CSP: Remove wrong DCHECK in CSPSourceList

content/common/content_security_policy/csp_source_list_unittest.cc

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/content_security_policy/csp_source_list.h"
 #include "content/common/content_security_policy/csp_context.h"
 #include "testing/gtest/include/gtest/gtest.h"
 
 namespace content {
 
@@ skipping 51 matching lines @@
   context.SetSelf(url::Origin(GURL("http://example.com")));
   CSPSourceList source_list(true,                       // allow_self
                             false,                      // allow_star:
                             std::vector<CSPSource>());  // source_list
   EXPECT_TRUE(Allow(source_list, GURL("http://example.com"), &context));
   EXPECT_FALSE(Allow(source_list, GURL("http://not-example.com"), &context));
   EXPECT_TRUE(Allow(source_list, GURL("https://example.com"), &context));
   EXPECT_FALSE(Allow(source_list, GURL("ws://example.com"), &context));
 }
 
+TEST(CSPSourceList, AllowStarAndSelf) {
+  CSPContext context;
+  context.SetSelf(url::Origin(GURL("https://a.com")));
+  CSPSourceList source_list(false,  // allow_self
+                            false,  // allow_star
+                            std::vector<CSPSource>());
+
+  // If the request is allowed by {*} and not by {'self'} then it should be
+  // allowed by the union {*,'self'}.
+  source_list.allow_self = true;
+  source_list.allow_star = false;
+  EXPECT_FALSE(Allow(source_list, GURL("http://b.com"), &context));
+  source_list.allow_self = false;
+  source_list.allow_star = true;
+  EXPECT_TRUE(Allow(source_list, GURL("http://b.com"), &context));
+  source_list.allow_self = true;
+  source_list.allow_star = true;
+  EXPECT_TRUE(Allow(source_list, GURL("http://b.com"), &context));
+}
+
 TEST(CSPSourceList, AllowSelfWithUnspecifiedPort) {
   CSPContext context;
   context.SetSelf(url::Origin(GURL("chrome://print")));
   CSPSourceList source_list(true,                       // allow_self
                             false,                      // allow_star:
                             std::vector<CSPSource>());  // source_list
 
   EXPECT_TRUE(Allow(
       source_list,
       GURL("chrome://print/pdf_preview.html?chrome://print/1/0/print.pdf"),
@@ skipping 20 matching lines @@
   context.SetSelf(url::Origin(GURL("http://a.com")));
   EXPECT_TRUE(Allow(source_list, GURL("http://a.com"), &context));
   EXPECT_FALSE(Allow(source_list, GURL("data:text/html,hello"), &context));
 
   context.SetSelf(url::Origin(GURL("data:text/html,<iframe src=[...]>")));
   EXPECT_FALSE(Allow(source_list, GURL("http://a.com"), &context));
   EXPECT_FALSE(Allow(source_list, GURL("data:text/html,hello"), &context));
 }
 
 }  // namespace content