In the spec, the fetch-related parts of CSP is associated with request's client's global object.
Therefore, blink::ContentSecurityPolicy should be associated with FetchClientSettingsObject, instead of ExecutionContext.
This issue tracks efforts to reduce dependency from CSP to ExecutionContext and switch to FetchClientSettingsObject.
Comment 1 by hirosh...@chromium.org
, Aug 28