Adding CSP attribute on HTMLIFrameElement

third_party/WebKit/Source/core/html/HTMLIFrameElement.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2000 Simon Hausmann (hausmann@kde.org)
  *           (C) 2001 Dirk Mueller (mueller@kde.org)
  * Copyright (C) 2004, 2006, 2008, 2009 Apple Inc. All rights reserved.
  * Copyright (C) 2009 Ericsson AB. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
@@ skipping 12 matching lines @@
  */
 
 #include "core/html/HTMLIFrameElement.h"
 
 #include "core/CSSPropertyNames.h"
 #include "core/HTMLNames.h"
 #include "core/frame/UseCounter.h"
 #include "core/html/HTMLDocument.h"
 #include "core/inspector/ConsoleMessage.h"
 #include "core/layout/LayoutIFrame.h"
+#include "platform/RuntimeEnabledFeatures.h"
 
 namespace blink {
 
 using namespace HTMLNames;
 
 inline HTMLIFrameElement::HTMLIFrameElement(Document& document)
     : HTMLFrameElementBase(iframeTag, document)
     , m_didLoadNonEmptyDocument(false)
     , m_sandbox(HTMLIFrameElementSandbox::create(this))
     , m_referrerPolicy(ReferrerPolicyDefault)
@@ skipping 69 matching lines @@
         if (!value.isNull())
             SecurityPolicy::referrerPolicyFromStringWithLegacyKeywords(value, &m_referrerPolicy);
     } else if (name == allowfullscreenAttr) {
         bool oldAllowFullscreen = m_allowFullscreen;
         m_allowFullscreen = !value.isNull();
         if (m_allowFullscreen != oldAllowFullscreen)
             frameOwnerPropertiesChanged();
     } else if (name == permissionsAttr) {
         if (initializePermissionsAttribute())
             m_permissions->setValue(value);
+    } else if (RuntimeEnabledFeatures::embedderCSPEnforcementEnabled() && name == cspAttr) {
+        m_csp = value;

[Mike West, 2016/09/26 14:55:02]

I think you need to notify the client that this value was updated. You don't
_need_ to do that in this patch, as you're not actually replicating
`FrameOwnerProperties` up to the host yet, but you might as well call into
`frameOwnerPropertiesChanged()` now so that you don't have to look for it again
later. :)

     } else {
         if (name == srcAttr)
             logUpdateAttributeIfIsolatedWorldAndInDocument("iframe", srcAttr, oldValue, value);
         HTMLFrameElementBase::parseAttribute(name, oldValue, value);
     }
 }
 
 bool HTMLIFrameElement::layoutObjectIsNeeded(const ComputedStyle& style)
 {
     return isURLAllowed() && HTMLElement::layoutObjectIsNeeded(style);
@@ skipping 56 matching lines @@
 {
     if (!RuntimeEnabledFeatures::permissionDelegationEnabled())
         return false;
 
     if (!m_permissions)
         m_permissions = HTMLIFrameElementPermissions::create(this);
     return true;
 }
 
 } // namespace blink