CORS-RFC1918: Introduce 'treat-as-public-address' CSP directive

third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h

Index: third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h
diff --git a/third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h b/third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h
index 7c0d2be6e54cb40f9b54e9ec4b096995fac63d8e..69473b1f0aca18e70aac705e03d6f5f2b78be257 100644
--- a/third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h
+++ b/third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h
@@ -106,6 +106,9 @@ public:
     // https://metromoxie.github.io/webappsec/specs/suborigins/index.html
     static const char Suborigin[];
 
+    // https://mikewest.github.io/cors-rfc1918/#csp
+    static const char TreatAsPublicAddress[];
+
     enum ReportingStatus {
         SendReport,
         SuppressReport
@@ -247,6 +250,7 @@ public:
     void enforceSandboxFlags(SandboxFlags);
     void enforceSuborigin(const String&);
     void enforceStrictMixedContentChecking();
+    void treatAsPublicAddress();
     String evalDisabledErrorMessage() const;
 
     void setInsecureRequestsPolicy(SecurityContext::InsecureRequestsPolicy);
@@ -307,6 +311,7 @@ private:
     String m_suboriginName;
     bool m_enforceStrictMixedContentChecking;
     ReferrerPolicy m_referrerPolicy;
+    bool m_treatAsPublicAddress;
     String m_disableEvalErrorMessage;
     SecurityContext::InsecureRequestsPolicy m_insecureRequestsPolicy;