Forward CSP violation reporting from RenderFrameProxy to RenderFrameImpl.

content/browser/frame_host/render_frame_proxy_host.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_FRAME_HOST_RENDER_FRAME_PROXY_HOST_H_
 #define CONTENT_BROWSER_FRAME_HOST_RENDER_FRAME_PROXY_HOST_H_
 
 #include <stdint.h>
 
 #include <memory>
 
 #include "base/macros.h"
 #include "content/browser/site_instance_impl.h"
 #include "ipc/ipc_listener.h"
 #include "ipc/ipc_sender.h"
 #include "third_party/WebKit/public/platform/WebFocusType.h"
 
 struct FrameHostMsg_OpenURL_Params;
 struct FrameMsg_PostMessage_Params;
 
+namespace url {
+class Origin;
+}  // namespace url
+
 namespace content {
 
 class CrossProcessFrameConnector;
 class FrameTreeNode;
 class RenderProcessHost;
 class RenderFrameHostImpl;
 class RenderViewHostImpl;
 class RenderWidgetHostView;
+struct ContentSecurityPolicyViolation;
 
 // When a page's frames are rendered by multiple processes, each renderer has a
 // full copy of the frame tree. It has full RenderFrames for the frames it is
 // responsible for rendering and placeholder objects (i.e., RenderFrameProxies)
 // for frames rendered by other processes.
 //
 // This class is the browser-side host object for the placeholder. Each node in
 // the frame tree has a RenderFrameHost for the active SiteInstance and a set
 // of RenderFrameProxyHost objects - one for all other SiteInstances with
 // references to this frame. The proxies allow us to keep existing window
@@ skipping 73 matching lines @@
     render_frame_proxy_created_ = created;
   }
 
   // Returns if the RenderFrameProxy for this host is alive.
   bool is_render_frame_proxy_live() { return render_frame_proxy_created_; }
 
  private:
   // IPC Message handlers.
   void OnDetach();
   void OnOpenURL(const FrameHostMsg_OpenURL_Params& params);
+  void OnForwardContentSecurityPolicyViolation(
+      const url::Origin& origin_declaring_violated_csp,
+      const ContentSecurityPolicyViolation& violation);
   void OnRouteMessageEvent(const FrameMsg_PostMessage_Params& params);
   void OnDidChangeOpener(int32_t opener_routing_id);
   void OnAdvanceFocus(blink::WebFocusType type, int32_t source_routing_id);
   void OnFrameFocused();
 
+  // Helper for figuring out if it is okay to process
+  // FrameHostMsg_ForwardContentSecurityPolicyViolation message.
+  // Note that this function is not 100% accurate - please see a comment in
+  // OnForwardContentSecurityPolicyViolation for more details.
+  bool CanForwardViolationToCurrentDocument(
+      const url::Origin& origin_declaring_violated_csp,
+      const std::string& violated_csp_header);
+
   // This RenderFrameProxyHost's routing id.
   int routing_id_;
 
   // The SiteInstance this proxy is associated with.
   scoped_refptr<SiteInstance> site_instance_;
 
   // The renderer process this RenderFrameHostProxy is associated with. It is
   // equivalent to the result of site_instance_->GetProcess(), but that
   // method has the side effect of creating the process if it doesn't exist.
   // Cache a pointer to avoid unnecessary process creation.
@@ skipping 15 matching lines @@
   // kept alive as long as any RenderFrameHosts or RenderFrameProxyHosts
   // are associated with it.
   RenderViewHostImpl* render_view_host_;
 
   DISALLOW_COPY_AND_ASSIGN(RenderFrameProxyHost);
 };
 
 }  // namespace
 
 #endif  // CONTENT_BROWSER_FRAME_HOST_RENDER_FRAME_PROXY_HOST_H_