Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(332)

Side by Side Diff: third_party/WebKit/public/web/WebSecurityPolicy.h

Issue 2475673003: Clean registering mixed content restricting schemes (Closed)
Patch Set: Clean registering mixed content restricting schemes Created 4 years, 1 month ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « third_party/WebKit/Source/web/WebSecurityPolicy.cpp ('k') | no next file » | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 /* 1 /*
2 * Copyright (C) 2009 Google Inc. All rights reserved. 2 * Copyright (C) 2009 Google Inc. All rights reserved.
3 * 3 *
4 * Redistribution and use in source and binary forms, with or without 4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that the following conditions are 5 * modification, are permitted provided that the following conditions are
6 * met: 6 * met:
7 * 7 *
8 * * Redistributions of source code must retain the above copyright 8 * * Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer. 9 * notice, this list of conditions and the following disclaimer.
10 * * Redistributions in binary form must reproduce the above 10 * * Redistributions in binary form must reproduce the above
(...skipping 40 matching lines...) Expand 10 before | Expand all | Expand 10 after
51 // that pages loaded with this URL scheme cannot access pages loaded with 51 // that pages loaded with this URL scheme cannot access pages loaded with
52 // any other URL scheme. 52 // any other URL scheme.
53 BLINK_EXPORT static void registerURLSchemeAsNoAccess(const WebString&); 53 BLINK_EXPORT static void registerURLSchemeAsNoAccess(const WebString&);
54 54
55 // Registers a URL scheme to be treated as display-isolated. This means 55 // Registers a URL scheme to be treated as display-isolated. This means
56 // that pages cannot display these URLs unless they are from the same 56 // that pages cannot display these URLs unless they are from the same
57 // scheme. For example, pages in other origin cannot create iframes or 57 // scheme. For example, pages in other origin cannot create iframes or
58 // hyperlinks to URLs with the scheme. 58 // hyperlinks to URLs with the scheme.
59 BLINK_EXPORT static void registerURLSchemeAsDisplayIsolated(const WebString&); 59 BLINK_EXPORT static void registerURLSchemeAsDisplayIsolated(const WebString&);
60 60
61 // Registers a URL scheme to generate mixed content warnings when resources
62 // whose schemes are not registered as "secure" are embedded.
63 BLINK_EXPORT static void registerURLSchemeAsRestrictingMixedContent(
64 const WebString&);
65
66 // Subresources transported by secure schemes do not trigger mixed content 61 // Subresources transported by secure schemes do not trigger mixed content
67 // warnings. For example, https and data are secure schemes because they 62 // warnings. For example, https and data are secure schemes because they
68 // cannot be corrupted by active network attackers. 63 // cannot be corrupted by active network attackers.
69 BLINK_EXPORT static void registerURLSchemeAsSecure(const WebString&); 64 BLINK_EXPORT static void registerURLSchemeAsSecure(const WebString&);
70 65
71 // Returns true if the scheme has been registered as a secure scheme.
72 BLINK_EXPORT static bool shouldTreatURLSchemeAsSecure(const WebString&);
73
74 // Registers a non-HTTP URL scheme which can be sent CORS requests. 66 // Registers a non-HTTP URL scheme which can be sent CORS requests.
75 BLINK_EXPORT static void registerURLSchemeAsCORSEnabled(const WebString&); 67 BLINK_EXPORT static void registerURLSchemeAsCORSEnabled(const WebString&);
76 68
77 // Registers a URL scheme that can register a ServiceWorker. 69 // Registers a URL scheme that can register a ServiceWorker.
78 BLINK_EXPORT static void registerURLSchemeAsAllowingServiceWorkers( 70 BLINK_EXPORT static void registerURLSchemeAsAllowingServiceWorkers(
79 const WebString&); 71 const WebString&);
80 72
81 // Registers an HTTP-like URL scheme that supports the Fetch API. 73 // Registers an HTTP-like URL scheme that supports the Fetch API.
82 BLINK_EXPORT static void registerURLSchemeAsSupportingFetchAPI( 74 BLINK_EXPORT static void registerURLSchemeAsSupportingFetchAPI(
83 const WebString&); 75 const WebString&);
(...skipping 66 matching lines...) Expand 10 before | Expand all | Expand 10 after
150 BLINK_EXPORT static void registerURLSchemeAsAllowedForReferrer( 142 BLINK_EXPORT static void registerURLSchemeAsAllowedForReferrer(
151 const WebString&); 143 const WebString&);
152 144
153 private: 145 private:
154 WebSecurityPolicy(); 146 WebSecurityPolicy();
155 }; 147 };
156 148
157 } // namespace blink 149 } // namespace blink
158 150
159 #endif 151 #endif
OLDNEW
« no previous file with comments | « third_party/WebKit/Source/web/WebSecurityPolicy.cpp ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698