CSP: 'connect-src' should not cause exceptions.

third_party/WebKit/Source/core/loader/PingLoader.cpp

 /*
  * Copyright (C) 2010 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 407 matching lines @@
 }
 
 bool sendBeaconCommon(LocalFrame* frame,
                       int allowance,
                       const KURL& url,
                       const Beacon& beacon,
                       int& payloadLength) {
   if (!frame->document())
     return false;
 
+  // TODO(mkwst): CSP is not enforced on redirects, crbug.com/372197
+  if (!ContentSecurityPolicy::shouldBypassMainWorld(frame->document()) &&
+      !frame->document()->contentSecurityPolicy()->allowConnectToSource(url)) {
+    // We're simulating a network failure here, so we return 'true'.
+    return true;
+  }
+
   unsigned long long entitySize = beacon.size();
   if (allowance < 0 || static_cast<unsigned long long>(allowance) < entitySize)
     return false;
 
   payloadLength = entitySize;
 
   ResourceRequest request(url);
   request.setHTTPMethod(HTTPNames::POST);
   request.setHTTPHeaderField(HTTPNames::Cache_Control, "max-age=0");
   finishPingRequestInitialization(request, frame,
@@ skipping 119 matching lines @@
 bool PingLoader::sendBeacon(LocalFrame* frame,
                             int allowance,
                             const KURL& beaconURL,
                             Blob* data,
                             int& payloadLength) {
   BeaconBlob beacon(data);
   return sendBeaconCommon(frame, allowance, beaconURL, beacon, payloadLength);
 }
 
 }  // namespace blink