Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(148)

Side by Side Diff: third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h

Issue 2519103005: Part 3.2: Is policy list subsumed under subsuming policy? (Closed)
Patch Set: Removing debugging traces Created 4 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 /* 1 /*
2 * Copyright (C) 2011 Google, Inc. All rights reserved. 2 * Copyright (C) 2011 Google, Inc. All rights reserved.
3 * 3 *
4 * Redistribution and use in source and binary forms, with or without 4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that the following conditions 5 * modification, are permitted provided that the following conditions
6 * are met: 6 * are met:
7 * 1. Redistributions of source code must retain the above copyright 7 * 1. Redistributions of source code must retain the above copyright
8 * notice, this list of conditions and the following disclaimer. 8 * notice, this list of conditions and the following disclaimer.
9 * 2. Redistributions in binary form must reproduce the above copyright 9 * 2. Redistributions in binary form must reproduce the above copyright
10 * notice, this list of conditions and the following disclaimer in the 10 * notice, this list of conditions and the following disclaimer in the
(...skipping 323 matching lines...) Expand 10 before | Expand all | Expand 10 after
334 } 334 }
335 335
336 bool urlMatchesSelf(const KURL&) const; 336 bool urlMatchesSelf(const KURL&) const;
337 bool protocolMatchesSelf(const KURL&) const; 337 bool protocolMatchesSelf(const KURL&) const;
338 bool selfMatchesInnerURL() const; 338 bool selfMatchesInnerURL() const;
339 339
340 bool experimentalFeaturesEnabled() const; 340 bool experimentalFeaturesEnabled() const;
341 341
342 bool shouldSendCSPHeader(Resource::Type) const; 342 bool shouldSendCSPHeader(Resource::Type) const;
343 343
344 CSPSource* getSelfSource() const { return m_selfSource; }
345
344 static bool shouldBypassMainWorld(const ExecutionContext*); 346 static bool shouldBypassMainWorld(const ExecutionContext*);
345 347
346 static bool isNonceableElement(const Element*); 348 static bool isNonceableElement(const Element*);
347 349
348 // This method checks whether the request should be allowed for an 350 // This method checks whether the request should be allowed for an
349 // experimental EmbeddingCSP feature 351 // experimental EmbeddingCSP feature
350 // Please, see https://w3c.github.io/webappsec-csp/embedded/#origin-allowed. 352 // Please, see https://w3c.github.io/webappsec-csp/embedded/#origin-allowed.
351 static bool shouldEnforceEmbeddersPolicy(const ResourceResponse&, 353 static bool shouldEnforceEmbeddersPolicy(const ResourceResponse&,
352 SecurityOrigin*); 354 SecurityOrigin*);
353 355
(...skipping 46 matching lines...) Expand 10 before | Expand all | Expand 10 after
400 String m_disableEvalErrorMessage; 402 String m_disableEvalErrorMessage;
401 WebInsecureRequestPolicy m_insecureRequestPolicy; 403 WebInsecureRequestPolicy m_insecureRequestPolicy;
402 404
403 Member<CSPSource> m_selfSource; 405 Member<CSPSource> m_selfSource;
404 String m_selfProtocol; 406 String m_selfProtocol;
405 }; 407 };
406 408
407 } // namespace blink 409 } // namespace blink
408 410
409 #endif 411 #endif
OLDNEW
« no previous file with comments | « third_party/WebKit/Source/core/frame/csp/CSPSource.h ('k') | third_party/WebKit/Source/core/frame/csp/SourceListDirective.cpp » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698