CSP: Add 'script-sample' to violation reports.

third_party/WebKit/Source/core/html/HTMLFrameElementBase.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2000 Simon Hausmann (hausmann@kde.org)
  *           (C) 2001 Dirk Mueller (mueller@kde.org)
  * Copyright (C) 2004, 2006, 2008, 2009 Apple Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
@@ skipping 79 matching lines @@
   KURL url = document().completeURL(m_URL);
   if (url.protocolIsJavaScript()) {
     // We'll set/execute |scriptURL| iff CSP allows us to execute inline
     // JavaScript. If CSP blocks inline JavaScript, then exit early if
     // we're trying to execute script in an existing document. If we're
     // executing JavaScript to create a new document (e.g.
     // '<iframe src="javascript:...">' then continue loading 'about:blank'
     // so that the frame is populated with something reasonable.
     if (ContentSecurityPolicy::shouldBypassMainWorld(&document()) ||
         document().contentSecurityPolicy()->allowJavaScriptURLs(
-            this, document().url(), OrdinalNumber::first())) {
+            this, url.getString(), document().url(), OrdinalNumber::first())) {
       scriptURL = url;
     } else {
       if (contentFrame())
         return;
     }
 
     url = blankURL();
   }
 
   if (!loadOrRedirectSubframe(url, m_frameName, replaceCurrentItem))
@@ skipping 173 matching lines @@
 
   if (contentDocument()) {
     contentDocument()->willChangeFrameOwnerProperties(
         m_marginWidth, marginHeight, m_scrollingMode);
   }
   m_marginHeight = marginHeight;
   frameOwnerPropertiesChanged();
 }
 
 }  // namespace blink