Block execution of failed 'crossorigin' <script>s.

Source/core/html/HTMLImportLoader.cpp

Index: Source/core/html/HTMLImportLoader.cpp
diff --git a/Source/core/html/HTMLImportLoader.cpp b/Source/core/html/HTMLImportLoader.cpp
index 3f8ca2f319328300201db22fb28a9fca9d5d3a35..f6c7fbbdd60de8cb649ee97f8f0528cf468b46c9 100644
--- a/Source/core/html/HTMLImportLoader.cpp
+++ b/Source/core/html/HTMLImportLoader.cpp
@@ -113,7 +113,7 @@ void HTMLImportLoader::didFinish()
 HTMLImportLoader::State HTMLImportLoader::startWritingAndParsing(const ResourceResponse& response)
 {
     // Current canAccess() implementation isn't sufficient for catching cross-domain redirects: http://crbug.com/256976
-    if (!m_parent->document()->fetcher()->canAccess(m_resource.get()))
+    if (!m_parent->document()->fetcher()->canAccess(m_resource.get(), true))

[abarth-chromium, 2013/11/14 16:34:48]

If we keep this design, we should use an enum rather than a bare bool.  From
just reading this line, it's very unclear what |true| means in this context.

[sof, 2013/11/15 08:05:23]

Definitely agree. Now done, with hopefully comprehensible type and enum tag
names.

         return StateError;
 
     DocumentInit init = DocumentInit(response.url(), 0, root()->document()->contextDocument(), this)