Support whitelisting to handle insecure origins as trustworthy origins (blink)

public/web/WebSecurityPolicy.h

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 82 matching lines @@
 
     // Support for whitelisting access to origins beyond the same-origin policy.
     BLINK_EXPORT static void addOriginAccessWhitelistEntry(
         const WebURL& sourceOrigin, const WebString& destinationProtocol,
         const WebString& destinationHost, bool allowDestinationSubdomains);
     BLINK_EXPORT static void removeOriginAccessWhitelistEntry(
         const WebURL& sourceOrigin, const WebString& destinationProtocol,
         const WebString& destinationHost, bool allowDestinationSubdomains);
     BLINK_EXPORT static void resetOriginAccessWhitelists();
 
+    // Support for whitelisting origins to treat them as trustworthy.
+    BLINK_EXPORT static void addOriginTrustworthyWhiteList(const WebURL& origin);

[Mike West, 2015/04/20 09:25:00]

Why not pass in a WebSecurityOrigin?

[kinuko, 2015/04/20 15:43:18]

Done.

+
     // Returns the referrer modified according to the referrer policy for a
     // navigation to a given URL. If the referrer returned is empty, the
     // referrer header should be omitted.
     BLINK_EXPORT static WebString generateReferrerHeader(WebReferrerPolicy, const WebURL&, const WebString& referrer);
 
     // Registers an URL scheme to not allow manipulation of the loaded page
     // by bookmarklets or javascript: URLs typed in the omnibox.
     BLINK_EXPORT static void registerURLSchemeAsNotAllowingJavascriptURLs(const WebString&);
 
 private:
     WebSecurityPolicy();
 };
 
 } // namespace blink
 
 #endif