XFO: Bypass ancestor checks for 'Content-Disposition: attachment; ...'

content/browser/frame_host/ancestor_throttle.h

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_FRAME_HOST_ANCESTOR_THROTTLE_H_
 #define CONTENT_BROWSER_FRAME_HOST_ANCESTOR_THROTTLE_H_
 
 #include <memory>
 #include <string>
 
@@ skipping 31 matching lines @@
   explicit AncestorThrottle(NavigationHandle* handle);
   ~AncestorThrottle() override;
 
   NavigationThrottle::ThrottleCheckResult WillProcessResponse() override;
 
  private:
   FRIEND_TEST_ALL_PREFIXES(AncestorThrottleTest, ParsingXFrameOptions);
   FRIEND_TEST_ALL_PREFIXES(AncestorThrottleTest, ErrorsParsingXFrameOptions);
   FRIEND_TEST_ALL_PREFIXES(AncestorThrottleTest,
                            IgnoreWhenFrameAncestorsPresent);
+  FRIEND_TEST_ALL_PREFIXES(AncestorThrottleTest, IgnoreWhenAttachment);
 
   void ParseError(const std::string& value, HeaderDisposition disposition);
   void ConsoleError(HeaderDisposition disposition);
 
   // Parses an 'X-Frame-Options' header. If the result is either CONFLICT
   // or INVALID, |header_value| will be populated with the value which caused
   // the parse error.
   HeaderDisposition ParseHeader(const net::HttpResponseHeaders* headers,
                                 std::string* header_value);
 
   DISALLOW_COPY_AND_ASSIGN(AncestorThrottle);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_FRAME_HOST_ANCESTOR_THROTTLE_H_