CSP: Allow hashed inline event handlers only with 'unsafe-hashed-attributes'

third_party/WebKit/Source/core/frame/csp/SourceListDirective.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/frame/csp/SourceListDirective.h"
 
 #include "core/frame/csp/CSPSourceList.h"
 #include "core/frame/csp/ContentSecurityPolicy.h"
 #include "platform/network/ContentSecurityPolicyParsers.h"
 #include "platform/weborigin/KURL.h"
@@ skipping 34 matching lines @@
 bool SourceListDirective::allowNonce(const String& nonce) const
 {
     return m_sourceList.allowNonce(nonce.stripWhiteSpace());
 }
 
 bool SourceListDirective::allowHash(const CSPHashValue& hashValue) const
 {
     return m_sourceList.allowHash(hashValue);
 }
 
+bool SourceListDirective::allowHashedAttributes() const
+{
+    return m_sourceList.allowHashedAttributes();
+}
+
 bool SourceListDirective::isHashOrNoncePresent() const
 {
     return m_sourceList.isHashOrNoncePresent();
 }
 
 uint8_t SourceListDirective::hashAlgorithmsUsed() const
 {
     return m_sourceList.hashAlgorithmsUsed();
 }
 
 DEFINE_TRACE(SourceListDirective)
 {
     visitor->trace(m_sourceList);
     CSPDirective::trace(visitor);
 }
 
 } // namespace blink