Plumb document's strict mixed content checking for RemoteFrames

third_party/WebKit/Source/core/dom/Document.cpp

Index: third_party/WebKit/Source/core/dom/Document.cpp
diff --git a/third_party/WebKit/Source/core/dom/Document.cpp b/third_party/WebKit/Source/core/dom/Document.cpp
index 1e47f442157510b83b9c9d82cd55cf388366721c..88c30f309b4774876f022daf314b70fd8c608d7e 100644
--- a/third_party/WebKit/Source/core/dom/Document.cpp
+++ b/third_party/WebKit/Source/core/dom/Document.cpp
@@ -5767,6 +5767,13 @@ WebTaskRunner* Document::timerTaskRunner() const
     return Platform::current()->currentThread()->scheduler()->timerTaskRunner();
 }
 
+void Document::enforceStrictMixedContentChecking()
+{
+    securityContext().setShouldEnforceStrictMixedContentChecking(true);
+    if (frame())

[dcheng, 2015/12/16 10:18:19]

So I have a dumb question.

It looks like the only time frame() will be null is if we're creating a detached
Document via something like document.implementation.createDocument().

What is the effect of enabling CSP on a detached Document? Is there a way to
load this detached Document directly?

[estark, 2015/12/16 21:01:18]

Hmmm... I have no idea. Mike, do you know the answer to this? 

+        frame()->loader().client()->didEnforceStrictMixedContentChecking();
+}
+
 DEFINE_TRACE(Document)
 {
 #if ENABLE(OILPAN)