CSP: 'connect-src' should not cause exceptions.

third_party/WebKit/Source/modules/beacon/NavigatorBeacon.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/beacon/NavigatorBeacon.h"
 
 #include "bindings/core/v8/ExceptionState.h"
 #include "bindings/modules/v8/ArrayBufferViewOrBlobOrStringOrFormData.h"
 #include "core/dom/DOMArrayBufferView.h"
 #include "core/dom/ExceptionCode.h"
@@ skipping 40 matching lines @@
     exceptionState.throwDOMException(
         SyntaxError, "The URL argument is ill-formed or unsupported.");
     return false;
   }
   // For now, only support HTTP and related.
   if (!url.protocolIsInHTTPFamily()) {
     exceptionState.throwDOMException(
         SyntaxError, "Beacons are only supported over HTTP(S).");
     return false;
   }
-  // FIXME: CSP is not enforced on redirects, crbug.com/372197
-  if (!ContentSecurityPolicy::shouldBypassMainWorld(context) &&
-      !context->contentSecurityPolicy()->allowConnectToSource(url)) {
-    // We can safely expose the URL to JavaScript, as these checks happen
-    // synchronously before redirection. JavaScript receives no new information.
-    exceptionState.throwSecurityError(
-        "Refused to send beacon to '" + url.elidedString() +
-        "' because it violates the document's Content Security Policy.");
-    return false;
-  }
 
   // If detached from frame, do not allow sending a Beacon.
   if (!frame() || !frame()->client())
     return false;
 
   return true;
 }
 
 int NavigatorBeacon::maxAllowance() const {
   DCHECK(frame());
@@ skipping 60 matching lines @@
   if (allowed) {
     impl.addTransmittedBytes(bytes);
     return true;
   }
 
   UseCounter::count(context, UseCounter::SendBeaconQuotaExceeded);
   return false;
 }
 
 }  // namespace blink