CSP: Ship hash and nonce expressions, and the 'frame-ancestors' directive.

CSP: Ship hash and nonce expressions, and the 'frame-ancestors' directive.

This matches Firefox's behavior (see [1]). Hooray for interoperation!

Intent to Ship thread: https://groups.google.com/a/chromium.org/d/msg/blink-dev/rCiwMvGG8IY/MgRtHrkQfgMJ

[1]: https://bugzilla.mozilla.org/show_bug.cgi?id=979580

Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=170551

[Mike West, 2014-04-01 06:54:31]

Mind taking a look, Jochen?

-mike

[Mike West, 2014-04-01 06:56:51]

+jww: FYI.

[jochen (gone - plz use gerrit), 2014-04-01 11:27:18]

lgtm

[Mike West, 2014-04-01 11:34:06]

The CQ bit was checked by mkwst@chromium.org

[commit-bot: I haz the power, 2014-04-01 11:34:16]

CQ is trying da patch. Follow status at
https://chromium-status.appspot.com/cq/mkwst@chromium.org/220343005/1

[commit-bot: I haz the power, 2014-04-01 11:43:19]

Change committed as 170551