Add CSP header for resources with an active policy

Source/core/frame/csp/CSPDirectiveList.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "config.h"
 #include "core/frame/csp/CSPDirectiveList.h"
 
 #include "core/dom/Document.h"
 #include "core/dom/SecurityContext.h"
 #include "core/frame/LocalFrame.h"
@@ skipping 396 matching lines @@
 {
     return checkHash(operativeDirective(m_styleSrc.get()), hashValue);
 }
 
 const String& CSPDirectiveList::pluginTypesText() const
 {
     ASSERT(hasPluginTypes());
     return m_pluginTypes->text();
 }
 
+bool CSPDirectiveList::shouldSendCSPHeader(Resource::Type type) const
+{
+    switch (type) {
+    case Resource::XSLStyleSheet:
+        ASSERT(RuntimeEnabledFeatures::xsltEnabled());
+        return !!operativeDirective(m_scriptSrc.get());
+    case Resource::Script:
+    case Resource::ImportResource:
+        return !!operativeDirective(m_scriptSrc.get());
+    case Resource::CSSStyleSheet:
+        return !!operativeDirective(m_styleSrc.get());
+    case Resource::SVGDocument:
+    case Resource::Image:
+        return !!operativeDirective(m_imgSrc.get());
+    case Resource::Font:
+        return !!operativeDirective(m_fontSrc.get());
+    case Resource::Media:
+    case Resource::TextTrack:
+        return !!operativeDirective(m_mediaSrc.get());
+    case Resource::Raw:
+        // This request could be for a plugin, a child frame, a worker, or
+        // something else. If there any potentially relevant policies,
+        // send the CSP header; sending it unnecessarily can't hurt.
+        return !!operativeDirective(m_objectSrc.get()) || !!m_pluginTypes.get() || !!operativeDirective(m_childSrc.get()) || !!operativeDirective(m_frameSrc.get()) || !!operativeDirective(m_connectSrc.get()) || !!operativeDirective(m_manifestSrc.get()) || !!m_formAction.get();
+    case Resource::MainResource:
+    case Resource::LinkPrefetch:
+    case Resource::LinkSubresource:
+        return false;
+    }
+    ASSERT_NOT_REACHED();
+    return false;
+}
+
 // policy            = directive-list
 // directive-list    = [ directive *( ";" [ directive ] ) ]
 //
 void CSPDirectiveList::parse(const UChar* begin, const UChar* end)
 {
     m_header = String(begin, end - begin);
 
     if (begin == end)
         return;
 
@@ skipping 309 matching lines @@
             enableInsecureRequestsUpgrade(name, value);
         else
             m_policy->reportUnsupportedDirective(name);
     } else {
         m_policy->reportUnsupportedDirective(name);
     }
 }
 
 
 } // namespace blink