Add support and enable out-of-Blink CORS (fixes issue #2716)

It can still be disabled for a short time by passing
`--disable-features=OutOfBlinkCors` on the command-line.

tests/ceftests/test_request.h

@@ -12,6 +12,7 @@
 #include "include/cef_frame.h"
 #include "include/cef_request.h"
 #include "include/cef_request_context.h"
+#include "include/cef_resource_handler.h"
 #include "include/cef_response.h"
 
 namespace test_request {
@@ -64,6 +65,14 @@ struct SendConfig {
 // request completes.
 void Send(const SendConfig& config, const RequestDoneCallback& callback);
 
+// Removes query and/or fragment components from |url|.
+std::string GetPathURL(const std::string& url);
+
+// Creates a new resource handler that returns the specified response.
+CefRefPtr<CefResourceHandler> CreateResourceHandler(
+    CefRefPtr<CefResponse> response,
+    const std::string& response_data);
+
 }  // namespace test_request
 
 #endif  // CEF_TESTS_CEFTESTS_TEST_REQUEST_H_