[WIP NOT FOR COMMIT] Feature policy: Add basic algorithm for supporting frame policies, start plumb…

content/common/feature_policy/feature_policy.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/feature_policy/feature_policy.h"
 
 #include "base/macros.h"
 #include "base/memory/ptr_util.h"
 
 namespace content {
@@ skipping 89 matching lines @@
   for (const auto& targetOrigin : origins_) {
     if (targetOrigin.IsSameOriginWith(origin))
       return true;
   }
   return false;
 }
 
 // static
 std::unique_ptr<FeaturePolicy> FeaturePolicy::CreateFromParentPolicy(
     const FeaturePolicy* parent_policy,
+    const FeaturePolicyHeader* frame_policy,
     url::Origin origin) {
-  return CreateFromParentPolicy(parent_policy, origin, getDefaultFeatureList());
+  return CreateFromParentPolicy(parent_policy, frame_policy, origin,
+                                getDefaultFeatureList());
 }
 
 bool FeaturePolicy::IsFeatureEnabledForOrigin(
     blink::WebFeaturePolicyFeature feature,
     url::Origin origin) const {
   DCHECK(feature_list_.count(feature));
   const FeaturePolicy::Feature* feature_definition = feature_list_.at(feature);
   DCHECK(inherited_policies_.count(feature));
   if (!inherited_policies_.at(feature)) {
     return false;
@@ skipping 30 matching lines @@
 }
 
 FeaturePolicy::FeaturePolicy(url::Origin origin,
                              const FeatureList& feature_list)
     : origin_(origin), feature_list_(feature_list) {}
 FeaturePolicy::FeaturePolicy(url::Origin origin)
     : origin_(origin), feature_list_(getDefaultFeatureList()) {}
 FeaturePolicy::~FeaturePolicy() {}
 
 // static
+/*
+ * To Add to this: another FeaturePolicyHeader for irame attributes.
+ * In that case, we change the inherited polies, but only if the parent allows
+ * it for itself (or we check the parent inherited policy; see which is better)
+ */
 std::unique_ptr<FeaturePolicy> FeaturePolicy::CreateFromParentPolicy(
     const FeaturePolicy* parent_policy,
+    const FeaturePolicyHeader* frame_policy,
     url::Origin origin,
     const FeaturePolicy::FeatureList& features) {
   std::unique_ptr<FeaturePolicy> newPolicy =
       base::WrapUnique(new FeaturePolicy(origin, features));
   for (const auto& feature : features) {
     if (!parent_policy ||
         parent_policy->IsFeatureEnabledForOrigin(feature.first, origin)) {
       newPolicy->inherited_policies_[feature.first] = true;
     } else {
       newPolicy->inherited_policies_[feature.first] = false;
     }
+    if (frame_policy) {
+      newPolicy->AddFramePolicy(parent_policy, frame_policy);
+    }
   }
   return newPolicy;
 }
 
+void FeaturePolicy::AddFramePolicy(const FeaturePolicy* parent_policy,
+                                   const FeaturePolicyHeader* frame_policy) {
+  DCHECK(parent_policy);
+  DCHECK(frame_policy);
+  for (const FeaturePolicyParsedDeclaration& parsed_declaration :
+       *frame_policy) {
+    blink::WebFeaturePolicyFeature feature =
+        FeatureForName(parsed_declaration.feature_name, feature_list_);
+    if (feature == blink::WebFeaturePolicyFeature::NotFound)
+      continue;
+    if (WhitelistFromDeclaration(parsed_declaration)->Contains(origin_) &&
+        // TODO: Check to see if this should look at
+        // parent_policy->inherited_policies_ instead.
+        parent_policy->IsFeatureEnabled(feature)) {
+      inherited_policies_[feature] = true;
+    } else {
+      inherited_policies_[feature] = false;
+    }
+  }
+}
+
 // static
 const FeaturePolicy::FeatureList& FeaturePolicy::getDefaultFeatureList() {
   // TODO: See if this should use lazy_instance instead
   CR_DEFINE_STATIC_LOCAL(
       FeatureList, defaultFeatureList,
       ({{blink::WebFeaturePolicyFeature::DocumentCookie, &kDocumentCookie},
         {blink::WebFeaturePolicyFeature::DocumentDomain, &kDocumentDomain},
         {blink::WebFeaturePolicyFeature::DocumentWrite, &kDocumentWrite},
         {blink::WebFeaturePolicyFeature::Fullscreen, &kFullscreenFeature},
         {blink::WebFeaturePolicyFeature::Geolocation, &kGeolocationFeature},
         {blink::WebFeaturePolicyFeature::MidiFeature, &kMidiFeature},
         {blink::WebFeaturePolicyFeature::Notifications, &kNotificationsFeature},
         {blink::WebFeaturePolicyFeature::Payment, &kPaymentFeature},
         {blink::WebFeaturePolicyFeature::Push, &kPushFeature},
         {blink::WebFeaturePolicyFeature::SyncScript, &kSyncScript},
         {blink::WebFeaturePolicyFeature::SyncXHR, &kSyncXHR},
         {blink::WebFeaturePolicyFeature::Usermedia, &kUsermedia},
         {blink::WebFeaturePolicyFeature::Vibrate, &kVibrateFeature},
         {blink::WebFeaturePolicyFeature::WebRTC, &kWebRTC}}));
   return defaultFeatureList;
 }
 
 }  // namespace content