Remove the 'reflected-xss' directive from CSP.

third_party/WebKit/Source/core/html/parser/XSSAuditorDelegate.cpp

 /*
  * Copyright (C) 2013 Google, Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 34 matching lines @@
   message.append("The XSS Auditor ");
   message.append(m_didBlockEntirePage ? "blocked access to"
                                       : "refused to execute a script in");
   message.append(" '");
   message.append(m_originalURL);
   message.append("' because ");
   message.append(m_didBlockEntirePage ? "the source code of a script"
                                       : "its source code");
   message.append(" was found within the request.");
 
-  if (m_didSendCSPHeader)
-    message.append(
-        " The server sent a 'Content-Security-Policy' header requesting this "
-        "behavior.");
-  else if (m_didSendXSSProtectionHeader)
+  if (m_didSendXSSProtectionHeader)
     message.append(
         " The server sent an 'X-XSS-Protection' header requesting this "
         "behavior.");
   else
     message.append(
-        " The auditor was enabled as the server sent neither an "
-        "'X-XSS-Protection' nor 'Content-Security-Policy' header.");
+        " The auditor was enabled as the server did not send an "
+        "'X-XSS-Protection' header.");
 
   return message.toString();
 }
 
 bool XSSInfo::isSafeToSendToAnotherThread() const {
   return m_originalURL.isSafeToSendToAnotherThread();
 }
 
 XSSAuditorDelegate::XSSAuditorDelegate(Document* document)
     : m_document(document), m_didSendNotifications(false) {
@@ skipping 51 matching lines @@
       PingLoader::sendViolationReport(m_document->frame(), m_reportURL,
                                       generateViolationReport(xssInfo),
                                       PingLoader::XSSAuditorViolationReport);
   }
 
   if (xssInfo.m_didBlockEntirePage)
     m_document->frame()->navigationScheduler().schedulePageBlock(m_document);
 }
 
 }  // namespace blink