Enable SRI only for same origin and CORS content.

LayoutTests/http/tests/security/resources/cors-script.php

Index: LayoutTests/http/tests/security/resources/cors-script.php
diff --git a/LayoutTests/http/tests/security/resources/cors-script.php b/LayoutTests/http/tests/security/resources/cors-script.php
index b99cf5d3a8eb01d8557924d6485b3269bce72a03..9f829dac66ee224dbcd0d7a3f2dd98aff58189c3 100644
--- a/LayoutTests/http/tests/security/resources/cors-script.php
+++ b/LayoutTests/http/tests/security/resources/cors-script.php
@@ -3,7 +3,7 @@ if (strtolower($_GET["cors"]) != "false") {
     header("Access-Control-Allow-Origin: http://127.0.0.1:8000");
 }
 if (strtolower($_GET["credentials"]) == "true") {
-    header("Access-Control-ALlow-Credentials: true");
+    header("Access-Control-Allow-Credentials: true");
 }
 header("Content-Type: application/javascript");
 $delay = $_GET['delay'];