Support whitelisting to handle insecure origins as trustworthy origins (blink)

public/web/WebSecurityPolicy.h

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 18 matching lines @@
  */
 
 #ifndef WebSecurityPolicy_h
 #define WebSecurityPolicy_h
 
 #include "../platform/WebCommon.h"
 #include "../platform/WebReferrerPolicy.h"
 
 namespace blink {
 
+class WebSecurityOrigin;
 class WebString;
 class WebURL;
 
 class WebSecurityPolicy {
 public:
     // Registers a URL scheme to be treated as a local scheme (i.e., with the
     // same security rules as those applied to "file" URLs). This means that
     // normal pages cannot link to or access URLs of this scheme.
     BLINK_EXPORT static void registerURLSchemeAsLocal(const WebString&);
 
@@ skipping 44 matching lines @@
 
     // Support for whitelisting access to origins beyond the same-origin policy.
     BLINK_EXPORT static void addOriginAccessWhitelistEntry(
         const WebURL& sourceOrigin, const WebString& destinationProtocol,
         const WebString& destinationHost, bool allowDestinationSubdomains);
     BLINK_EXPORT static void removeOriginAccessWhitelistEntry(
         const WebURL& sourceOrigin, const WebString& destinationProtocol,
         const WebString& destinationHost, bool allowDestinationSubdomains);
     BLINK_EXPORT static void resetOriginAccessWhitelists();
 
+    // Support for whitelisting origins to treat them as trustworthy.
+    BLINK_EXPORT static void addOriginTrustworthyWhiteList(const WebSecurityOrigin&);
+
     // Returns the referrer modified according to the referrer policy for a
     // navigation to a given URL. If the referrer returned is empty, the
     // referrer header should be omitted.
     BLINK_EXPORT static WebString generateReferrerHeader(WebReferrerPolicy, const WebURL&, const WebString& referrer);
 
     // Registers an URL scheme to not allow manipulation of the loaded page
     // by bookmarklets or javascript: URLs typed in the omnibox.
     BLINK_EXPORT static void registerURLSchemeAsNotAllowingJavascriptURLs(const WebString&);
 
 private:
     WebSecurityPolicy();
 };
 
 } // namespace blink
 
 #endif