WIP: Give developers an opt-in mechanism to block some parser-inserted scripts.

third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.h

Index: third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.h
diff --git a/third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.h b/third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.h
index 7dba69f3398462354117a0d391c704f04d508ad2..4bb7982698fa117dfb4491a02c84dae66e255d46 100644
--- a/third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.h
+++ b/third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.h
@@ -126,6 +126,7 @@ class CORE_EXPORT CSPDirectiveList
   bool allowStyleHash(const CSPHashValue&,
                       ContentSecurityPolicy::InlineType) const;
   bool allowDynamic() const;
+  bool allowParserInsertedFromScript() const;
 
   bool allowRequestWithoutIntegrity(
       WebURLRequest::RequestContext,
@@ -224,6 +225,7 @@ class CORE_EXPORT CSPDirectiveList
 
   bool checkEval(SourceListDirective*) const;
   bool checkDynamic(SourceListDirective*) const;
+  bool checkParserInsertedFromScript(SourceListDirective*) const;
   bool isMatchingNoncePresent(SourceListDirective*, const String&) const;
   bool checkHash(SourceListDirective*, const CSPHashValue&) const;
   bool checkHashedAttributes(SourceListDirective*) const;