Replicate feature policy headers to remote frames

third_party/WebKit/Source/core/dom/SecurityContext.cpp

 /*
  * Copyright (C) 2011 Google Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 81 matching lines @@
 
   DCHECK(!suborigin.name().isEmpty());
   DCHECK(RuntimeEnabledFeatures::suboriginsEnabled());
   DCHECK(m_securityOrigin.get());
   DCHECK(!m_securityOrigin->hasSuborigin() ||
          m_securityOrigin->suborigin()->name() == suborigin.name());
   m_securityOrigin->addSuborigin(suborigin);
   didUpdateSecurityOrigin();
 }
 
+void SecurityContext::setFeaturePolicyFromHeader(
+    const String& headerValue,
+    SecurityContext* parentSecurityContext,
+    Vector<String>* messages) {

[raymes, 2016/11/21 02:17:34]

I think we should DCHECK(!m_featurePolicy) here?

[iclelland, 2016/11/21 05:05:33]

To ensure that it hasn't been set previously -- certainly can't hurt. Thanks,
done.

+  m_featurePolicy = FeaturePolicy::createFromParentPolicy(
+      (parentSecurityContext ? parentSecurityContext->getFeaturePolicy()
+                             : nullptr),
+      m_securityOrigin);
+  m_featurePolicy->setHeaderPolicy(headerValue, messages);
+}
+
 }  // namespace blink