Index: public/web/WebSecurityPolicy.h |
diff --git a/public/web/WebSecurityPolicy.h b/public/web/WebSecurityPolicy.h |
index a21f36c23a209083c7adcf24a56a9a35e14d52d4..f22998cce4e9a0300d8c1d03a7c723c2f7366c23 100644 |
--- a/public/web/WebSecurityPolicy.h |
+++ b/public/web/WebSecurityPolicy.h |
@@ -61,10 +61,14 @@ public: |
// schemes are not registered as "secure" are embedded. |
BLINK_EXPORT static void registerURLSchemeAsRestrictingMixedContent(const WebString&); |
- // Registers a URL scheme to not generate mixed content warnings when |
- // included by page whose scheme is registed as restricting mixed content. |
+ // Subresources transported by secure schemes do not trigger mixed content |
+ // warnings. For example, https and data are secure schemes because they |
+ // cannot be corrupted by active network attackers. |
BLINK_EXPORT static void registerURLSchemeAsSecure(const WebString&); |
+ // Returns true if the scheme has been registered as a secure scheme. |
+ BLINK_EXPORT static bool shouldTreatURLSchemeAsSecure(const WebString&); |
+ |
// Registers a non-HTTP URL scheme which can be sent CORS requests. |
BLINK_EXPORT static void registerURLSchemeAsCORSEnabled(const WebString&); |