Support Inline module script

third_party/WebKit/Source/core/dom/ModuleScript.cpp

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/dom/ModuleScript.h"
 
 #include "bindings/core/v8/ScriptState.h"
 #include "bindings/core/v8/ScriptValue.h"
 #include "core/dom/ScriptModuleResolver.h"
 #include "v8/include/v8.h"
@@ skipping 15 matching lines @@
   // provided.
   // Note: "script's settings object" will be "modulator".
 
   // Delegate to Modulator::compileModule to process Steps 3-6.
   ScriptModule result = modulator->CompileModule(
       source_text, base_url.GetString(), access_control_status);
   // Step 6: "...return null, and abort these steps."
   if (result.IsNull())
     return nullptr;
 
-  return CreateInternal(modulator, result, base_url, nonce, parser_state,
-                        credentials_mode);
+  return CreateInternal(source_text, modulator, result, base_url, nonce,
+                        parser_state, credentials_mode);
 }
 
 ModuleScript* ModuleScript::CreateInternal(
+    const String& source_text,
     Modulator* modulator,
     ScriptModule result,
     const KURL& base_url,
     const String& nonce,
     ParserDisposition parser_state,
     WebURLRequest::FetchCredentialsMode credentials_mode) {
   // https://html.spec.whatwg.org/#creating-a-module-script
   // Step 7. Set script's module record to result.
   // Step 8. Set script's base URL to the script base URL provided.
   // Step 9. Set script's cryptographic nonce to the cryptographic nonce
   // provided.
   // Step 10. Set script's parser state to the parser state.
   // Step 11. Set script's credentials mode to the credentials mode provided.
   // Step 12. Return script.
-  ModuleScript* module_script = new ModuleScript(
-      modulator, result, base_url, nonce, parser_state, credentials_mode);
+  // [not specced] |source_text| is saved for CSP checks.
+  ModuleScript* module_script =
+      new ModuleScript(modulator, result, base_url, nonce, parser_state,
+                       credentials_mode, source_text);
 
   // Step 5, a part of ParseModule(): Passing script as the last parameter
   // here ensures result.[[HostDefined]] will be script.
   modulator->GetScriptModuleResolver()->RegisterModuleScript(module_script);
 
   return module_script;
 }
 
 ModuleScript* ModuleScript::CreateForTest(
     Modulator* modulator,
     ScriptModule record,
     const KURL& base_url,
     const String& nonce,
     ParserDisposition parser_state,
     WebURLRequest::FetchCredentialsMode credentials_mode) {
-  return CreateInternal(modulator, record, base_url, nonce, parser_state,
-                        credentials_mode);
+  String dummy_source_text = "";
+  return CreateInternal(dummy_source_text, modulator, record, base_url, nonce,
+                        parser_state, credentials_mode);
 }
 
 void ModuleScript::SetInstantiationErrorAndClearRecord(ScriptValue error) {
   // Implements Step 7.1 of:
   // https://html.spec.whatwg.org/multipage/webappapis.html#internal-module-script-graph-fetching-procedure
 
   // "set script's instantiation state to "errored", ..."
   DCHECK_EQ(instantiation_state_, ModuleInstantiationState::kUninstantiated);
   instantiation_state_ = ModuleInstantiationState::kErrored;
 
@@ skipping 34 matching lines @@
   // We don't check MIME type here because we check the MIME type in
   // ModuleScriptLoader::WasModuleLoadSuccessful().
   return true;
 }
 
 void ModuleScript::RunScript(LocalFrame* frame, const SecurityOrigin*) const {
   settings_object_->ExecuteModule(this);
 }
 
 String ModuleScript::InlineSourceTextForCSP() const {
-  // Currently we don't support inline module scripts.
-  // TODO(hiroshige): Implement this.
-  NOTREACHED();
-  return String();
+  return source_text_;
 }
 
 }  // namespace blink