Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(719)

Unified Diff: third_party/WebKit/Source/web/RemoteFrameClientImpl.cpp

Issue 2190183002: Forward CSP violation reporting from RenderFrameProxy to RenderFrameImpl. Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Sanitize report endpoints from IPC against actual CSP contents. Created 4 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: third_party/WebKit/Source/web/RemoteFrameClientImpl.cpp
diff --git a/third_party/WebKit/Source/web/RemoteFrameClientImpl.cpp b/third_party/WebKit/Source/web/RemoteFrameClientImpl.cpp
index 3523eaabaad91238feb28bc19f6266bf9e83b948..d5895e5253590dd8b80d06b849355508d429df71 100644
--- a/third_party/WebKit/Source/web/RemoteFrameClientImpl.cpp
+++ b/third_party/WebKit/Source/web/RemoteFrameClientImpl.cpp
@@ -12,13 +12,18 @@
#include "core/layout/LayoutPart.h"
#include "core/layout/api/LayoutItem.h"
#include "platform/exported/WrappedResourceRequest.h"
+#include "platform/weborigin/KURL.h"
#include "platform/weborigin/SecurityOrigin.h"
#include "platform/weborigin/SecurityPolicy.h"
+#include "public/platform/WebString.h"
+#include "public/platform/WebVector.h"
+#include "public/web/WebContentSecurityPolicy.h"
#include "public/web/WebRemoteFrameClient.h"
#include "web/WebInputEventConversion.h"
#include "web/WebLocalFrameImpl.h"
#include "web/WebRemoteFrameImpl.h"
#include "wtf/PtrUtil.h"
+#include "wtf/text/WTFString.h"
#include <memory>
namespace blink {
@@ -202,4 +207,21 @@ void RemoteFrameClientImpl::visibilityChanged(bool visible)
m_webFrame->client()->visibilityChanged(visible);
}
+void RemoteFrameClientImpl::forwardContentSecurityPolicyViolation(const String& directiveText, const String& effectiveDirective, const String& consoleMessage, const KURL& blockedURL, const Vector<String>& reportEndpoints, const String& header, ContentSecurityPolicy::ViolationType violationType, bool followedRedirect)
+{
+ WebVector<WebString> webReportEndpoints(reportEndpoints.size());
+ for (size_t i = 0; i < reportEndpoints.size(); i++)
+ webReportEndpoints[i] = reportEndpoints[i];
+
+ m_webFrame->client()->forwardContentSecurityPolicyViolation(
+ directiveText,
+ effectiveDirective,
+ consoleMessage,
+ blockedURL,
+ webReportEndpoints,
+ header,
+ static_cast<WebContentSecurityPolicyViolationType>(violationType),
+ followedRedirect);
+}
+
} // namespace blink
« no previous file with comments | « third_party/WebKit/Source/web/RemoteFrameClientImpl.h ('k') | third_party/WebKit/Source/web/WebLocalFrameImpl.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698