Upgrade Insecure Requests: bugfixes, tests, and support for OOPIF.

content/common/frame_replication_state.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_COMMON_FRAME_REPLICATION_STATE_H_
 #define CONTENT_COMMON_FRAME_REPLICATION_STATE_H_
 
 #include <string>
 #include <vector>
 
@@ skipping 21 matching lines @@
   bool matches_all_origins;
   std::vector<url::Origin> origins;
 };
 
 using ParsedFeaturePolicy = std::vector<FeaturePolicyParsedWhitelist>;
 
 // This structure holds information that needs to be replicated between a
 // RenderFrame and any of its associated RenderFrameProxies.
 struct CONTENT_EXPORT FrameReplicationState {
   FrameReplicationState();
-  FrameReplicationState(blink::WebTreeScopeType scope,
-                        const std::string& name,
-                        const std::string& unique_name,
-                        blink::WebSandboxFlags sandbox_flags,
-                        blink::WebInsecureRequestPolicy insecure_request_policy,
-                        bool has_potentially_trustworthy_unique_origin);
+  FrameReplicationState(
+      blink::WebTreeScopeType scope,
+      const std::string& name,
+      const std::string& unique_name,
+      blink::WebSandboxFlags sandbox_flags,
+      blink::WebInsecureRequestPolicy insecure_request_policy,
+      const std::vector<uint32_t>& insecure_navigations_set,
+      bool has_potentially_trustworthy_unique_origin);
   FrameReplicationState(const FrameReplicationState& other);
   ~FrameReplicationState();
 
   // Current origin of the frame. This field is updated whenever a frame
   // navigation commits.
   //
   // TODO(alexmos): For now, |origin| updates are immediately sent to all frame
   // proxies when in --site-per-process mode. This isn't ideal, since Blink
   // typically needs a proxy's origin only when performing security checks on
   // the ancestors of a local frame.  So, as a future improvement, we could
@@ skipping 55 matching lines @@
   // created. However, making it const makes it a pain to embed into IPC message
   // params: having a const member implicitly deletes the copy assignment
   // operator.
   blink::WebTreeScopeType scope;
 
   // The insecure request policy that a frame's current document is enforcing.
   // Updates are immediately sent to all frame proxies when frames live in
   // different processes.
   blink::WebInsecureRequestPolicy insecure_request_policy;
 
+  // The upgrade insecure navigations set that a frame's current document is
+  // enforcing. Updates are immediately sent to all frame proxies when frames
+  // live in different processes.
+  std::vector<uint32_t> insecure_navigations_set;
+
   // True if a frame's origin is unique and should be considered potentially
   // trustworthy.
   bool has_potentially_trustworthy_unique_origin;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_COMMON_FRAME_REPLICATION_STATE_H_