Make most of CSP code work with non-Document ExecutionContext

third_party/WebKit/Source/core/dom/SecurityContext.h

Index: third_party/WebKit/Source/core/dom/SecurityContext.h
diff --git a/third_party/WebKit/Source/core/dom/SecurityContext.h b/third_party/WebKit/Source/core/dom/SecurityContext.h
index 30d944666f30bf2bf53b4e805a99445491d63c24..00c5513a0290661b0cd2edc148d9dfad159442f2 100644
--- a/third_party/WebKit/Source/core/dom/SecurityContext.h
+++ b/third_party/WebKit/Source/core/dom/SecurityContext.h
@@ -98,14 +98,14 @@ class CORE_EXPORT SecurityContext : public GarbageCollectedMixin {
                                const WebFeaturePolicy* parent_feature_policy);
   void UpdateFeaturePolicyOrigin();
 
+  void ApplySandboxFlags(SandboxFlags mask);
+
  protected:
   SecurityContext();
   virtual ~SecurityContext();
 
   void SetContentSecurityPolicy(ContentSecurityPolicy*);
 
-  void ApplySandboxFlags(SandboxFlags mask);
-
  private:
   RefPtr<SecurityOrigin> security_origin_;
   Member<ContentSecurityPolicy> content_security_policy_;