Implement ContentSecurityPolicy on the browser-side.

third_party/WebKit/Source/core/frame/csp/CSPSource.h

Index: third_party/WebKit/Source/core/frame/csp/CSPSource.h
diff --git a/third_party/WebKit/Source/core/frame/csp/CSPSource.h b/third_party/WebKit/Source/core/frame/csp/CSPSource.h
index bcf85da701a255492a04d0e1528801136c5449f2..a01b57157a0a6a12722fa0b80a03a780125317b9 100644
--- a/third_party/WebKit/Source/core/frame/csp/CSPSource.h
+++ b/third_party/WebKit/Source/core/frame/csp/CSPSource.h
@@ -9,6 +9,7 @@
 #include "core/frame/csp/ContentSecurityPolicy.h"
 #include "platform/heap/Handle.h"
 #include "platform/network/ResourceRequest.h"
+#include "public/platform/WebContentSecurityPolicyStruct.h"
 #include "wtf/Allocator.h"
 #include "wtf/text/WTFString.h"
 
@@ -19,7 +20,7 @@ class KURL;
 
 class CORE_EXPORT CSPSource : public GarbageCollectedFinalized<CSPSource> {
  public:
-  enum WildcardDisposition { HasWildcard, NoWildcard };
+  enum WildcardDisposition { NoWildcard, HasWildcard };
 
   CSPSource(ContentSecurityPolicy*,
             const String& scheme,
@@ -46,6 +47,8 @@ class CORE_EXPORT CSPSource : public GarbageCollectedFinalized<CSPSource> {
   static bool firstSubsumesSecond(const HeapVector<Member<CSPSource>>&,
                                   const HeapVector<Member<CSPSource>>&);
 
+  WebContentSecurityPolicySourceExpression exposeForNavigationalChecks() const;
+
   DECLARE_TRACE();
 
  private: