CSP: Experimentally harden against nonce-stealing injections.

third_party/WebKit/Source/core/frame/UseCounter.h

 /*
  * Copyright (C) 2012 Google, Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 1262 matching lines @@
         ChromeLoadTimesUnknown = 1499,
         SVGViewElement = 1500,
         WebShareShare = 1501,
         AuxclickAddListenerCount = 1502,
         HTMLCanvasElement = 1503,
         SVGSMILAnimationElementTiming = 1504,
         SVGSMILBeginEndAnimationElement = 1505,
         SVGSMILPausing = 1506,
         SVGSMILCurrentTime = 1507,
         HTMLBodyElementOnSelectionChangeAttribute = 1508,
+        CleanScriptElementWithNonce = 1509,
+        PotentiallyInjectedScriptElementWithNonce = 1510,
 
         // Add new features immediately above this line. Don't change assigned
         // numbers of any item, and don't reuse removed slots.
         // Also, run update_use_counter_feature_enum.py in chromium/src/tools/metrics/histograms/
         // to update the UMA mapping.
         NumberOfFeatures, // This enum value must be last.
     };
 
     // "count" sets the bit for this feature to 1. Repeated calls are ignored.
     static void count(const Frame*, Feature);
@@ skipping 70 matching lines @@
     friend class UseCounterTest;
     unsigned m_muteCount;
 
     CountBits m_countBits;
     BitVector m_CSSFeatureBits;
 };
 
 } // namespace blink
 
 #endif // UseCounter_h