CSP: Fire 'SecurityPolicyViolation' on the offending element.

third_party/WebKit/Source/bindings/core/v8/ScriptController.h

Index: third_party/WebKit/Source/bindings/core/v8/ScriptController.h
diff --git a/third_party/WebKit/Source/bindings/core/v8/ScriptController.h b/third_party/WebKit/Source/bindings/core/v8/ScriptController.h
index 4a2b220880911695a8d3b4e806a04f933eb16d2d..80a098de319df65c1a8c88a10569d820975b01ed 100644
--- a/third_party/WebKit/Source/bindings/core/v8/ScriptController.h
+++ b/third_party/WebKit/Source/bindings/core/v8/ScriptController.h
@@ -47,6 +47,7 @@
 namespace blink {
 
 class DOMWrapperWorld;
+class Element;
 class ExecutionContext;
 class HTMLDocument;
 class HTMLPlugInElement;
@@ -113,7 +114,7 @@ class CORE_EXPORT ScriptController final
                                     Vector<v8::Local<v8::Value>>* results);
 
   // Returns true if argument is a JavaScript URL.
-  bool executeScriptIfJavaScriptURL(const KURL&);
+  bool executeScriptIfJavaScriptURL(const KURL&, Element*);
 
   // Returns true if the current world is isolated, and has its own Content
   // Security Policy. In this case, the policy of the main world should be