CSP: Fix protocolless 'frame-ancestor' source expressions.

CSP: Fix protocolless 'frame-ancestor' source expressions.

When checking 'frame-ancestor', we end up asking for the SecurityOrigin
of the protected resource before we actually have a protected resource
whose origin we could ask for. This, unsurprisingly, crashes.

This patch adds a protocol property to the ContentSecurityPolicy object
so that we can perform all the checks for source expressions that don't
specify protocols without crashing the renderer.

BUG=424074
R=jochen@chromium.org

Committed: https://src.chromium.org/viewvc/blink?view=rev&revision=183801

[Mike West, 2014-10-16 09:06:51]

Mind taking a look at this Jochen? I'll CC you on the crash bug for context.

-mike

[Mike West, 2014-10-16 09:44:28]

mkwst@chromium.org changed reviewers:
+ sigbjornf@opera.com
- jochen@chromium.org

[Mike West, 2014-10-16 09:44:28]

Er. I forgot that Jochen's out today. Sigbjorn, mind taking a look?

-mike

[sof, 2014-10-16 10:01:48]

lgtm.

A bit unfortunate to have to duplicate parts of the origin here, but I have no
alternative to offer either.

[Mike West, 2014-10-16 10:32:13]

The CQ bit was checked by mkwst@chromium.org

[commit-bot: I haz the power, 2014-10-16 10:33:20]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/658073002/1

[commit-bot: I haz the power, 2014-10-16 10:37:03]

Committed patchset #1 (id:1) as 183801