PlzNavigate: Enforce 'frame-src' CSP on the browser.

content/browser/frame_host/frame_tree_node.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/frame_host/frame_tree_node.h"
 
 #include <queue>
 #include <utility>
 
 #include "base/lazy_instance.h"
 #include "base/macros.h"
 #include "base/memory/ptr_util.h"
 #include "base/metrics/histogram_macros.h"
 #include "base/profiler/scoped_tracker.h"
 #include "base/stl_util.h"
+#include "content/browser/frame_host/csp_context_impl.h"
 #include "content/browser/frame_host/frame_tree.h"
 #include "content/browser/frame_host/navigation_request.h"
 #include "content/browser/frame_host/navigator.h"
 #include "content/browser/frame_host/render_frame_host_impl.h"
 #include "content/browser/renderer_host/render_view_host_impl.h"
 #include "content/common/frame_messages.h"
 #include "content/common/site_isolation_policy.h"
 #include "content/public/browser/browser_thread.h"
 #include "content/public/common/browser_side_navigation_policy.h"
 #include "third_party/WebKit/public/web/WebSandboxFlags.h"
@@ skipping 84 matching lines @@
           scope,
           name,
           unique_name,
           blink::WebSandboxFlags::None,
           false /* should enforce strict mixed content checking */,
           false /* is a potentially trustworthy unique origin */,
           false /* has received a user gesture */),
       pending_sandbox_flags_(blink::WebSandboxFlags::None),
       frame_owner_properties_(frame_owner_properties),
       loading_progress_(kLoadingProgressNotStarted),
-      blame_context_(frame_tree_node_id_, parent) {
+      blame_context_(frame_tree_node_id_, parent),
+      csp_context_(new CSPContextImpl(this)) {
   std::pair<FrameTreeNodeIdMap::iterator, bool> result =
       g_frame_tree_node_id_map.Get().insert(
           std::make_pair(frame_tree_node_id_, this));
   CHECK(result.second);
 
   RecordUniqueNameLength(unique_name.size());
 
   // Note: this should always be done last in the constructor.
   blame_context_.Initialize();
 }
@@ skipping 119 matching lines @@
     bool is_potentially_trustworthy_unique_origin) {
   if (!origin.IsSameOriginWith(replication_state_.origin) ||
       replication_state_.has_potentially_trustworthy_unique_origin !=
           is_potentially_trustworthy_unique_origin) {
     render_manager_.OnDidUpdateOrigin(origin,
                                       is_potentially_trustworthy_unique_origin);
   }
   replication_state_.origin = origin;
   replication_state_.has_potentially_trustworthy_unique_origin =
       is_potentially_trustworthy_unique_origin;
+  csp_context_->SetSelf(replication_state_.origin);
 }
 
 void FrameTreeNode::SetFrameName(const std::string& name,
                                  const std::string& unique_name) {
   if (name == replication_state_.name) {
     // |unique_name| shouldn't change unless |name| changes.
     DCHECK_EQ(unique_name, replication_state_.unique_name);
     return;
   }
 
@@ skipping 286 matching lines @@
       }
       return parent_->child_at(i + relative_offset);
     }
   }
 
   NOTREACHED() << "FrameTreeNode not found in its parent's children.";
   return nullptr;
 }
 
 }  // namespace content