Implement script MIME restrictions for X-Content-Type-Options: nosniff for Workers

third_party/WebKit/Source/core/loader/resource/ScriptResource.cpp

 /*
     Copyright (C) 1998 Lars Knoll (knoll@mpi-hd.mpg.de)
     Copyright (C) 2001 Dirk Mueller (mueller@kde.org)
     Copyright (C) 2002 Waldo Bastian (bastian@kde.org)
     Copyright (C) 2006 Samuel Weinig (sam.weinig@gmail.com)
     Copyright (C) 2004, 2005, 2006, 2007, 2008 Apple Inc. All rights reserved.
 
     This library is free software; you can redistribute it and/or
     modify it under the terms of the GNU Library General Public
     License as published by the Free Software Foundation; either
@@ skipping 82 matching lines @@
     m_script = AtomicString(script);
   }
 
   return m_script;
 }
 
 void ScriptResource::destroyDecodedDataForFailedRevalidation() {
   m_script = AtomicString();
 }
 
-bool ScriptResource::mimeTypeAllowedByNosniff() const {
-  return parseContentTypeOptionsHeader(response().httpHeaderField(
+// static
+bool ScriptResource::mimeTypeAllowedByNosniff(
+    const ResourceResponse& response) {
+  return parseContentTypeOptionsHeader(response.httpHeaderField(
              HTTPNames::X_Content_Type_Options)) != ContentTypeOptionsNosniff ||
-         MIMETypeRegistry::isSupportedJavaScriptMIMEType(httpContentType());
+         MIMETypeRegistry::isSupportedJavaScriptMIMEType(
+             response.httpContentType());
 }
 
 }  // namespace blink