CSP: Fire 'SecurityPolicyViolation' on the offending element.

third_party/WebKit/Source/bindings/core/v8/ScriptController.cpp

 /*
  * Copyright (C) 2008, 2009 Google Inc. All rights reserved.
  * Copyright (C) 2009 Apple Inc. All rights reserved.
  * Copyright (C) 2014 Opera Software ASA. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
@@ skipping 313 matching lines @@
     return false;
   Settings* settings = frame()->settings();
   const bool allowed =
       client->allowScript(settings && settings->scriptEnabled()) ||
       isInPrivateScriptIsolateWorld(isolate());
   if (!allowed && reason == AboutToExecuteScript)
     client->didNotAllowScript();
   return allowed;
 }
 
-bool ScriptController::executeScriptIfJavaScriptURL(const KURL& url) {
+bool ScriptController::executeScriptIfJavaScriptURL(const KURL& url,
+                                                    Element* element) {
   if (!protocolIsJavaScript(url))
     return false;
 
   bool shouldBypassMainWorldContentSecurityPolicy =
       ContentSecurityPolicy::shouldBypassMainWorld(frame()->document());
   if (!frame()->page() ||
       (!shouldBypassMainWorldContentSecurityPolicy &&
        !frame()->document()->contentSecurityPolicy()->allowJavaScriptURLs(
-           frame()->document()->url(), eventHandlerPosition().m_line)))
+           element, frame()->document()->url(),
+           eventHandlerPosition().m_line))) {
     return true;
+  }
 
   bool progressNotificationsNeeded =
       frame()->loader().stateMachine()->isDisplayingInitialEmptyDocument() &&
       !frame()->isLoading();
   if (progressNotificationsNeeded)
     frame()->loader().progress().progressStarted();
 
   Document* ownerDocument = frame()->document();
 
   const int javascriptSchemeLength = sizeof("javascript:") - 1;
@@ skipping 109 matching lines @@
     for (size_t i = 0; i < resultArray->Length(); ++i) {
       v8::Local<v8::Value> value;
       if (!resultArray->Get(scriptState->context(), i).ToLocal(&value))
         return;
       results->append(value);
     }
   }
 }
 
 }  // namespace blink