When FrameLoaderClient::allowScriptFromSource() returns false, we signify this with ResourceRequestBlockedReasonCSP. I don't know if this ends up actually mattering in UI or anything, but FrameLoaderClient::allowScriptFromSource() doesn't have anything to do with CSP and we should use a separate ResourceRequestBlockedReason for it.

(https://code.google.com/p/chromium/codesearch#chromium/src/third_party/WebKit/Source/core/loader/FrameFetchContext.cpp&sq=package:chromium&l=507&rcl=1459869658)