Upgrade-Insecure-Requests: Split CSP checks into pre-upgrade and post-upgrade.

third_party/WebKit/Source/core/loader/FrameFetchContext.h

Index: third_party/WebKit/Source/core/loader/FrameFetchContext.h
diff --git a/third_party/WebKit/Source/core/loader/FrameFetchContext.h b/third_party/WebKit/Source/core/loader/FrameFetchContext.h
index e65e70280feecf1d6a049a6f5b2c667753149d23..b6352169509361f1a76d1df5004c79cb32a463e0 100644
--- a/third_party/WebKit/Source/core/loader/FrameFetchContext.h
+++ b/third_party/WebKit/Source/core/loader/FrameFetchContext.h
@@ -37,6 +37,7 @@
 #include "core/frame/csp/ContentSecurityPolicy.h"
 #include "core/loader/LinkLoader.h"
 #include "platform/heap/Handle.h"
+#include "platform/network/ContentSecurityPolicyParsers.h"
 #include "platform/network/ResourceRequest.h"
 
 namespace blink {
@@ -119,6 +120,13 @@ class CORE_EXPORT FrameFetchContext final : public FetchContext {
                   const ResourceLoaderOptions&,
                   bool forPreload,
                   FetchRequest::OriginRestriction) const override;
+  ResourceRequestBlockedReason checkCSPForRequest(
+      const ResourceRequest&,
+      const KURL&,
+      const ResourceLoaderOptions&,
+      bool forPreload,
+      ResourceRequest::RedirectStatus,
+      ContentSecurityPolicyHeaderType) const override;
   bool allowResponse(Resource::Type,
                      const ResourceRequest&,
                      const KURL&,