Replicate Content-Security-Policy into remote frame proxies.

third_party/WebKit/Source/web/WebRemoteFrameImpl.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "web/WebRemoteFrameImpl.h"
 
+#include "core/dom/RemoteSecurityContext.h"
+#include "core/dom/SecurityContext.h"
 #include "core/frame/FrameView.h"
 #include "core/frame/Settings.h"
+#include "core/frame/csp/ContentSecurityPolicy.h"
 #include "core/html/HTMLFrameOwnerElement.h"
 #include "core/layout/LayoutObject.h"
 #include "core/page/Page.h"
 #include "platform/heap/Handle.h"
 #include "public/platform/WebFloatRect.h"
 #include "public/platform/WebRect.h"
 #include "public/web/WebDocument.h"
 #include "public/web/WebFrameOwnerProperties.h"
 #include "public/web/WebPerformance.h"
 #include "public/web/WebRange.h"
@@ skipping 621 matching lines @@
     DCHECK(frame());
     frame()->securityContext()->enforceSandboxFlags(static_cast<SandboxFlags>(flags));
 }
 
 void WebRemoteFrameImpl::setReplicatedName(const WebString& name, const WebString& uniqueName) const
 {
     DCHECK(frame());
     frame()->tree().setPrecalculatedName(name, uniqueName);
 }
 
+void WebRemoteFrameImpl::addReplicatedContentSecurityPolicyHeader(const WebString& headerValue, WebContentSecurityPolicyType type, WebContentSecurityPolicySource source) const
+{
+    frame()->securityContext()->contentSecurityPolicy()->addPolicyFromHeaderValue(
+        headerValue,
+        static_cast<ContentSecurityPolicyHeaderType>(type),
+        static_cast<ContentSecurityPolicyHeaderSource>(source));
+}
+
+void WebRemoteFrameImpl::resetReplicatedContentSecurityPolicy() const
+{
+    frame()->securityContext()->resetReplicatedContentSecurityPolicy();
+}
+
 void WebRemoteFrameImpl::setReplicatedShouldEnforceStrictMixedContentChecking(bool shouldEnforce) const
 {
     DCHECK(frame());
     frame()->securityContext()->setShouldEnforceStrictMixedContentChecking(shouldEnforce);
 }
 
 void WebRemoteFrameImpl::setReplicatedPotentiallyTrustworthyUniqueOrigin(bool isUniqueOriginPotentiallyTrustworthy) const
 {
     DCHECK(frame());
     // If |isUniqueOriginPotentiallyTrustworthy| is true, then the origin must be unique.
@@ skipping 32 matching lines @@
 
 WebRemoteFrameImpl::WebRemoteFrameImpl(WebTreeScopeType scope, WebRemoteFrameClient* client)
     : WebRemoteFrame(scope)
     , m_frameClient(RemoteFrameClientImpl::create(this))
     , m_client(client)
     , m_selfKeepAlive(this)
 {
 }
 
 } // namespace blink