CSP: 'self' should work inside sandboxes.

third_party/WebKit/Source/core/frame/csp/SourceListDirectiveTest.cpp

Index: third_party/WebKit/Source/core/frame/csp/SourceListDirectiveTest.cpp
diff --git a/third_party/WebKit/Source/core/frame/csp/SourceListDirectiveTest.cpp b/third_party/WebKit/Source/core/frame/csp/SourceListDirectiveTest.cpp
index 643f57dd3fbf61a9f398ecd2aa1ea709691d3d65..0a596c56c3c689dbd71b096007802c8f43342b76 100644
--- a/third_party/WebKit/Source/core/frame/csp/SourceListDirectiveTest.cpp
+++ b/third_party/WebKit/Source/core/frame/csp/SourceListDirectiveTest.cpp
@@ -33,6 +33,7 @@ class SourceListDirectiveTest : public ::testing::Test {
     KURL secureURL(ParsedURLString, "https://example.test/image.png");
     RefPtr<SecurityOrigin> secureOrigin(SecurityOrigin::create(secureURL));
     document = Document::create();
+    document->setURL(secureURL);
     document->setSecurityOrigin(secureOrigin);
     csp->bindToExecutionContext(document.get());
   }
@@ -41,6 +42,7 @@ class SourceListDirectiveTest : public ::testing::Test {
     KURL secureURL(ParsedURLString, origin);
     RefPtr<SecurityOrigin> secureOrigin(SecurityOrigin::create(secureURL));
     Document* document = Document::create();
+    document->setURL(secureURL);
     document->setSecurityOrigin(secureOrigin);
     ContentSecurityPolicy* csp = ContentSecurityPolicy::create();
     csp->bindToExecutionContext(document);