CSP3: Implement 'worker-src'.

third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h

 /*
  * Copyright (C) 2011 Google, Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 74 matching lines @@
   static const char ScriptSrc[];
   static const char StyleSrc[];
 
   // CSP Level 2 Directives
   static const char BaseURI[];
   static const char ChildSrc[];
   static const char FormAction[];
   static const char FrameAncestors[];
   static const char PluginTypes[];
 
-  // Manifest Directives (to be merged into CSP Level 2)
-  // https://w3c.github.io/manifest/#content-security-policy
+  // CSP Level 3 Directives
   static const char ManifestSrc[];
+  static const char WorkerSrc[];
 
   // Mixed Content Directive
   // https://w3c.github.io/webappsec/specs/mixedcontent/#strict-mode
   static const char BlockAllMixedContent[];
 
   // https://w3c.github.io/webappsec/specs/upgrade/
   static const char UpgradeInsecureRequests[];
 
   // https://mikewest.github.io/cors-rfc1918/#csp
   static const char TreatAsPublicAddress[];
@@ skipping 67 matching lines @@
   // plugin-types directives from the parent document.
   bool allowPluginTypeForDocument(const Document&,
                                   const String& type,
                                   const String& typeAttribute,
                                   const KURL&,
                                   ReportingStatus = SendReport) const;
 
   bool allowObjectFromSource(const KURL&,
                              RedirectStatus = RedirectStatus::NoRedirect,
                              ReportingStatus = SendReport) const;
-  bool allowChildFrameFromSource(const KURL&,
-                                 RedirectStatus = RedirectStatus::NoRedirect,
-                                 ReportingStatus = SendReport) const;
+  bool allowFrameFromSource(const KURL&,
+                            RedirectStatus = RedirectStatus::NoRedirect,
+                            ReportingStatus = SendReport) const;
   bool allowImageFromSource(const KURL&,
                             RedirectStatus = RedirectStatus::NoRedirect,
                             ReportingStatus = SendReport) const;
   bool allowFontFromSource(const KURL&,
                            RedirectStatus = RedirectStatus::NoRedirect,
                            ReportingStatus = SendReport) const;
   bool allowMediaFromSource(const KURL&,
                             RedirectStatus = RedirectStatus::NoRedirect,
                             ReportingStatus = SendReport) const;
   bool allowConnectToSource(const KURL&,
@@ skipping 210 matching lines @@
   String m_disableEvalErrorMessage;
   WebInsecureRequestPolicy m_insecureRequestPolicy;
 
   Member<CSPSource> m_selfSource;
   String m_selfProtocol;
 };
 
 }  // namespace blink
 
 #endif