Forward CSP violation reporting from RenderFrameProxy to RenderFrameImpl.

third_party/WebKit/Source/core/frame/csp/RemoteContentSecurityPolicy.h

Index: third_party/WebKit/Source/core/frame/csp/RemoteContentSecurityPolicy.h
diff --git a/third_party/WebKit/Source/core/frame/csp/RemoteContentSecurityPolicy.h b/third_party/WebKit/Source/core/frame/csp/RemoteContentSecurityPolicy.h
new file mode 100644
index 0000000000000000000000000000000000000000..d2604eddb7b25bc1dc959dda0222391933c91d0b
--- /dev/null
+++ b/third_party/WebKit/Source/core/frame/csp/RemoteContentSecurityPolicy.h
@@ -0,0 +1,31 @@
+// Copyright 2016 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef RemoteContentSecurityPolicy_h
+#define RemoteContentSecurityPolicy_h
+
+#include "core/frame/csp/ContentSecurityPolicy.h"
+#include "platform/heap/Handle.h"
+
+namespace blink {
+
+class RemoteFrameClient;
+
+class RemoteContentSecurityPolicy : public ContentSecurityPolicy {

[alexmos, 2016/08/09 18:01:20]

Perhaps add a class-level comment explaining why this class is needed, and that
the plan is for it to eventually go away once the violations are caught in the
browser process.  (Is that right?)

[Łukasz Anforowicz, 2016/08/09 22:23:20]

Done.
Yes - this class should go away once violations are caught in the browser
process.  I've added the removal as an explicit TODO tied to bug
https://crbug.com/376522 (which I assume is used as the tracking bug for moving
some CSP checks to the browser process).

[alexmos, 2016/08/10 20:34:33]

The new comment is awesome.  Thanks for adding!

+public:
+    static RemoteContentSecurityPolicy* create(RemoteFrameClient*);
+    ~RemoteContentSecurityPolicy() override;
+    DECLARE_VIRTUAL_TRACE();
+
+    void reportViolation(const String& directiveText, const String& effectiveDirective, const String& consoleMessage, const KURL& blockedURL, const Vector<String>& reportEndpoints, const String& header, ViolationType, LocalFrame*, RedirectStatus, int contextLine) override;
+
+private:
+    RemoteContentSecurityPolicy(RemoteFrameClient*);

[alexmos, 2016/08/09 18:01:20]

nit: explicit

[Łukasz Anforowicz, 2016/08/09 22:23:20]

Done.

+
+    Member<RemoteFrameClient> m_remoteFrameClient;
+};
+
+} // namespace blink
+
+#endif