CSP: Fire 'SecurityPolicyViolation' on the offending element.

third_party/WebKit/Source/bindings/core/v8/ScriptController.h

 /*
  * Copyright (C) 2008, 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 29 matching lines @@
 #include "platform/heap/Handle.h"
 #include "wtf/HashMap.h"
 #include "wtf/Noncopyable.h"
 #include "wtf/Vector.h"
 #include "wtf/text/TextPosition.h"
 #include <v8.h>
 
 namespace blink {
 
 class DOMWrapperWorld;
+class Element;
 class ExecutionContext;
 class HTMLDocument;
 class HTMLPlugInElement;
 class KURL;
 class ScriptState;
 class ScriptSourceCode;
 class SecurityOrigin;
 class WindowProxy;
 class Widget;
 
@@ skipping 46 matching lines @@
   // Otherwise, a new world is created.
   //
   // FIXME: Get rid of extensionGroup here.
   // FIXME: We don't want to support multiple scripts.
   void executeScriptInIsolatedWorld(int worldID,
                                     const HeapVector<ScriptSourceCode>& sources,
                                     int extensionGroup,
                                     Vector<v8::Local<v8::Value>>* results);
 
   // Returns true if argument is a JavaScript URL.
-  bool executeScriptIfJavaScriptURL(const KURL&);
+  bool executeScriptIfJavaScriptURL(const KURL&, Element*);
 
   // Returns true if the current world is isolated, and has its own Content
   // Security Policy. In this case, the policy of the main world should be
   // ignored when evaluating resources injected into the DOM.
   bool shouldBypassMainWorldCSP();
 
   PassRefPtr<SharedPersistent<v8::Object>> createPluginWrapper(Widget*);
 
   void enableEval();
   void disableEval(const String& errorMessage);
@@ skipping 39 matching lines @@
   v8::Local<v8::Value> evaluateScriptInMainWorld(const ScriptSourceCode&,
                                                  AccessControlStatus,
                                                  ExecuteScriptPolicy);
 
   Member<WindowProxyManager> m_windowProxyManager;
 };
 
 }  // namespace blink
 
 #endif  // ScriptController_h