Remove the 'reflected-xss' directive from CSP.

third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h

 /*
  * Copyright (C) 2011 Google, Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 74 matching lines @@
   static const char Sandbox[];
   static const char ScriptSrc[];
   static const char StyleSrc[];
 
   // CSP Level 2 Directives
   static const char BaseURI[];
   static const char ChildSrc[];
   static const char FormAction[];
   static const char FrameAncestors[];
   static const char PluginTypes[];
-  static const char ReflectedXSS[];
   static const char Referrer[];
 
   // Manifest Directives (to be merged into CSP Level 2)
   // https://w3c.github.io/manifest/#content-security-policy
   static const char ManifestSrc[];
 
   // Mixed Content Directive
   // https://w3c.github.io/webappsec/specs/mixedcontent/#strict-mode
   static const char BlockAllMixedContent[];
 
@@ skipping 164 matching lines @@
                     const KURL&,
                     const String& nonce,
                     const IntegrityMetadataSet&,
                     ParserDisposition,
                     RedirectStatus = RedirectStatus::NoRedirect,
                     ReportingStatus = SendReport) const;
 
   void usesScriptHashAlgorithms(uint8_t ContentSecurityPolicyHashAlgorithm);
   void usesStyleHashAlgorithms(uint8_t ContentSecurityPolicyHashAlgorithm);
 
-  ReflectedXSSDisposition getReflectedXSSDisposition() const;
-
   bool didSetReferrerPolicy() const;
 
   void setOverrideAllowInlineStyle(bool);
   void setOverrideURLForSelf(const KURL&);
 
   bool isActive() const;
 
   // If a frame is passed in, the message will be logged to its active
   // document's console.  Otherwise, the message will be logged to this object's
   // |m_executionContext|.
   void logToConsole(ConsoleMessage*, LocalFrame* = nullptr);
 
   void reportDirectiveAsSourceExpression(const String& directiveName,
                                          const String& sourceExpression);
   void reportDuplicateDirective(const String&);
   void reportInvalidDirectiveValueCharacter(const String& directiveName,
                                             const String& value);
   void reportInvalidPathCharacter(const String& directiveName,
                                   const String& value,
                                   const char);
   void reportInvalidPluginTypes(const String&);
   void reportInvalidRequireSRIForTokens(const String&);
   void reportInvalidSandboxFlags(const String&);
   void reportInvalidSourceExpression(const String& directiveName,
                                      const String& source);
-  void reportInvalidReflectedXSS(const String&);
   void reportMissingReportURI(const String&);
   void reportUnsupportedDirective(const String&);
   void reportInvalidInReportOnly(const String&);
   void reportInvalidDirectiveInMeta(const String& directiveName);
   void reportInvalidReferrer(const String&);
   void reportReportOnlyInMeta(const String&);
   void reportMetaOutsideHead(const String&);
   void reportValueForEmptyDirective(const String& directiveName,
                                     const String& value);
 
@@ skipping 100 matching lines @@
   String m_disableEvalErrorMessage;
   WebInsecureRequestPolicy m_insecureRequestPolicy;
 
   Member<CSPSource> m_selfSource;
   String m_selfProtocol;
 };
 
 }  // namespace blink
 
 #endif