Remove the 'reflected-xss' directive from CSP.

third_party/WebKit/Source/core/html/parser/XSSAuditor.h

 /*
  * Copyright (C) 2011 Adam Barth. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 110 matching lines @@
                               const HTMLToken::Attribute&);
   String canonicalize(String, TruncationKind);
 
   bool isContainedInRequest(const String&);
   bool isLikelySafeResource(const String& url);
 
   KURL m_documentURL;
   bool m_isEnabled;
 
   ReflectedXSSDisposition m_xssProtection;
-  bool m_didSendValidCSPHeader;
   bool m_didSendValidXSSProtectionHeader;
 
   String m_decodedURL;
   String m_decodedHTTPBody;
   String m_httpBodyAsString;
   std::unique_ptr<SuffixTree<ASCIICodebook>> m_decodedHTTPBodySuffixTree;
 
   State m_state;
   bool m_scriptTagFoundInRequest;
   unsigned m_scriptTagNestingLevel;
   WTF::TextEncoding m_encoding;
 };
 
 }  // namespace blink
 
 #endif