Propagating csp attribute changes on frameOwnerPropertiesChanged()

content/common/frame_owner_properties.h

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_COMMON_FRAME_OWNER_PROPERTIES_H_
 #define CONTENT_COMMON_FRAME_OWNER_PROPERTIES_H_
 
 #include <vector>
 
 #include "content/common/content_export.h"
@@ skipping 16 matching lines @@
 
   bool operator==(const FrameOwnerProperties& other) const;
   bool operator!=(const FrameOwnerProperties& other) const {
     return !(*this == other);
   }
 
   blink::WebFrameOwnerProperties::ScrollingMode scrolling_mode;
   int margin_width;
   int margin_height;
   bool allow_fullscreen;
+  // An experimental attribute to be used by a parent frame to enforce CSP on a
+  // subframe. This is different from replicated CSP headers kept in
+  // FrameReplicationState that keep track of CSP headers currently in effect
+  // for a frame. See https://crbug.com/647588
+  std::string csp;

[Mike West, 2016/10/04 14:55:55]

Nit: To clarify further, let's rename this to something like `required_csp`, and
add a link to https://www.w3.org/TR/csp-embedded-enforcement/#required-csp, both
here and in the subsequent patch on `FrameLoader`.

[alexmos, 2016/10/04 23:50:21]

+1, I think this is a good idea.

   std::vector<blink::WebPermissionType> delegated_permissions;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_COMMON_FRAME_OWNER_PROPERTIES_H_