Adding Embedding-CSP HTTP header

third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/resources/get-embedding-csp-header-and-respond.php

Index: third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/resources/get-embedding-csp-header-and-respond.php
diff --git a/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/resources/get-embedding-csp-header-and-respond.php b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/resources/get-embedding-csp-header-and-respond.php
new file mode 100644
index 0000000000000000000000000000000000000000..b8d7bdb81dde7c6297dc25cb70d8905f9231f098
--- /dev/null
+++ b/third_party/WebKit/LayoutTests/http/tests/security/contentSecurityPolicy/resources/get-embedding-csp-header-and-respond.php
@@ -0,0 +1,10 @@
+<?php
+    $embedding_csp_header = isset($_SERVER['HTTP_EMBEDDING_CSP']) ? $_SERVER['HTTP_EMBEDDING_CSP'] : null;
+?>
+
+<script>
+  var response = {};
+  response['src'] = '../resources/get-embedding-csp-header-and-respond.php';
+  response['embedding_csp'] = "<?php echo $embedding_csp_header; ?>";

[Mike West, 2016/10/06 13:30:21]

How about something like the following in both files:

```
response['embedding_csp'] = <?php echo is_null($embedding_csp_header) ?
"\"${embedding_csp_header}\"" : "null"; ?>
```

Also, you'll want to call `addslashes()` at some point (maybe when doing the
assignment?) to deal with policies that would otherwise break out of the string.

+  window.top.postMessage(response, '*');
+</script>