GitLab

This patch factors out allow/block list calculation logic into
cors_util so that browser side list management code can reuse
the same logic.

Also this patch fixes some wrong tests, and refines access list
management APIs among network::OriginAccessList, and
blink::(Web)SecurityPolicy so that developers are not confused.

Bug: 870172
Change-Id: I781b258e2f0ec7ad70065beda0f6eb96923cc690
Reviewed-on: https://chromium-review.googlesource.com/c/1309389Reviewed-by: Devlin <rdevlin.cronin@chromium.org>
Reviewed-by: Yutaka Hirano <yhirano@chromium.org>
Reviewed-by: Kinuko Yasuda <kinuko@chromium.org>
Commit-Queue: Takashi Toyoshima <toyoshim@chromium.org>
Cr-Commit-Position: refs/heads/master@{#605259}