Part 2.3: Is policy list subsumed under subsuming policy?

third_party/WebKit/Source/core/frame/csp/SourceListDirective.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SourceListDirective_h
 #define SourceListDirective_h
 
 #include "core/CoreExport.h"
 #include "core/frame/csp/CSPDirective.h"
 #include "core/frame/csp/CSPSource.h"
@@ skipping 33 matching lines @@
   bool allowHash(const CSPHashValue&) const;
   bool allowHashedAttributes() const;
   bool isHashOrNoncePresent() const;
   uint8_t hashAlgorithmsUsed() const;
   // The algorothm is described more extensively here:
   // https://w3c.github.io/webappsec-csp/embedded/#subsume-source-list
   bool subsumes(HeapVector<Member<SourceListDirective>>);
 
  private:
   FRIEND_TEST_ALL_PREFIXES(SourceListDirectiveTest, GetIntersectCSPSources);
+  FRIEND_TEST_ALL_PREFIXES(SourceListDirectiveTest,
+                           GetIntersectCSPSourcesSchemes);
 
   bool parseSource(const UChar* begin,
                    const UChar* end,
                    String& scheme,
                    String& host,
                    int& port,
                    String& path,
                    CSPSource::WildcardDisposition&,
                    CSPSource::WildcardDisposition&);
   bool parseScheme(const UChar* begin, const UChar* end, String& scheme);
@@ skipping 15 matching lines @@
   void addSourceSelf();
   void addSourceStar();
   void addSourceUnsafeInline();
   void addSourceUnsafeEval();
   void addSourceStrictDynamic();
   void addSourceUnsafeHashedAttributes();
   void addSourceNonce(const String& nonce);
   void addSourceHash(const ContentSecurityPolicyHashAlgorithm&,
                      const DigestValue& hash);
 
+  static void addSourceToMap(HashMap<String, CSPSource*>&, CSPSource*);

[sof, 2016/12/01 16:15:52]

HeapHashMap<String, Member<CSPSource>> is what's preferably used here, as the
map's pointer values are GC references.

+
   bool hasSourceMatchInList(const KURL&, ResourceRequest::RedirectStatus) const;
   HeapVector<Member<CSPSource>> getIntersectCSPSources(
       HeapVector<Member<CSPSource>> other);
+  HashMap<String, CSPSource*> getIntersectSchemesOnly(
+      HeapVector<Member<CSPSource>> other);
 
   Member<ContentSecurityPolicy> m_policy;
   HeapVector<Member<CSPSource>> m_list;
   String m_directiveName;
   bool m_allowSelf;
   bool m_allowStar;
   bool m_allowInline;
   bool m_allowEval;
   bool m_allowDynamic;
   bool m_allowHashedAttributes;
   HashSet<String> m_nonces;
   HashSet<CSPHashValue> m_hashes;
   uint8_t m_hashAlgorithmsUsed;
 };
 
 }  // namespace blink
 
 #endif