| Index: third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h
|
| diff --git a/third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h b/third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h
|
| index 39ed351acd26e22eacc8335f3b21f6c3d8e80e33..970d001425f43c7ad9aa4bf39596ea3528ac4aff 100644
|
| --- a/third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h
|
| +++ b/third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h
|
| @@ -34,6 +34,7 @@
|
| #include "platform/heap/Handle.h"
|
| #include "platform/network/ContentSecurityPolicyParsers.h"
|
| #include "platform/network/HTTPParsers.h"
|
| +#include "platform/network/ResourceRequest.h"
|
| #include "platform/v8_inspector/public/ConsoleTypes.h"
|
| #include "platform/weborigin/ReferrerPolicy.h"
|
| #include "wtf/HashSet.h"
|
| @@ -64,6 +65,7 @@ typedef int SandboxFlags;
|
| typedef HeapVector<Member<CSPDirectiveList>> CSPDirectiveListVector;
|
| typedef HeapVector<Member<ConsoleMessage>> ConsoleMessageVector;
|
| typedef std::pair<String, ContentSecurityPolicyHeaderType> CSPHeaderAndType;
|
| +using RedirectStatus = ResourceRequest::RedirectStatus;
|
|
|
| class CORE_EXPORT ContentSecurityPolicy : public GarbageCollectedFinalized<ContentSecurityPolicy> {
|
| public:
|
| @@ -108,13 +110,6 @@ public:
|
| SuppressReport
|
| };
|
|
|
| - // When a resource is loaded after a redirect, source paths are
|
| - // ignored in the matching algorithm.
|
| - enum RedirectStatus {
|
| - DidRedirect,
|
| - DidNotRedirect
|
| - };
|
| -
|
| enum ExceptionStatus {
|
| WillThrowException,
|
| WillNotThrowException
|
| @@ -171,19 +166,19 @@ public:
|
| // plugin-types directives from the parent document.
|
| bool allowPluginTypeForDocument(const Document&, const String& type, const String& typeAttribute, const KURL&, ReportingStatus = SendReport) const;
|
|
|
| - bool allowScriptFromSource(const KURL&, RedirectStatus = DidNotRedirect, ReportingStatus = SendReport) const;
|
| - bool allowObjectFromSource(const KURL&, RedirectStatus = DidNotRedirect, ReportingStatus = SendReport) const;
|
| - bool allowChildFrameFromSource(const KURL&, RedirectStatus = DidNotRedirect, ReportingStatus = SendReport) const;
|
| - bool allowImageFromSource(const KURL&, RedirectStatus = DidNotRedirect, ReportingStatus = SendReport) const;
|
| - bool allowStyleFromSource(const KURL&, RedirectStatus = DidNotRedirect, ReportingStatus = SendReport) const;
|
| - bool allowFontFromSource(const KURL&, RedirectStatus = DidNotRedirect, ReportingStatus = SendReport) const;
|
| - bool allowMediaFromSource(const KURL&, RedirectStatus = DidNotRedirect, ReportingStatus = SendReport) const;
|
| - bool allowConnectToSource(const KURL&, RedirectStatus = DidNotRedirect, ReportingStatus = SendReport) const;
|
| - bool allowFormAction(const KURL&, RedirectStatus = DidNotRedirect, ReportingStatus = SendReport) const;
|
| - bool allowBaseURI(const KURL&, RedirectStatus = DidNotRedirect, ReportingStatus = SendReport) const;
|
| - bool allowWorkerContextFromSource(const KURL&, RedirectStatus = DidNotRedirect, ReportingStatus = SendReport) const;
|
| + bool allowScriptFromSource(const KURL&, RedirectStatus = RedirectStatus::NoRedirect, ReportingStatus = SendReport) const;
|
| + bool allowObjectFromSource(const KURL&, RedirectStatus = RedirectStatus::NoRedirect, ReportingStatus = SendReport) const;
|
| + bool allowChildFrameFromSource(const KURL&, RedirectStatus = RedirectStatus::NoRedirect, ReportingStatus = SendReport) const;
|
| + bool allowImageFromSource(const KURL&, RedirectStatus = RedirectStatus::NoRedirect, ReportingStatus = SendReport) const;
|
| + bool allowStyleFromSource(const KURL&, RedirectStatus = RedirectStatus::NoRedirect, ReportingStatus = SendReport) const;
|
| + bool allowFontFromSource(const KURL&, RedirectStatus = RedirectStatus::NoRedirect, ReportingStatus = SendReport) const;
|
| + bool allowMediaFromSource(const KURL&, RedirectStatus = RedirectStatus::NoRedirect, ReportingStatus = SendReport) const;
|
| + bool allowConnectToSource(const KURL&, RedirectStatus = RedirectStatus::NoRedirect, ReportingStatus = SendReport) const;
|
| + bool allowFormAction(const KURL&, RedirectStatus = RedirectStatus::NoRedirect, ReportingStatus = SendReport) const;
|
| + bool allowBaseURI(const KURL&, RedirectStatus = RedirectStatus::NoRedirect, ReportingStatus = SendReport) const;
|
| + bool allowWorkerContextFromSource(const KURL&, RedirectStatus = RedirectStatus::NoRedirect, ReportingStatus = SendReport) const;
|
|
|
| - bool allowManifestFromSource(const KURL&, RedirectStatus = DidNotRedirect, ReportingStatus = SendReport) const;
|
| + bool allowManifestFromSource(const KURL&, RedirectStatus = RedirectStatus::NoRedirect, ReportingStatus = SendReport) const;
|
|
|
| // |allowAncestors| does not need to know whether the resource was a
|
| // result of a redirect. After a redirect, source paths are usually
|
| @@ -205,7 +200,7 @@ public:
|
| bool allowScriptWithHash(const String& source, InlineType) const;
|
| bool allowStyleWithHash(const String& source, InlineType) const;
|
|
|
| - bool allowRequest(WebURLRequest::RequestContext, const KURL&, RedirectStatus = DidNotRedirect, ReportingStatus = SendReport) const;
|
| + bool allowRequest(WebURLRequest::RequestContext, const KURL&, RedirectStatus = RedirectStatus::NoRedirect, ReportingStatus = SendReport) const;
|
|
|
| void usesScriptHashAlgorithms(uint8_t ContentSecurityPolicyHashAlgorithm);
|
| void usesStyleHashAlgorithms(uint8_t ContentSecurityPolicyHashAlgorithm);
|
|
|