CSP: 'eval()' is blocked in report-only mode.
https://bugs.webkit.org/show_bug.cgi?id=111867

Reviewed by Adam Barth.

Source/WebCore:

Setting a 'Content-Security-Policy-Report-Only' header should not have
any effect on what a page actually executes. Currently, however, setting
a 'script-src' directive that doesn't whitelist 'unsafe-eval' actually
blocks 'eval()' on the page. This patch fixes that by checking whether
we're in report-only mode before turning 'eval()' off inside the script
engine.

This leaves us in a weird state, however. We don't currently have any
mechanism of explaining to the VM that we just want to be notified of
'eval()' usage. I've filed http://wkbug.com/111869 to cover this
aspect.

Test: http/tests/security/contentSecurityPolicy/eval-allowed-in-report-only-mode.html

* page/ContentSecurityPolicy.cpp:
(WebCore::ContentSecurityPolicy::didReceiveHeader):
    For each policy we parse, check that we're only turning off eval in
    the VM when we're in enforce mode. If we're in report-only mode,
    skip it.

LayoutTests:

* http/tests/security/contentSecurityPolicy/eval-allowed-in-report-only-mode-expected.txt: Added.
* http/tests/security/contentSecurityPolicy/eval-allowed-in-report-only-mode.html: Added.


git-svn-id: http://svn.webkit.org/repository/webkit/trunk@145268 268f45cc-cd09-0410-ab3c-d52691b4dbfc
Update baselines for a few chromium compositor tests.

* platform/chromium-linux/compositing/checkerboard-expected.png: Removed.
* platform/chromium-linux/compositing/geometry/vertical-scroll-composited-expected.png:
* platform/chromium-mac-lion/compositing/checkerboard-expected.png: Removed.
* platform/chromium-mac/compositing/checkerboard-expected.png:
* platform/chromium-mac/compositing/geometry/vertical-scroll-composited-expected.png:
* platform/chromium-win/compositing/checkerboard-expected.png: Removed.
* platform/chromium-win/compositing/geometry/vertical-scroll-composited-expected.png:
* platform/chromium/TestExpectations:

git-svn-id: http://svn.webkit.org/repository/webkit/trunk@145269 268f45cc-cd09-0410-ab3c-d52691b4dbfc