Experiment with hiding <script>'s 'nonce' content attribute.

third_party/WebKit/Source/core/svg/SVGScriptElement.cpp

 /*
  * Copyright (C) 2004, 2005, 2008 Nikolas Zimmermann <zimmermann@kde.org>
  * Copyright (C) 2004, 2005, 2007 Rob Buis <buis@kde.org>
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
@@ skipping 18 matching lines @@
 #include "core/events/Event.h"
 
 namespace blink {
 
 inline SVGScriptElement::SVGScriptElement(Document& document,
                                           bool wasInsertedByParser,
                                           bool alreadyStarted)
     : SVGElement(SVGNames::scriptTag, document),
       SVGURIReference(this),
       m_loader(
-          ScriptLoader::create(this, wasInsertedByParser, alreadyStarted)) {}
+          ScriptLoader::create(this, wasInsertedByParser, alreadyStarted)) {
+  if (fastHasAttribute(HTMLNames::nonceAttr)) {
+    m_nonce = fastGetAttribute(HTMLNames::nonceAttr);
+    if (RuntimeEnabledFeatures::hideNonceContentAttributeEnabled())
+      removeAttribute(HTMLNames::nonceAttr);
+  }
+}
 
 SVGScriptElement* SVGScriptElement::create(Document& document,
                                            bool insertedByParser) {
   return new SVGScriptElement(document, insertedByParser, false);
 }
 
 void SVGScriptElement::parseAttribute(
     const AttributeModificationParams& params) {
   if (params.name == HTMLNames::onerrorAttr) {
     setAttributeEventListener(
@@ skipping 104 matching lines @@
 }
 #endif
 
 DEFINE_TRACE(SVGScriptElement) {
   visitor->trace(m_loader);
   SVGElement::trace(visitor);
   SVGURIReference::trace(visitor);
 }
 
 }  // namespace blink