CSP: 'connect-src' should not cause exceptions.

third_party/WebKit/Source/modules/beacon/NavigatorBeacon.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/beacon/NavigatorBeacon.h"
 
 #include "bindings/core/v8/ExceptionState.h"
 #include "bindings/core/v8/ScriptState.h"
 #include "bindings/modules/v8/ArrayBufferViewOrBlobOrStringOrFormData.h"
 #include "core/dom/DOMArrayBufferView.h"
 #include "core/dom/ExceptionCode.h"
 #include "core/dom/ExecutionContext.h"
 #include "core/fileapi/Blob.h"
 #include "core/frame/LocalFrame.h"
 #include "core/frame/Settings.h"
 #include "core/frame/UseCounter.h"
-#include "core/frame/csp/ContentSecurityPolicy.h"
 #include "core/html/FormData.h"
 #include "core/loader/PingLoader.h"
 #include "platform/loader/fetch/FetchUtils.h"
 
 namespace blink {
 
 NavigatorBeacon::NavigatorBeacon(Navigator& navigator)
     : Supplement<Navigator>(navigator), m_transmittedBytes(0) {}
 
 NavigatorBeacon::~NavigatorBeacon() {}
@@ skipping 23 matching lines @@
     exceptionState.throwDOMException(
         SyntaxError, "The URL argument is ill-formed or unsupported.");
     return false;
   }
   // For now, only support HTTP and related.
   if (!url.protocolIsInHTTPFamily()) {
     exceptionState.throwDOMException(
         SyntaxError, "Beacons are only supported over HTTP(S).");
     return false;
   }
-  // FIXME: CSP is not enforced on redirects, crbug.com/372197
-  if (!ContentSecurityPolicy::shouldBypassMainWorld(context) &&
-      !context->contentSecurityPolicy()->allowConnectToSource(url)) {
-    // We can safely expose the URL to JavaScript, as these checks happen
-    // synchronously before redirection. JavaScript receives no new information.
-    exceptionState.throwSecurityError(
-        "Refused to send beacon to '" + url.elidedString() +
-        "' because it violates the document's Content Security Policy.");
-    return false;
-  }
 
   // If detached from frame, do not allow sending a Beacon.
   if (!supplementable()->frame())
     return false;
 
   return true;
 }
 
 int NavigatorBeacon::maxAllowance() const {
   DCHECK(supplementable()->frame());
@@ skipping 69 matching lines @@
   if (allowed) {
     addTransmittedBytes(bytes);
     return true;
   }
 
   UseCounter::count(context, UseCounter::SendBeaconQuotaExceeded);
   return false;
 }
 
 }  // namespace blink