Add a configurable parse-depth limit when parsing JFV headers, and use it for Feature-Policy Header

third_party/WebKit/Source/platform/network/HTTPParsers.cpp

 /*
  * Copyright (C) 2006 Alexey Proskuryakov (ap@webkit.org)
  * Copyright (C) 2006, 2007, 2008, 2009 Apple Inc. All rights reserved.
  * Copyright (C) 2009 Torch Mobile Inc. http://www.torchmobile.com/
  * Copyright (C) 2009 Google Inc. All rights reserved.
  * Copyright (C) 2011 Apple Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
@@ skipping 881 matching lines @@
     response->clearHTTPHeaderField(header);
     while (responseHeaders->EnumerateHeader(&iterator, headerStringPiece,
                                             &value)) {
       response->addHTTPHeaderField(header, WebString::fromLatin1(value));
     }
   }
   return true;
 }
 
 // See https://tools.ietf.org/html/draft-ietf-httpbis-jfv-01, Section 4.
-std::unique_ptr<JSONArray> parseJSONHeader(const String& header) {
+std::unique_ptr<JSONArray> parseJSONHeader(const String& header,
+                                           int maxParseDepth) {
   StringBuilder sb;
   sb.append("[");
   sb.append(header);
   sb.append("]");
-  std::unique_ptr<JSONValue> headerValue = parseJSON(sb.toString());
+  std::unique_ptr<JSONValue> headerValue =
+      parseJSON(sb.toString(), maxParseDepth);
   return JSONArray::from(std::move(headerValue));
 }
 
 }  // namespace blink