CSP: Move parsing a document's CSP to DocumentLoader::responseReceived.

CSP: Move parsing a document's CSP to DocumentLoader::responseReceived.

This patch moves CSP generation out of FrameLoader and into
DocumentLoader in order to ensure that the 'frame-ancestors' directive
can properly block loading a document. The current implementation checks
too late in the loading process.

The new implementation works, with the caveat that it breaks both
console messages and violation reports. Since we have no
ExecutionContext, we have nothing to dump console messages into. This
work will be covered in https://crbug.com/412725

BUG=411889, 411600, 357462
Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=181814

[Mike West, 2014-09-10 11:03:07]

mkwst@chromium.org changed reviewers:
+ jochen@chromium.org, sigbjornf@opera.com

[Mike West, 2014-09-10 11:04:02]

mkwst@chromium.org changed reviewers:
+ philipj@opera.com

[Mike West, 2014-09-10 11:04:02]

Would one of you fine folks mind taking a look?

This patch depends on https://codereview.chromium.org/561693002/ and
https://codereview.chromium.org/559503002/. I'll throw it to the bots once those
land.

[Mike West, 2014-09-11 12:21:59]

Required patches landed, bots are mostly happy. Would one of you mind taking a
look?

-mike

[jochen (gone - plz use gerrit), 2014-09-11 12:49:44]

lgtm, but please consider updating the CSPSource ctor :)

https://codereview.chromium.org/563473002/diff/20001/Source/core/frame/csp/Co...
File Source/core/frame/csp/ContentSecurityPolicy.cpp (right):

https://codereview.chromium.org/563473002/diff/20001/Source/core/frame/csp/Co...
Source/core/frame/csp/ContentSecurityPolicy.cpp:265: m_selfSource = adoptPtr(new
CSPSource(this, origin->protocol(), origin->host(), origin->port(), String(),
false, false));
bool parameters? sadness...

[Mike West, 2014-09-11 12:51:17]

On 2014/09/11 12:49:44, jochen wrote:
> lgtm, but please consider updating the CSPSource ctor :)

Sure. I'll send you a patch shortly.

[Mike West, 2014-09-11 12:51:22]

The CQ bit was checked by mkwst@chromium.org

[commit-bot: I haz the power, 2014-09-11 12:52:35]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patchset/563473002/20001

[commit-bot: I haz the power, 2014-09-11 12:57:32]

Committed patchset #2 (id:20001) as 181814