OLD | NEW |
1 /* | 1 /* |
2 * Copyright (C) 2011 Google, Inc. All rights reserved. | 2 * Copyright (C) 2011 Google, Inc. All rights reserved. |
3 * | 3 * |
4 * Redistribution and use in source and binary forms, with or without | 4 * Redistribution and use in source and binary forms, with or without |
5 * modification, are permitted provided that the following conditions | 5 * modification, are permitted provided that the following conditions |
6 * are met: | 6 * are met: |
7 * 1. Redistributions of source code must retain the above copyright | 7 * 1. Redistributions of source code must retain the above copyright |
8 * notice, this list of conditions and the following disclaimer. | 8 * notice, this list of conditions and the following disclaimer. |
9 * 2. Redistributions in binary form must reproduce the above copyright | 9 * 2. Redistributions in binary form must reproduce the above copyright |
10 * notice, this list of conditions and the following disclaimer in the | 10 * notice, this list of conditions and the following disclaimer in the |
(...skipping 80 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
91 | 91 |
92 // These functions are wrong because they assume that there is only one head
er. | 92 // These functions are wrong because they assume that there is only one head
er. |
93 // FIXME: Replace them with functions that return vectors. | 93 // FIXME: Replace them with functions that return vectors. |
94 const String& deprecatedHeader() const; | 94 const String& deprecatedHeader() const; |
95 HeaderType deprecatedHeaderType() const; | 95 HeaderType deprecatedHeaderType() const; |
96 | 96 |
97 bool allowJavaScriptURLs(const String& contextURL, const WTF::OrdinalNumber&
contextLine, ReportingStatus = SendReport) const; | 97 bool allowJavaScriptURLs(const String& contextURL, const WTF::OrdinalNumber&
contextLine, ReportingStatus = SendReport) const; |
98 bool allowInlineEventHandlers(const String& contextURL, const WTF::OrdinalNu
mber& contextLine, ReportingStatus = SendReport) const; | 98 bool allowInlineEventHandlers(const String& contextURL, const WTF::OrdinalNu
mber& contextLine, ReportingStatus = SendReport) const; |
99 bool allowInlineScript(const String& contextURL, const WTF::OrdinalNumber& c
ontextLine, ReportingStatus = SendReport) const; | 99 bool allowInlineScript(const String& contextURL, const WTF::OrdinalNumber& c
ontextLine, ReportingStatus = SendReport) const; |
100 bool allowInlineStyle(const String& contextURL, const WTF::OrdinalNumber& co
ntextLine, ReportingStatus = SendReport) const; | 100 bool allowInlineStyle(const String& contextURL, const WTF::OrdinalNumber& co
ntextLine, ReportingStatus = SendReport) const; |
101 bool allowScriptEval(ScriptState* = 0, ReportingStatus = SendReport) const; | 101 bool allowEval(ScriptState* = 0, ReportingStatus = SendReport) const; |
102 bool allowStyleEval(ScriptState* = 0, ReportingStatus = SendReport) const; | |
103 bool allowPluginType(const String& type, const String& typeAttribute, const
KURL&, ReportingStatus = SendReport) const; | 102 bool allowPluginType(const String& type, const String& typeAttribute, const
KURL&, ReportingStatus = SendReport) const; |
104 | 103 |
105 bool allowScriptFromSource(const KURL&, ReportingStatus = SendReport) const; | 104 bool allowScriptFromSource(const KURL&, ReportingStatus = SendReport) const; |
106 bool allowObjectFromSource(const KURL&, ReportingStatus = SendReport) const; | 105 bool allowObjectFromSource(const KURL&, ReportingStatus = SendReport) const; |
107 bool allowChildFrameFromSource(const KURL&, ReportingStatus = SendReport) co
nst; | 106 bool allowChildFrameFromSource(const KURL&, ReportingStatus = SendReport) co
nst; |
108 bool allowImageFromSource(const KURL&, ReportingStatus = SendReport) const; | 107 bool allowImageFromSource(const KURL&, ReportingStatus = SendReport) const; |
109 bool allowStyleFromSource(const KURL&, ReportingStatus = SendReport) const; | 108 bool allowStyleFromSource(const KURL&, ReportingStatus = SendReport) const; |
110 bool allowFontFromSource(const KURL&, ReportingStatus = SendReport) const; | 109 bool allowFontFromSource(const KURL&, ReportingStatus = SendReport) const; |
111 bool allowMediaFromSource(const KURL&, ReportingStatus = SendReport) const; | 110 bool allowMediaFromSource(const KURL&, ReportingStatus = SendReport) const; |
112 bool allowConnectToSource(const KURL&, ReportingStatus = SendReport) const; | 111 bool allowConnectToSource(const KURL&, ReportingStatus = SendReport) const; |
(...skipping 38 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
151 void reportMetaOutsideHead(const String&) const; | 150 void reportMetaOutsideHead(const String&) const; |
152 void reportViolation(const String& directiveText, const String& effectiveDir
ective, const String& consoleMessage, const KURL& blockedURL, const Vector<KURL>
& reportURIs, const String& header); | 151 void reportViolation(const String& directiveText, const String& effectiveDir
ective, const String& consoleMessage, const KURL& blockedURL, const Vector<KURL>
& reportURIs, const String& header); |
153 | 152 |
154 void reportBlockedScriptExecutionToInspector(const String& directiveText) co
nst; | 153 void reportBlockedScriptExecutionToInspector(const String& directiveText) co
nst; |
155 | 154 |
156 const KURL url() const; | 155 const KURL url() const; |
157 KURL completeURL(const String&) const; | 156 KURL completeURL(const String&) const; |
158 SecurityOrigin* securityOrigin() const; | 157 SecurityOrigin* securityOrigin() const; |
159 void enforceSandboxFlags(SandboxFlags) const; | 158 void enforceSandboxFlags(SandboxFlags) const; |
160 String evalDisabledErrorMessage() const; | 159 String evalDisabledErrorMessage() const; |
161 String styleEvalDisabledErrorMessage() const; | |
162 | 160 |
163 bool experimentalFeaturesEnabled() const; | 161 bool experimentalFeaturesEnabled() const; |
164 | 162 |
165 static bool shouldBypassMainWorld(ExecutionContext*); | 163 static bool shouldBypassMainWorld(ExecutionContext*); |
166 | 164 |
167 ExecutionContextClient* client() const { return m_client; } | 165 ExecutionContextClient* client() const { return m_client; } |
168 Document* document() const { return client()->isDocument() ? toDocument(clie
nt()) : 0; } | 166 Document* document() const { return client()->isDocument() ? toDocument(clie
nt()) : 0; } |
169 | 167 |
170 private: | 168 private: |
171 explicit ContentSecurityPolicy(ExecutionContextClient*); | 169 explicit ContentSecurityPolicy(ExecutionContextClient*); |
(...skipping 13 matching lines...) Expand all Loading... |
185 // We put the hash functions used on the policy object so that we only need | 183 // We put the hash functions used on the policy object so that we only need |
186 // to calculate a hash once and then distribute it to all of the directives | 184 // to calculate a hash once and then distribute it to all of the directives |
187 // for validation. | 185 // for validation. |
188 uint8_t m_scriptHashAlgorithmsUsed; | 186 uint8_t m_scriptHashAlgorithmsUsed; |
189 uint8_t m_styleHashAlgorithmsUsed; | 187 uint8_t m_styleHashAlgorithmsUsed; |
190 }; | 188 }; |
191 | 189 |
192 } | 190 } |
193 | 191 |
194 #endif | 192 #endif |
OLD | NEW |