Part 3.6: Is policy list subsumed under subsuming policy?

third_party/WebKit/Source/core/frame/csp/SourceListDirective.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SourceListDirective_h
 #define SourceListDirective_h
 
 #include "core/CoreExport.h"
 #include "core/frame/csp/CSPDirective.h"
 #include "core/frame/csp/CSPSource.h"
@@ skipping 38 matching lines @@
   bool allowAllInline() const;
 
   // The algorothm is described more extensively here:
   // https://w3c.github.io/webappsec-csp/embedded/#subsume-source-list
   bool subsumes(const HeapVector<Member<SourceListDirective>>&) const;
 
  private:
   FRIEND_TEST_ALL_PREFIXES(SourceListDirectiveTest, GetIntersectCSPSources);
   FRIEND_TEST_ALL_PREFIXES(SourceListDirectiveTest,
                            GetIntersectCSPSourcesSchemes);
+  FRIEND_TEST_ALL_PREFIXES(SourceListDirectiveTest, GetIntersectNonces);
+  FRIEND_TEST_ALL_PREFIXES(SourceListDirectiveTest, GetIntersectHashes);
   FRIEND_TEST_ALL_PREFIXES(CSPDirectiveListTest, GetSourceVector);
   FRIEND_TEST_ALL_PREFIXES(CSPDirectiveListTest, OperativeDirectiveGivenType);
 
   bool parseSource(const UChar* begin,
                    const UChar* end,
                    String& scheme,
                    String& host,
                    int& port,
                    String& path,
                    CSPSource::WildcardDisposition&,
@@ skipping 21 matching lines @@
   void addSourceStrictDynamic();
   void addSourceUnsafeHashedAttributes();
   void addSourceNonce(const String& nonce);
   void addSourceHash(const ContentSecurityPolicyHashAlgorithm&,
                      const DigestValue& hash);
 
   static void addSourceToMap(HeapHashMap<String, Member<CSPSource>>&,
                              CSPSource*);
 
   bool hasSourceMatchInList(const KURL&, ResourceRequest::RedirectStatus) const;
+  HashSet<String> getIntersectNonces(const HashSet<String>& other) const;
+  HashSet<CSPHashValue> getIntersectHashes(
+      const HashSet<CSPHashValue>& other) const;
   HeapVector<Member<CSPSource>> getIntersectCSPSources(
       const HeapVector<Member<CSPSource>>& other) const;
   HeapHashMap<String, Member<CSPSource>> getIntersectSchemesOnly(
       const HeapVector<Member<CSPSource>>& other) const;
+  bool subsumesNoncesAndHashes(const HashSet<String>& nonces,
+                               const HashSet<CSPHashValue> hashes) const;
 
   Member<ContentSecurityPolicy> m_policy;
   HeapVector<Member<CSPSource>> m_list;
   String m_directiveName;
   bool m_allowSelf;
   bool m_allowStar;
   bool m_allowInline;
   bool m_allowEval;
   bool m_allowDynamic;
   bool m_allowHashedAttributes;
   HashSet<String> m_nonces;
   HashSet<CSPHashValue> m_hashes;
   uint8_t m_hashAlgorithmsUsed;
 };
 
 }  // namespace blink
 
 #endif