Implement ContentSecurityPolicy on the browser-side.

third_party/WebKit/Source/core/loader/FrameLoaderClient.h

 /*
  * Copyright (C) 2006, 2007, 2008, 2009, 2010, 2011, 2012 Apple Inc. All rights
  * reserved.
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1.  Redistributions of source code must retain the above copyright
@@ skipping 13 matching lines @@
  * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
  * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 
 #ifndef FrameLoaderClient_h
 #define FrameLoaderClient_h
 
+#include <v8.h>
+#include <memory>
 #include "core/CoreExport.h"
 #include "core/dom/Document.h"
 #include "core/dom/IconURL.h"
 #include "core/frame/FrameClient.h"
 #include "core/frame/FrameTypes.h"
 #include "core/html/LinkResource.h"
 #include "core/loader/FrameLoadRequest.h"
 #include "core/loader/FrameLoaderTypes.h"
 #include "core/loader/NavigationPolicy.h"
 #include "platform/heap/Handle.h"
 #include "platform/loader/fetch/ResourceLoaderOptions.h"
 #include "platform/network/ContentSecurityPolicyParsers.h"
 #include "platform/network/ResourceLoadPriority.h"
 #include "platform/weborigin/Referrer.h"
+#include "public/platform/WebContentSecurityPolicyStruct.h"
 #include "public/platform/WebEffectiveConnectionType.h"
 #include "public/platform/WebFeaturePolicy.h"
 #include "public/platform/WebInsecureRequestPolicy.h"
 #include "public/platform/WebLoadingBehaviorFlag.h"
 #include "wtf/Forward.h"
 #include "wtf/Vector.h"
-#include <memory>
-#include <v8.h>
 
 namespace blink {
 
 class Document;
 class DocumentLoader;
 struct FrameLoadRequest;
 class HTMLFormElement;
 class HTMLFrameElementBase;
 class HTMLFrameOwnerElement;
 class HTMLMediaElement;
@@ skipping 203 matching lines @@
   virtual void didUpdateToUniqueOrigin() {}
 
   virtual void didChangeSandboxFlags(Frame* childFrame, SandboxFlags) {}
 
   virtual void didSetFeaturePolicyHeader(
       const WebParsedFeaturePolicyHeader& parsedHeader) {}
 
   // Called when a new Content Security Policy is added to the frame's document.
   // This can be triggered by handling of HTTP headers, handling of <meta>
   // element, or by inheriting CSP from the parent (in case of about:blank).
-  virtual void didAddContentSecurityPolicy(const String& headerValue,
-                                           ContentSecurityPolicyHeaderType,
-                                           ContentSecurityPolicyHeaderSource) {}
+  virtual void didAddContentSecurityPolicy(
+      const String& headerValue,
+      ContentSecurityPolicyHeaderType,
+      ContentSecurityPolicyHeaderSource,
+      const std::vector<WebContentSecurityPolicyPolicy>&) {}
 
   virtual void didChangeFrameOwnerProperties(HTMLFrameElementBase*) {}
 
   virtual void dispatchWillStartUsingPeerConnectionHandler(
       WebRTCPeerConnectionHandler*) {}
 
   virtual bool allowWebGL(bool enabledPerSettings) {
     return enabledPerSettings;
   }
 
@@ skipping 46 matching lines @@
   virtual KURL overrideFlashEmbedWithHTML(const KURL&) { return KURL(); }
 
   virtual BlameContext* frameBlameContext() { return nullptr; }
 
   virtual void setHasReceivedUserGesture() {}
 };
 
 }  // namespace blink
 
 #endif  // FrameLoaderClient_h