[FeaturePolicy] Initial implementation of Feature Policy

third_party/WebKit/Source/core/loader/FrameLoader.cpp

 /*
  * Copyright (C) 2006, 2007, 2008, 2009, 2010, 2011 Apple Inc. All rights reserved.
  * Copyright (C) 2008 Nokia Corporation and/or its subsidiary(-ies)
  * Copyright (C) 2008, 2009 Torch Mobile Inc. All rights reserved. (http://www.torchmobile.com/)
  * Copyright (C) 2008 Alp Toker <alp@atoker.com>
  * Copyright (C) Research In Motion Limited 2009. All rights reserved.
  * Copyright (C) 2011 Kris Jordan <krisjordan@gmail.com>
  * Copyright (C) 2011 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
@@ skipping 70 matching lines @@
 #include "core/page/Page.h"
 #include "core/page/WindowFeatures.h"
 #include "core/page/scrolling/ScrollingCoordinator.h"
 #include "core/svg/graphics/SVGImage.h"
 #include "core/xml/parser/XMLDocumentParser.h"
 #include "platform/PluginScriptForbiddenScope.h"
 #include "platform/RuntimeEnabledFeatures.h"
 #include "platform/ScriptForbiddenScope.h"
 #include "platform/TraceEvent.h"
 #include "platform/UserGestureIndicator.h"
+#include "platform/feature_policy/FeaturePolicy.h"
 #include "platform/network/HTTPParsers.h"
 #include "platform/network/ResourceRequest.h"
 #include "platform/scroll/ScrollAnimatorBase.h"
 #include "platform/weborigin/SecurityOrigin.h"
 #include "platform/weborigin/SecurityPolicy.h"
 #include "platform/weborigin/Suborigin.h"
 #include "public/platform/WebCachePolicy.h"
 #include "public/platform/WebURLRequest.h"
 #include "wtf/AutoReset.h"
 #include "wtf/text/CString.h"
@@ skipping 415 matching lines @@
         String headerContentLanguage = m_documentLoader->response().httpHeaderField(HTTPNames::Content_Language);
         if (!headerContentLanguage.isEmpty()) {
             size_t commaIndex = headerContentLanguage.find(',');
             headerContentLanguage.truncate(commaIndex); // kNotFound == -1 == don't truncate
             headerContentLanguage = headerContentLanguage.stripWhiteSpace(isHTMLSpace<UChar>);
             if (!headerContentLanguage.isEmpty())
                 m_frame->document()->setContentLanguage(AtomicString(headerContentLanguage));
         }
 
         OriginTrialContext::addTokensFromHeader(m_frame->document(), m_documentLoader->response().httpHeaderField(HTTPNames::Origin_Trial));
+        if (RuntimeEnabledFeatures::featurePolicyEnabled()) {
+            FeaturePolicy* featurePolicy;
+            if (!isLoadingMainFrame()) {

[lunalu1, 2016/09/20 14:55:49]

Personal preference:
FeaturePolicy::createFromParentPolicy(!isLoadingMainFrame() ?
m_frame->client()->parent()->getFeaturePolicy() : nullptr,
m_frame->securityContext()->getSecurityOrigin());

[iclelland, 2016/10/14 19:37:49]

Done (except that I omitted the "!" and swapped the two sides.)

+                featurePolicy = FeaturePolicy::createFromParentPolicy(m_frame->client()->parent()->getFeaturePolicy(), m_frame->securityContext()->getSecurityOrigin());
+            } else {
+                featurePolicy = FeaturePolicy::createFromParentPolicy(nullptr, m_frame->securityContext()->getSecurityOrigin());
+            }
+            featurePolicy->addPolicyFromString(m_documentLoader->response().httpHeaderField(HTTPNames::Feature_Policy));
+            m_frame->setFeaturePolicy(featurePolicy);
+        }
     }
 
     if (m_documentLoader && RuntimeEnabledFeatures::referrerPolicyHeaderEnabled()) {
         String referrerPolicyHeader = m_documentLoader->response().httpHeaderField(HTTPNames::Referrer_Policy);
         if (!referrerPolicyHeader.isNull()) {
             m_frame->document()->parseAndSetReferrerPolicy(referrerPolicyHeader);
         }
     }
 
     client()->didCreateNewDocument();
@@ skipping 1079 matching lines @@
     tracedValue->setString("documentLoaderURL", m_documentLoader ? m_documentLoader->url() : String());
     return tracedValue;
 }
 
 inline void FrameLoader::takeObjectSnapshot() const
 {
     TRACE_EVENT_OBJECT_SNAPSHOT_WITH_ID("loading", "FrameLoader", this, toTracedValue());
 }
 
 } // namespace blink