Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(684)

Unified Diff: third_party/WebKit/Source/core/loader/DocumentThreadableLoader.h

Issue 1866433002: Use RequestContext to apply CSP in FrameFetchContext (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: rename redirectReceivedAndNotFollowed() to redirectBlocked() Created 4 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: third_party/WebKit/Source/core/loader/DocumentThreadableLoader.h
diff --git a/third_party/WebKit/Source/core/loader/DocumentThreadableLoader.h b/third_party/WebKit/Source/core/loader/DocumentThreadableLoader.h
index 4b4e85eda2cc80b480e37fd14840e91bd5c9322a..c77f78c8ea6aa34f616770dbff3de01f9810c634 100644
--- a/third_party/WebKit/Source/core/loader/DocumentThreadableLoader.h
+++ b/third_party/WebKit/Source/core/loader/DocumentThreadableLoader.h
@@ -35,7 +35,6 @@
#include "core/CoreExport.h"
#include "core/fetch/RawResource.h"
#include "core/fetch/ResourceOwner.h"
-#include "core/frame/csp/ContentSecurityPolicy.h"
#include "core/loader/ThreadableLoader.h"
#include "platform/Timer.h"
#include "platform/heap/Handle.h"
@@ -76,13 +75,6 @@ class CORE_EXPORT DocumentThreadableLoader final : public ThreadableLoader, priv
LoadAsynchronously
};
- enum EnforceContentSecurityPolicyDirective {
- EnforceWorkerDirective,
- EnforceConnectSrcDirective,
- EnforceManifestSrcDirective,
- EnforceMediaSrcDirective,
- };
-
DocumentThreadableLoader(Document&, ThreadableLoaderClient*, BlockingBehavior, const ThreadableLoaderOptions&, const ResourceLoaderOptions&);
void clear();
@@ -102,6 +94,7 @@ class CORE_EXPORT DocumentThreadableLoader final : public ThreadableLoader, priv
void setSerializedCachedMetadata(Resource*, const char*, size_t) override;
void dataReceived(Resource*, const char* data, size_t dataLength) override;
void redirectReceived(Resource*, ResourceRequest&, const ResourceResponse&) override;
+ void redirectBlocked() override;
void dataDownloaded(Resource*, int) override;
void didReceiveResourceTiming(Resource*, const ResourceTimingInfo&) override;
@@ -151,7 +144,6 @@ class CORE_EXPORT DocumentThreadableLoader final : public ThreadableLoader, priv
void loadRequest(const ResourceRequest&, ResourceLoaderOptions);
bool isAllowedRedirect(const KURL&) const;
- bool isAllowedByContentSecurityPolicy(const KURL&, ContentSecurityPolicy::RedirectStatus) const;
// Returns DoNotAllowStoredCredentials
// if m_forceDoNotAllowStoredCredentials is set. Otherwise, just
// returns allowCredentials value of m_resourceLoaderOptions.
@@ -208,7 +200,7 @@ class CORE_EXPORT DocumentThreadableLoader final : public ThreadableLoader, priv
const bool m_async;
- // Holds the original request context (used for sanity checks and Content Security Policy enforcement).
+ // Holds the original request context (used for sanity checks).
WebURLRequest::RequestContext m_requestContext;
// Holds the original request for fallback in case the Service Worker

Powered by Google App Engine
This is Rietveld 408576698