| Index: public/web/WebSecurityPolicy.h
|
| diff --git a/public/web/WebSecurityPolicy.h b/public/web/WebSecurityPolicy.h
|
| index a21f36c23a209083c7adcf24a56a9a35e14d52d4..f22998cce4e9a0300d8c1d03a7c723c2f7366c23 100644
|
| --- a/public/web/WebSecurityPolicy.h
|
| +++ b/public/web/WebSecurityPolicy.h
|
| @@ -61,10 +61,14 @@ public:
|
| // schemes are not registered as "secure" are embedded.
|
| BLINK_EXPORT static void registerURLSchemeAsRestrictingMixedContent(const WebString&);
|
|
|
| - // Registers a URL scheme to not generate mixed content warnings when
|
| - // included by page whose scheme is registed as restricting mixed content.
|
| + // Subresources transported by secure schemes do not trigger mixed content
|
| + // warnings. For example, https and data are secure schemes because they
|
| + // cannot be corrupted by active network attackers.
|
| BLINK_EXPORT static void registerURLSchemeAsSecure(const WebString&);
|
|
|
| + // Returns true if the scheme has been registered as a secure scheme.
|
| + BLINK_EXPORT static bool shouldTreatURLSchemeAsSecure(const WebString&);
|
| +
|
| // Registers a non-HTTP URL scheme which can be sent CORS requests.
|
| BLINK_EXPORT static void registerURLSchemeAsCORSEnabled(const WebString&);
|
|
|
|
|