Remove the 'reflected-xss' directive from CSP.

third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CSPDirectiveList_h
 #define CSPDirectiveList_h
 
 #include "core/fetch/Resource.h"
 #include "core/frame/csp/ContentSecurityPolicy.h"
 #include "core/frame/csp/MediaListDirective.h"
@@ skipping 124 matching lines @@
 
   bool strictMixedContentChecking() const {
     return m_strictMixedContentCheckingEnforced;
   }
   void reportMixedContent(const KURL& mixedURL,
                           ResourceRequest::RedirectStatus) const;
 
   const String& evalDisabledErrorMessage() const {
     return m_evalDisabledErrorMessage;
   }
-  ReflectedXSSDisposition getReflectedXSSDisposition() const {
-    return m_reflectedXSSDisposition;
-  }
   ReferrerPolicy getReferrerPolicy() const { return m_referrerPolicy; }
   bool didSetReferrerPolicy() const { return m_didSetReferrerPolicy; }
   bool isReportOnly() const {
     return m_headerType == ContentSecurityPolicyHeaderTypeReport;
   }
   const Vector<String>& reportEndpoints() const { return m_reportEndpoints; }
   uint8_t requireSRIForTokens() const { return m_requireSRIFor; }
   bool isFrameAncestorsEnforced() const {
     return m_frameAncestors.get() && !isReportOnly();
   }
@@ skipping 16 matching lines @@
                    ContentSecurityPolicyHeaderType,
                    ContentSecurityPolicyHeaderSource);
 
   bool parseDirective(const UChar* begin,
                       const UChar* end,
                       String& name,
                       String& value);
   void parseRequireSRIFor(const String& name, const String& value);
   void parseReportURI(const String& name, const String& value);
   void parsePluginTypes(const String& name, const String& value);
-  void parseReflectedXSS(const String& name, const String& value);
   void parseReferrer(const String& name, const String& value);
   void addDirective(const String& name, const String& value);
   void applySandboxPolicy(const String& name, const String& sandboxPolicy);
   void enforceStrictMixedContentChecking(const String& name,
                                          const String& value);
   void enableInsecureRequestsUpgrade(const String& name, const String& value);
   void treatAsPublicAddress(const String& name, const String& value);
 
   template <class CSPDirectiveType>
   void setCSPDirective(const String& name,
@@ skipping 79 matching lines @@
 
   bool denyIfEnforcingPolicy() const { return isReportOnly(); }
 
   Member<ContentSecurityPolicy> m_policy;
 
   String m_header;
   ContentSecurityPolicyHeaderType m_headerType;
   ContentSecurityPolicyHeaderSource m_headerSource;
 
   bool m_hasSandboxPolicy;
-  ReflectedXSSDisposition m_reflectedXSSDisposition;
 
   bool m_didSetReferrerPolicy;
   ReferrerPolicy m_referrerPolicy;
 
   bool m_strictMixedContentCheckingEnforced;
 
   bool m_upgradeInsecureRequests;
   bool m_treatAsPublicAddress;
 
   Member<MediaListDirective> m_pluginTypes;
@@ skipping 15 matching lines @@
   uint8_t m_requireSRIFor;
 
   Vector<String> m_reportEndpoints;
 
   String m_evalDisabledErrorMessage;
 };
 
 }  // namespace blink
 
 #endif