Implement ContentSecurityPolicy on the browser-side.

third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/frame/csp/CSPDirectiveList.h"
 
 #include "bindings/core/v8/SourceLocation.h"
 #include "core/dom/Document.h"
 #include "core/dom/SecurityContext.h"
 #include "core/dom/SpaceSplitString.h"
@@ skipping 1270 matching lines @@
 
   HeapVector<Member<MediaListDirective>> pluginTypesOther;
   for (const auto& policy : other) {
     if (policy->hasPluginTypes())
       pluginTypesOther.push_back(policy->m_pluginTypes);
   }
 
   return m_pluginTypes->subsumes(pluginTypesOther);
 }
 
+WebContentSecurityPolicyPolicy CSPDirectiveList::exposeForNavigationalChecks()
+    const {
+  WebContentSecurityPolicyPolicy policy;
+  policy.disposition = static_cast<WebContentSecurityPolicyType>(m_headerType);
+  policy.source = static_cast<WebContentSecurityPolicySource>(m_headerSource);
+  std::vector<WebContentSecurityPolicyDirective> directives;
+  for (const auto& directive :
+       {m_childSrc, m_defaultSrc, m_formAction, m_frameSrc}) {
+    if (directive) {
+      directives.push_back(WebContentSecurityPolicyDirective{
+          directive->directiveName(),
+          directive->exposeForNavigationalChecks()});
+    }
+  }
+  policy.directives = directives;
+  policy.reportEndpoints = reportEndpoints();
+  policy.header = header();
+
+  return policy;
+}
+
 DEFINE_TRACE(CSPDirectiveList) {
   visitor->trace(m_policy);
   visitor->trace(m_pluginTypes);
   visitor->trace(m_baseURI);
   visitor->trace(m_childSrc);
   visitor->trace(m_connectSrc);
   visitor->trace(m_defaultSrc);
   visitor->trace(m_fontSrc);
   visitor->trace(m_formAction);
   visitor->trace(m_frameAncestors);
   visitor->trace(m_frameSrc);
   visitor->trace(m_imgSrc);
   visitor->trace(m_mediaSrc);
   visitor->trace(m_manifestSrc);
   visitor->trace(m_objectSrc);
   visitor->trace(m_scriptSrc);
   visitor->trace(m_styleSrc);
   visitor->trace(m_workerSrc);
 }
 
 }  // namespace blink