Make most of CSP code work with non-Document ExecutionContext

third_party/WebKit/Source/core/dom/SecurityContext.h

 /*
  * Copyright (C) 2011 Google Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 80 matching lines @@
   }
 
   void EnforceSuborigin(const Suborigin&);
 
   WebFeaturePolicy* GetFeaturePolicy() const { return feature_policy_.get(); }
   void InitializeFeaturePolicy(const WebParsedFeaturePolicy& parsed_header,
                                const WebParsedFeaturePolicy& container_policy,
                                const WebFeaturePolicy* parent_feature_policy);
   void UpdateFeaturePolicyOrigin();
 
+  void ApplySandboxFlags(SandboxFlags mask);
+
  protected:
   SecurityContext();
   virtual ~SecurityContext();
 
   void SetContentSecurityPolicy(ContentSecurityPolicy*);
 
-  void ApplySandboxFlags(SandboxFlags mask);
-
  private:
   RefPtr<SecurityOrigin> security_origin_;
   Member<ContentSecurityPolicy> content_security_policy_;
   std::unique_ptr<WebFeaturePolicy> feature_policy_;
 
   SandboxFlags sandbox_flags_;
 
   WebAddressSpace address_space_;
   WebInsecureRequestPolicy insecure_request_policy_;
   InsecureNavigationsSet insecure_navigations_to_upgrade_;
 };
 
 }  // namespace blink
 
 #endif  // SecurityContext_h