Implement ContentSecurityPolicy on the browser-side.

third_party/WebKit/Source/core/frame/csp/CSPSource.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CSPSource_h
 #define CSPSource_h
 
 #include "core/CoreExport.h"
 #include "core/frame/csp/ContentSecurityPolicy.h"
 #include "platform/heap/Handle.h"
 #include "platform/network/ResourceRequest.h"
+#include "public/platform/WebContentSecurityPolicyStruct.h"
 #include "wtf/Allocator.h"
 #include "wtf/text/WTFString.h"
 
 namespace blink {
 
 class ContentSecurityPolicy;
 class KURL;
 
 class CORE_EXPORT CSPSource : public GarbageCollectedFinalized<CSPSource> {
  public:
-  enum WildcardDisposition { HasWildcard, NoWildcard };
+  enum WildcardDisposition { NoWildcard, HasWildcard };
 
   CSPSource(ContentSecurityPolicy*,
             const String& scheme,
             const String& host,
             int port,
             const String& path,
             WildcardDisposition hostWildcard,
             WildcardDisposition portWildcard);
   bool isSchemeOnly() const;
   const String& getScheme() { return m_scheme; };
   bool matches(const KURL&,
                ResourceRequest::RedirectStatus =
                    ResourceRequest::RedirectStatus::NoRedirect) const;
 
   // Returns true if this CSPSource subsumes the other, as defined by the
   // algorithm at https://w3c.github.io/webappsec-csp/embedded/#subsume-policy
   bool subsumes(CSPSource*) const;
   // Retrieve the most restrictive information from the two CSPSources if
   // isSimilar is true for the two. Otherwise, return nullptr.
   CSPSource* intersect(CSPSource*) const;
   // Returns true if the first list subsumes the second, as defined by the
   // algorithm at
   // https://w3c.github.io/webappsec-csp/embedded/#subsume-source-list
   static bool firstSubsumesSecond(const HeapVector<Member<CSPSource>>&,
                                   const HeapVector<Member<CSPSource>>&);
 
+  WebContentSecurityPolicySourceExpression expose() const;
+
   DECLARE_TRACE();
 
  private:
   FRIEND_TEST_ALL_PREFIXES(CSPSourceTest, IsSimilar);
   FRIEND_TEST_ALL_PREFIXES(CSPSourceTest, Intersect);
   FRIEND_TEST_ALL_PREFIXES(CSPSourceTest, IntersectSchemesOnly);
   FRIEND_TEST_ALL_PREFIXES(SourceListDirectiveTest, GetIntersectCSPSources);
   FRIEND_TEST_ALL_PREFIXES(SourceListDirectiveTest,
                            GetIntersectCSPSourcesSchemes);
   FRIEND_TEST_ALL_PREFIXES(CSPDirectiveListTest, GetSourceVector);
@@ skipping 14 matching lines @@
   int m_port;
   String m_path;
 
   WildcardDisposition m_hostWildcard;
   WildcardDisposition m_portWildcard;
 };
 
 }  // namespace blink
 
 #endif