Implement ContentSecurityPolicy on the browser-side.

content/renderer/content_security_policy_util.cc

+// Copyright 2017 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "content/renderer/content_security_policy_util.h"
+#include "third_party/WebKit/public/platform/WebContentSecurityPolicyStruct.h"
+
+namespace content {
+
+CSPSource BuildCSPSource(
+    const blink::WebContentSecurityPolicySourceExpression& source) {
+  return CSPSource(
+      source.scheme.utf8(),  // scheme
+      source.host.utf8(),    // host
+      source.isHostWildcard == blink::WebWildcardDispositionHasWildcard,
+      source.port == 0 ? url::PORT_UNSPECIFIED : source.port,  // port
+      source.isPortWildcard == blink::WebWildcardDispositionHasWildcard,
+      source.path.utf8());  // path
+}
+
+CSPSourceList BuildCSPSourceList(
+    const blink::WebContentSecurityPolicySourceList& source_list) {
+  std::vector<CSPSource> sources;
+  for (const auto& source : source_list.sources) {
+    sources.push_back(BuildCSPSource(source));
+  }
+
+  return CSPSourceList(source_list.allowSelf,  // allow_self
+                       source_list.allowStar,  // allow_star
+                       sources);               // source_list
+}
+
+CSPDirective BuildCSPDirective(
+    const blink::WebContentSecurityPolicyDirective& directive) {
+  return CSPDirective(
+      CSPDirective::StringToName(directive.name.utf8()),  // name
+      BuildCSPSourceList(directive.sourceList));          // source_list
+}
+
+ContentSecurityPolicy BuildContentSecurityPolicy(
+    const blink::WebContentSecurityPolicyPolicy& policy) {
+  std::vector<CSPDirective> directives;
+  for (const auto& directive : policy.directives)
+    directives.push_back(BuildCSPDirective(directive));
+
+  std::vector<std::string> report_endpoints;
+  for (const blink::WebString& endpoint : policy.reportEndpoints)
+    report_endpoints.push_back(endpoint.utf8());
+
+  return ContentSecurityPolicy(policy.disposition,     // disposition
+                               policy.source,          // source
+                               directives,             // directives
+                               report_endpoints,       // report_endpoints
+                               policy.header.utf8());  // header
+}
+
+}  // namespace content