Support whitelisting to handle insecure origins as trustworthy origins (chromium)

content/public/common/content_client.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_COMMON_CONTENT_CLIENT_H_
 #define CONTENT_PUBLIC_COMMON_CONTENT_CLIENT_H_
 
 #include <string>
 #include <vector>
 
@@ skipping 116 matching lines @@
   // for |sandbox_type| are defined by the embedder and should start with
   // SandboxType::SANDBOX_TYPE_AFTER_LAST_TYPE. Returns false if no sandbox
   // profile for the given |sandbox_type| exists. Otherwise,
   // |sandbox_profile_resource_id| is set to the resource ID corresponding to
   // the sandbox profile to use and true is returned.
   virtual bool GetSandboxProfileForSandboxType(
       int sandbox_type,
       int* sandbox_profile_resource_id) const;
 #endif
 
+  // Returns true if the origin is trustworthy: that is, if its contents can be
+  // said to have been transferred to the browser in a way that a network
+  // attacker cannot tamper with or observe.
+  // See https://www.w3.org/TR/powerful-features/#is-origin-trustworthy.
+  virtual bool IsOriginTrustWorthy(const GURL& url) const;
+
  private:
   friend class ContentClientInitializer;  // To set these pointers.
   friend class InternalTestInitializer;
 
   // The embedder API for participating in browser logic.
   ContentBrowserClient* browser_;
   // The embedder API for participating in plugin logic.
   ContentPluginClient* plugin_;
   // The embedder API for participating in renderer logic.
   ContentRendererClient* renderer_;
   // The embedder API for participating in utility logic.
   ContentUtilityClient* utility_;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_COMMON_CONTENT_CLIENT_H_