CSP: Dedicated workers always inherit policy.

third_party/WebKit/Source/core/workers/WorkerScriptLoader.h

 /*
  * Copyright (C) 2009 Apple Inc. All Rights Reserved.
  * Copyright (C) 2009, 2011 Google Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
@@ skipping 12 matching lines @@
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  *
  */
 
 #ifndef WorkerScriptLoader_h
 #define WorkerScriptLoader_h
 
 #include <memory>
 #include "core/CoreExport.h"
+#include "core/frame/csp/ContentSecurityPolicy.h"
 #include "core/loader/ThreadableLoader.h"
 #include "core/loader/ThreadableLoaderClient.h"
 #include "platform/loader/fetch/ResourceRequest.h"
 #include "platform/weborigin/KURL.h"
 #include "public/platform/WebAddressSpace.h"
 #include "public/platform/WebURLRequest.h"
 #include "wtf/Allocator.h"
 #include "wtf/Functional.h"
 #include "wtf/PassRefPtr.h"
 #include "wtf/RefCounted.h"
 #include "wtf/text/StringBuilder.h"
 
 namespace blink {
 
-class ContentSecurityPolicy;
 class ResourceRequest;
 class ResourceResponse;
 class ExecutionContext;
 class TextResourceDecoder;
 
 class CORE_EXPORT WorkerScriptLoader final
     : public RefCounted<WorkerScriptLoader>,
       public ThreadableLoaderClient {
   USING_FAST_MALLOC(WorkerScriptLoader);
 
@@ skipping 98 matching lines @@
   Persistent<ContentSecurityPolicy> m_contentSecurityPolicy;
   Persistent<ExecutionContext> m_executionContext;
   WebAddressSpace m_responseAddressSpace;
   std::unique_ptr<Vector<String>> m_originTrialTokens;
   String m_referrerPolicy;
 };
 
 }  // namespace blink
 
 #endif  // WorkerScriptLoader_h