Rather than special-casing stylesheet loading, this patch teaches
'LinkRequestBuilder' to grab the nonce when creating requests associated
with '<link>' elements. This ensures that we deal correctly with
stylesheet and HTML imports.

The import tests added in 'http/tests/security/contentSecurityPolicy/nonces/'
verify the expected behavior: a CSP containing "script-src 'nonce-abc'" should
allow '<link rel="import" nonce="abc" href="...">'.

BUG=627762
R=jochen@chromium.org

Committed: https://crrev.com/dd6fbccfc7457596f386d41b822d9e93a22b4cac
Cr-Commit-Position: refs/heads/master@{#405454}
==========

[commit-bot: I haz the power, 2016-07-14 09:22:31]

Patchset 1 (id:??) landed as
https://crrev.com/dd6fbccfc7457596f386d41b822d9e93a22b4cac
Cr-Commit-Position: refs/heads/master@{#405454}