Replicate Content-Security-Policy into remote frame proxies.

third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h

Index: third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h
diff --git a/third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h b/third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h
index f9e2466d95675d1a93b71e7a8f64bfc3863f3baa..df42647fbc31c2b9ac195d106f4968d1d72fbe73 100644
--- a/third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h
+++ b/third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h
@@ -142,11 +142,13 @@ public:
     DECLARE_TRACE();
 
     void bindToExecutionContext(ExecutionContext*);
+    void setupSelf(const SecurityOrigin&);
     void copyStateFrom(const ContentSecurityPolicy*);
     void copyPluginTypesFrom(const ContentSecurityPolicy*);
 
     void didReceiveHeaders(const ContentSecurityPolicyResponseHeaders&);
     void didReceiveHeader(const String&, ContentSecurityPolicyHeaderType, ContentSecurityPolicyHeaderSource);
+    void replicateHeader(const String&, ContentSecurityPolicyHeaderType, ContentSecurityPolicyHeaderSource);
 
     PassOwnPtr<Vector<CSPHeaderAndType>> headers() const;
 
@@ -271,11 +273,15 @@ private:
 
     void applyPolicySideEffectsToExecutionContext();
 
-    SecurityOrigin* getSecurityOrigin() const;
     KURL completeURL(const String&) const;
 
     void logToConsole(const String& message, MessageLevel = ErrorMessageLevel);
-    void addPolicyFromHeaderValue(const String&, ContentSecurityPolicyHeaderType, ContentSecurityPolicyHeaderSource);
+
+    enum FrameLoaderClientNotificationStatus {
+        NotifyFrameLoaderClient,
+        DontNotifyFrameLoaderClient,
+    };
+    void addPolicyFromHeaderValue(const String&, ContentSecurityPolicyHeaderType, ContentSecurityPolicyHeaderSource, FrameLoaderClientNotificationStatus = NotifyFrameLoaderClient);

[alexmos, 2016/05/12 22:37:25]

Note that this enum might be useful more generally (e.g., see
FocusController::focusDocumentView).  Fine not to do this here though.

(speaking of which, NotifyEmbedder might be a more succinct name to use :) )

[Łukasz Anforowicz, 2016/05/13 17:29:15]

Acknowledged.

 
     bool shouldSendViolationReport(const String&) const;
     void didSendViolationReport(const String&);