CSP: Add 'script-sample' to violation reports.

third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CSPDirectiveList_h
 #define CSPDirectiveList_h
 
 #include "core/frame/csp/ContentSecurityPolicy.h"
 #include "core/frame/csp/MediaListDirective.h"
 #include "core/frame/csp/SourceListDirective.h"
@@ skipping 27 matching lines @@
 
   void parse(const UChar* begin, const UChar* end);
 
   const String& header() const { return m_header; }
   ContentSecurityPolicyHeaderType headerType() const { return m_headerType; }
   ContentSecurityPolicyHeaderSource headerSource() const {
     return m_headerSource;
   }
 
   bool allowJavaScriptURLs(Element*,
+                           const String& source,
                            const String& contextURL,
                            const WTF::OrdinalNumber& contextLine,
                            ContentSecurityPolicy::ReportingStatus) const;
   bool allowInlineEventHandlers(Element*,
+                                const String& source,
                                 const String& contextURL,
                                 const WTF::OrdinalNumber& contextLine,
                                 ContentSecurityPolicy::ReportingStatus) const;
   bool allowInlineScript(Element*,
                          const String& contextURL,
                          const String& nonce,
                          const WTF::OrdinalNumber& contextLine,
                          ContentSecurityPolicy::ReportingStatus,
                          const String& scriptContent) const;
   bool allowInlineStyle(Element*,
@@ skipping 157 matching lines @@
                                 const ContentSecurityPolicy::DirectiveType&,
                                 const String& consoleMessage,
                                 const KURL& blockedURL,
                                 LocalFrame*) const;
   void reportViolationWithLocation(const String& directiveText,
                                    const ContentSecurityPolicy::DirectiveType&,
                                    const String& consoleMessage,
                                    const KURL& blockedURL,
                                    const String& contextURL,
                                    const WTF::OrdinalNumber& contextLine,
-                                   Element*) const;
+                                   Element*,
+                                   const String& source) const;
   void reportViolationWithState(
       const String& directiveText,
       const ContentSecurityPolicy::DirectiveType&,
       const String& message,
       const KURL& blockedURL,
       ScriptState*,
       const ContentSecurityPolicy::ExceptionStatus) const;
 
   bool checkEval(SourceListDirective*) const;
   bool checkDynamic(SourceListDirective*) const;
@@ skipping 15 matching lines @@
 
   bool checkEvalAndReportViolation(
       SourceListDirective*,
       const String& consoleMessage,
       ScriptState*,
       ContentSecurityPolicy::ExceptionStatus =
           ContentSecurityPolicy::WillNotThrowException) const;
   bool checkInlineAndReportViolation(SourceListDirective*,
                                      const String& consoleMessage,
                                      Element*,
+                                     const String& source,
                                      const String& contextURL,
                                      const WTF::OrdinalNumber& contextLine,
                                      bool isScript,
                                      const String& hashValue) const;
 
   bool checkSourceAndReportViolation(
       SourceListDirective*,
       const KURL&,
       const ContentSecurityPolicy::DirectiveType&,
       ResourceRequest::RedirectStatus) const;
@@ skipping 55 matching lines @@
   uint8_t m_requireSRIFor;
 
   Vector<String> m_reportEndpoints;
 
   String m_evalDisabledErrorMessage;
 };
 
 }  // namespace blink
 
 #endif