Upgrade Insecure Requests: bugfixes, tests, and support for OOPIF.

third_party/WebKit/Source/core/dom/SecurityContext.h

 /*
  * Copyright (C) 2011 Google Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 39 matching lines @@
 class SecurityOrigin;
 class ContentSecurityPolicy;
 
 class CORE_EXPORT SecurityContext : public GarbageCollectedMixin {
   WTF_MAKE_NONCOPYABLE(SecurityContext);
 
  public:
   DECLARE_VIRTUAL_TRACE();
 
   using InsecureNavigationsSet = HashSet<unsigned, WTF::AlreadyHashed>;
+  static std::vector<unsigned> serializeInsecureNavigationSet(
+      const InsecureNavigationsSet&);
 
   SecurityOrigin* getSecurityOrigin() const { return m_securityOrigin.get(); }
   ContentSecurityPolicy* contentSecurityPolicy() const {
     return m_contentSecurityPolicy.get();
   }
 
   // Explicitly override the security origin for this security context.
   // Note: It is dangerous to change the security origin of a script context
   //       that already contains content.
   void setSecurityOrigin(PassRefPtr<SecurityOrigin>);
   virtual void didUpdateSecurityOrigin() = 0;
 
   SandboxFlags getSandboxFlags() const { return m_sandboxFlags; }
   bool isSandboxed(SandboxFlags mask) const { return m_sandboxFlags & mask; }
   virtual void enforceSandboxFlags(SandboxFlags mask);
 
   void setAddressSpace(WebAddressSpace space) { m_addressSpace = space; }
   WebAddressSpace addressSpace() const { return m_addressSpace; }
   String addressSpaceForBindings() const;
 
+  void setInsecureNavigationsSet(const std::vector<unsigned>& set) {
+    m_insecureNavigationsToUpgrade.clear();
+    for (unsigned hash : set)
+      m_insecureNavigationsToUpgrade.add(hash);
+  }
   void addInsecureNavigationUpgrade(unsigned hashedHost) {
     m_insecureNavigationsToUpgrade.add(hashedHost);
   }
   InsecureNavigationsSet* insecureNavigationsToUpgrade() {
     return &m_insecureNavigationsToUpgrade;
   }
 
   virtual void setInsecureRequestPolicy(WebInsecureRequestPolicy policy) {
     m_insecureRequestPolicy = policy;
   }
@@ skipping 26 matching lines @@
   SandboxFlags m_sandboxFlags;
 
   WebAddressSpace m_addressSpace;
   WebInsecureRequestPolicy m_insecureRequestPolicy;
   InsecureNavigationsSet m_insecureNavigationsToUpgrade;
 };
 
 }  // namespace blink
 
 #endif  // SecurityContext_h