Transfer SecurityOrigin overrides to Workers.

Source/web/WebEmbeddedWorkerImpl.cpp

Index: Source/web/WebEmbeddedWorkerImpl.cpp
diff --git a/Source/web/WebEmbeddedWorkerImpl.cpp b/Source/web/WebEmbeddedWorkerImpl.cpp
index a9b82e734e3fb8a5a0780503e83aa88f07a42d4e..8be891d7268e71b19bc08a34f34e89b3f3c3089f 100644
--- a/Source/web/WebEmbeddedWorkerImpl.cpp
+++ b/Source/web/WebEmbeddedWorkerImpl.cpp
@@ -402,6 +402,10 @@ void WebEmbeddedWorkerImpl::startWorkerThread()
     if (InspectorInstrumentation::shouldPauseDedicatedWorkerOnStart(document))
         startMode = PauseWorkerGlobalScopeOnStart;
 
+    SecurityOrigin::PolicyOverrides originPolicyOverrides;
+    if (document->securityOrigin())

[horo, 2014/09/24 05:42:27]

I think WebEmbeddedWorkerImpl's m_mainFrame is not affected by the settings.
So m_grantUniversalAccess and m_enforceFilePathSeparation are always false.

[sof, 2014/09/28 17:10:22]

Thanks, I missed that -- the document for the shadow page being without it.

For now, I've added a FIXME to try to make it clear what to (not) expect;
acceptable?

+        originPolicyOverrides = document->securityOrigin()->policyOverrides();
+
     OwnPtrWillBeRawPtr<WorkerClients> workerClients = WorkerClients::create();
     providePermissionClientToWorker(workerClients.get(), m_permissionClient.release());
     provideServiceWorkerGlobalScopeClientToWorker(workerClients.get(), ServiceWorkerGlobalScopeClientImpl::create(*m_workerContextClient));
@@ -416,6 +420,7 @@ void WebEmbeddedWorkerImpl::startWorkerThread()
             // FIXME: fill appropriate CSP info and policy type.
             String(),
             ContentSecurityPolicyHeaderTypeEnforce,
+            originPolicyOverrides,
             workerClients.release());
 
     m_mainScriptLoader.clear();