Replicate Content-Security-Policy into remote frame proxies.

content/browser/frame_host/navigation_handle_impl.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/frame_host/navigation_handle_impl.h"
 
 #include <utility>
 
 #include "content/browser/frame_host/ancestor_throttle.h"
 #include "content/browser/frame_host/frame_tree_node.h"
@@ skipping 10 matching lines @@
 namespace content {
 
 namespace {
 
 void UpdateThrottleCheckResult(
     NavigationThrottle::ThrottleCheckResult* to_update,
     NavigationThrottle::ThrottleCheckResult result) {
   *to_update = result;
 }
 
+void ResetContentSecurityPolicyFromHttpHeaders(
+    FrameTreeNode* frame_tree_node,
+    const scoped_refptr<net::HttpResponseHeaders>& response_headers) {
+  frame_tree_node->ResetContentSecurityPolicy();
+
+  ContentSecurityPolicyHeader header;
+  header.source = blink::WebContentSecurityPolicySourceHTTP;
+  if (response_headers->GetNormalizedHeader("Content-Security-Policy",
+                                            &header.header_value)) {
+    header.type = blink::WebContentSecurityPolicyTypeEnforce;
+    frame_tree_node->AddContentSecurityPolicy(header);
+  }
+  if (response_headers->GetNormalizedHeader(
+          "Content-Security-Policy-Report-Only", &header.header_value)) {
+    header.type = blink::WebContentSecurityPolicyTypeReport;
+    frame_tree_node->AddContentSecurityPolicy(header);
+  }
+}
+
 }  // namespace
 
 // static
 std::unique_ptr<NavigationHandleImpl> NavigationHandleImpl::Create(
     const GURL& url,
     FrameTreeNode* frame_tree_node,
     bool is_synchronous,
     bool is_srcdoc,
     const base::TimeTicks& navigation_start,
     int pending_nav_entry_id) {
@@ skipping 313 matching lines @@
   DCHECK(!render_frame_host_ || render_frame_host_ == render_frame_host);
   render_frame_host_ = render_frame_host;
   response_headers_ = response_headers;
   state_ = WILL_PROCESS_RESPONSE;
   complete_callback_ = callback;
 
   // Notify each throttle of the response.
   NavigationThrottle::ThrottleCheckResult result = CheckWillProcessResponse();
 
   // If the navigation is about to proceed, then it's ready to commit.
-  if (result == NavigationThrottle::PROCEED)
+  if (result == NavigationThrottle::PROCEED) {
     ReadyToCommitNavigation(render_frame_host);
+    ResetContentSecurityPolicyFromHttpHeaders(
+        render_frame_host->frame_tree_node(), response_headers);
+  }
 
   // If the navigation is not deferred, run the callback.
   if (result != NavigationThrottle::DEFER)
     RunCompleteCallback(result);
 }
 
 void NavigationHandleImpl::ReadyToCommitNavigation(
     RenderFrameHostImpl* render_frame_host) {
   DCHECK(!render_frame_host_ || render_frame_host_ == render_frame_host);
   render_frame_host_ = render_frame_host;
@@ skipping 126 matching lines @@
   complete_callback_.Reset();
 
   if (!callback.is_null())
     callback.Run(result);
 
   // No code after running the callback, as it might have resulted in our
   // destruction.
 }
 
 }  // namespace content