Support whitelisting to handle insecure origins as trustworthy origins (chromium)

content/public/common/content_client.h

Index: content/public/common/content_client.h
diff --git a/content/public/common/content_client.h b/content/public/common/content_client.h
index 13f0d5c57dc0b986c9c016e7404b6c71a5345440..d1523b78c88dd8bb8bcbc53676d06002a7d02a38 100644
--- a/content/public/common/content_client.h
+++ b/content/public/common/content_client.h
@@ -134,6 +134,12 @@ class CONTENT_EXPORT ContentClient {
       int* sandbox_profile_resource_id) const;
 #endif
 
+  // Returns true if the origin is trustworthy: that is, if its contents can be
+  // said to have been transferred to the browser in a way that a network
+  // attacker cannot tamper with or observe.
+  // See https://www.w3.org/TR/powerful-features/#is-origin-trustworthy.
+  virtual bool IsOriginTrustWorthy(const GURL& url) const;
+
  private:
   friend class ContentClientInitializer;  // To set these pointers.
   friend class InternalTestInitializer;