CSP: Fire 'SecurityPolicyViolation' on the offending element.

third_party/WebKit/Source/web/WebPluginContainerImpl.cpp

Index: third_party/WebKit/Source/web/WebPluginContainerImpl.cpp
diff --git a/third_party/WebKit/Source/web/WebPluginContainerImpl.cpp b/third_party/WebKit/Source/web/WebPluginContainerImpl.cpp
index a971232ae0f0bd9c3c005480eb543729efe65e01..c707176efa44bd75fe781176e642adca162f59a5 100644
--- a/third_party/WebKit/Source/web/WebPluginContainerImpl.cpp
+++ b/third_party/WebKit/Source/web/WebPluginContainerImpl.cpp
@@ -467,8 +467,9 @@ WebString WebPluginContainerImpl::executeScriptURL(const WebURL& url,
     return WebString();
 
   if (!m_element->document().contentSecurityPolicy()->allowJavaScriptURLs(
-          m_element->document().url(), OrdinalNumber()))
+          m_element, m_element->document().url(), OrdinalNumber())) {
     return WebString();
+  }
 
   const KURL& kurl = url;
   DCHECK(kurl.protocolIs("javascript"));