CSP: Enable whitelisting of external JavaScript via hashes

third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h

 /*
  * Copyright (C) 2011 Google, Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 210 matching lines @@
       const KURL&,
       RedirectStatus = RedirectStatus::NoRedirect,
       SecurityViolationReportingPolicy =
           SecurityViolationReportingPolicy::Report) const;
 
   // Passing 'String()' into the |nonce| arguments in the following methods
   // represents an unnonced resource load.
   bool allowScriptFromSource(
       const KURL&,
       const String& nonce,
+      const IntegrityMetadataSet& hashes,
       ParserDisposition,
       RedirectStatus = RedirectStatus::NoRedirect,
       SecurityViolationReportingPolicy =
           SecurityViolationReportingPolicy::Report) const;
   bool allowStyleFromSource(const KURL&,
                             const String& nonce,
                             RedirectStatus = RedirectStatus::NoRedirect,
                             SecurityViolationReportingPolicy =
                                 SecurityViolationReportingPolicy::Report) const;
   bool allowInlineScript(Element*,
@@ skipping 206 matching lines @@
   String m_disableEvalErrorMessage;
   WebInsecureRequestPolicy m_insecureRequestPolicy;
 
   Member<CSPSource> m_selfSource;
   String m_selfProtocol;
 };
 
 }  // namespace blink
 
 #endif