Source/core/frame/ContentSecurityPolicy.h - Issue 131103010: CSP 1.1: Introduce the 'child-src' directive.

Side by Side Diff: Source/core/frame/ContentSecurityPolicy.h

Issue 131103010: CSP 1.1: Introduce the 'child-src' directive. (Closed) Base URL: svn://svn.chromium.org/blink/trunk

Patch Set: Tests. Created 6 years, 11 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch | Annotate | Revision Log

« no previous file with comments | « LayoutTests/http/tests/security/contentSecurityPolicy/resources/child-src-test.js ('k') | Source/core/frame/ContentSecurityPolicy.cpp » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

OLD	NEW
1 /*	1 /*

2 * Copyright (C) 2011 Google, Inc. All rights reserved.	2 * Copyright (C) 2011 Google, Inc. All rights reserved.

3 *	3 *

4 * Redistribution and use in source and binary forms, with or without	4 * Redistribution and use in source and binary forms, with or without

5 * modification, are permitted provided that the following conditions	5 * modification, are permitted provided that the following conditions

6 * are met:	6 * are met:

7 * 1. Redistributions of source code must retain the above copyright	7 * 1. Redistributions of source code must retain the above copyright

8 * notice, this list of conditions and the following disclaimer.	8 * notice, this list of conditions and the following disclaimer.

9 * 2. Redistributions in binary form must reproduce the above copyright	9 * 2. Redistributions in binary form must reproduce the above copyright

10 * notice, this list of conditions and the following disclaimer in the	10 * notice, this list of conditions and the following disclaimer in the

(...skipping 93 matching lines...) Expand 10 before \| Expand all \| Expand 10 after Loading...
104 bool allowObjectFromSource(const KURL&, ReportingStatus = SendReport) const;	104 bool allowObjectFromSource(const KURL&, ReportingStatus = SendReport) const;

105 bool allowChildFrameFromSource(const KURL&, ReportingStatus = SendReport) co nst;	105 bool allowChildFrameFromSource(const KURL&, ReportingStatus = SendReport) co nst;

106 bool allowImageFromSource(const KURL&, ReportingStatus = SendReport) const;	106 bool allowImageFromSource(const KURL&, ReportingStatus = SendReport) const;

107 bool allowStyleFromSource(const KURL&, ReportingStatus = SendReport) const;	107 bool allowStyleFromSource(const KURL&, ReportingStatus = SendReport) const;

108 bool allowFontFromSource(const KURL&, ReportingStatus = SendReport) const;	108 bool allowFontFromSource(const KURL&, ReportingStatus = SendReport) const;

109 bool allowMediaFromSource(const KURL&, ReportingStatus = SendReport) const;	109 bool allowMediaFromSource(const KURL&, ReportingStatus = SendReport) const;

110 bool allowConnectToSource(const KURL&, ReportingStatus = SendReport) const;	110 bool allowConnectToSource(const KURL&, ReportingStatus = SendReport) const;

111 bool allowFormAction(const KURL&, ReportingStatus = SendReport) const;	111 bool allowFormAction(const KURL&, ReportingStatus = SendReport) const;

112 bool allowBaseURI(const KURL&, ReportingStatus = SendReport) const;	112 bool allowBaseURI(const KURL&, ReportingStatus = SendReport) const;

113 bool allowAncestors(Frame*, ReportingStatus = SendReport) const;	113 bool allowAncestors(Frame*, ReportingStatus = SendReport) const;

	114 bool allowChildContextFromSource(const KURL&, ReportingStatus = SendReport) const;

114	115

115 // The nonce and hash allow functions are guaranteed to not have any side	116 // The nonce and hash allow functions are guaranteed to not have any side

116 // effects, including reporting.	117 // effects, including reporting.

117 bool allowScriptNonce(const String& nonce) const;	118 bool allowScriptNonce(const String& nonce) const;

118 bool allowStyleNonce(const String& nonce) const;	119 bool allowStyleNonce(const String& nonce) const;

119 bool allowScriptHash(const String& source) const;	120 bool allowScriptHash(const String& source) const;

120 bool allowStyleHash(const String& source) const;	121 bool allowStyleHash(const String& source) const;

121	122

122 void usesScriptHashAlgorithms(uint8_t HashAlgorithms);	123 void usesScriptHashAlgorithms(uint8_t HashAlgorithms);

123 void usesStyleHashAlgorithms(uint8_t HashAlgorithms);	124 void usesStyleHashAlgorithms(uint8_t HashAlgorithms);

(...skipping 54 matching lines...) Expand 10 before \| Expand all \| Expand 10 after Loading...
178 // We put the hash functions used on the policy object so that we only need	179 // We put the hash functions used on the policy object so that we only need

179 // to calculate a hash once and then distribute it to all of the directives	180 // to calculate a hash once and then distribute it to all of the directives

180 // for validation.	181 // for validation.

181 uint8_t m_scriptHashAlgorithmsUsed;	182 uint8_t m_scriptHashAlgorithmsUsed;

182 uint8_t m_styleHashAlgorithmsUsed;	183 uint8_t m_styleHashAlgorithmsUsed;

183 };	184 };

184	185

185 }	186 }

186	187

187 #endif	188 #endif

OLD	NEW