Replicate Content-Security-Policy into remote frame proxies.

content/browser/frame_host/frame_tree_node.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_FRAME_HOST_FRAME_TREE_NODE_H_
 #define CONTENT_BROWSER_FRAME_HOST_FRAME_TREE_NODE_H_
 
 #include <stddef.h>
 
 #include <memory>
 #include <string>
 #include <vector>
 
 #include "base/macros.h"
 #include "base/memory/ref_counted.h"
 #include "content/browser/frame_host/render_frame_host_impl.h"
 #include "content/browser/frame_host/render_frame_host_manager.h"
 #include "content/common/content_export.h"
 #include "content/common/frame_replication_state.h"
 #include "third_party/WebKit/public/web/WebFrameOwnerProperties.h"
 #include "url/gurl.h"
 #include "url/origin.h"
 
 namespace content {
 
 class FrameTree;
 class NavigationRequest;
 class Navigator;
 class RenderFrameHostImpl;
+struct ContentSecurityPolicyHeader;
 
 // When a page contains iframes, its renderer process maintains a tree structure
 // of those frames. We are mirroring this tree in the browser process. This
 // class represents a node in this tree and is a wrapper for all objects that
 // are frame-specific (as opposed to page-specific).
 class CONTENT_EXPORT FrameTreeNode {
  public:
   class Observer {
    public:
     // Invoked when a FrameTreeNode is being destroyed.
@@ skipping 98 matching lines @@
     return replication_state_.origin;
   }
 
   // Set the current origin and notify proxies about the update.
   void SetCurrentOrigin(const url::Origin& origin,
                         bool is_potentially_trustworthy_unique_origin);
 
   // Set the current name and notify proxies about the update.
   void SetFrameName(const std::string& name, const std::string& unique_name);
 
+  // Add CSP header to replication state and notify proxies about the update.
+  void AddContentSecurityPolicy(const ContentSecurityPolicyHeader& header);
+
+  // Discards previous CSP headers and notifies proxies about the update.
+  // Typically invoked after committing navigation to a new document (since the
+  // new document comes with a fresh set of CSP http headers).
+  void ResetContentSecurityPolicy();
+
   // Sets the current enforcement of strict mixed content checking and
   // notifies proxies about the update.
   void SetEnforceStrictMixedContentChecking(bool should_enforce);
 
   // Returns the currently active sandbox flags for this frame.  This includes
   // flags inherited from parent frames and the currently active flags from the
   // <iframe> element hosting this frame.  This does not include flags that
   // have been updated in an <iframe> element but have not taken effect yet;
   // use pending_sandbox_flags() for those.
   blink::WebSandboxFlags effective_sandbox_flags() const {
@@ skipping 192 matching lines @@
   base::ObserverList<Observer> observers_;
 
   base::TimeTicks last_focus_time_;
 
   DISALLOW_COPY_AND_ASSIGN(FrameTreeNode);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_FRAME_HOST_FRAME_TREE_NODE_H_