Upgrade insecure request: Drop the reporting functionality.

Source/core/frame/csp/CSPDirectiveList.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "config.h"
 #include "core/frame/csp/CSPDirectiveList.h"
 
 #include "core/dom/Document.h"
 #include "core/dom/SecurityContext.h"
 #include "core/frame/LocalFrame.h"
@@ skipping 563 matching lines @@
         return;
     }
     m_strictMixedContentCheckingEnforced = true;
     m_policy->enforceStrictMixedContentChecking();
     if (!value.isEmpty())
         m_policy->reportValueForEmptyDirective(name, value);
 }
 
 void CSPDirectiveList::enableInsecureContentUpgrade(const String& name, const String& value)
 {
+    if (m_reportOnly) {
+        m_policy->reportInvalidInReportOnly(name);
+        return;
+    }

[Yoav Weiss, 2015/03/05 12:06:14]

Why is report-only invalid here? 

     if (m_upgradeInsecureRequests) {
         m_policy->reportDuplicateDirective(name);
         return;
     }
     m_upgradeInsecureRequests = true;
-    // FIXME: Monitoring insecure content currently has no effect. We'll eventually wire it up
-    // to the CSP reporting mechanism if we go this route. https://crbug.com/455674
-    m_policy->setInsecureContentPolicy(m_reportOnly ? SecurityContext::InsecureContentMonitor : SecurityContext::InsecureContentUpgrade);
+
+    m_policy->setInsecureContentPolicy(SecurityContext::InsecureContentUpgrade);
     if (!value.isEmpty())
         m_policy->reportValueForEmptyDirective(name, value);
 }
 
 void CSPDirectiveList::parseReflectedXSS(const String& name, const String& value)
 {
     if (m_reflectedXSSDisposition != ReflectedXSSUnset) {
         m_policy->reportDuplicateDirective(name);
         m_reflectedXSSDisposition = ReflectedXSSInvalid;
         return;
@@ skipping 145 matching lines @@
             enableInsecureContentUpgrade(name, value);
         else
             m_policy->reportUnsupportedDirective(name);
     } else {
         m_policy->reportUnsupportedDirective(name);
     }
 }
 
 
 } // namespace blink