PlzNavigate: Enforce 'frame-src' CSP on the browser.

content/public/browser/navigation_handle.h

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_BROWSER_NAVIGATION_HANDLE_H_
 #define CONTENT_PUBLIC_BROWSER_NAVIGATION_HANDLE_H_
 
 #include <memory>
 #include <string>
 
@@ skipping 260 matching lines @@
       RenderFrameHost* render_frame_host,
       const std::string& raw_response_headers) = 0;
 
   // Simulates the navigation being committed.
   virtual void CallDidCommitNavigationForTesting(const GURL& url) = 0;
 
   // The NavigationData that the embedder returned from
   // ResourceDispatcherHostDelegate::GetNavigationData during commit. This will
   // be a clone of the NavigationData.
   virtual NavigationData* GetNavigationData() = 0;
+
+  // Whether or not the navigation has been issued by a content script or an
+  // isolated world, for instance from a chrome-extension. When true, the
+  // navigation should not be blocked by the parent frame's CSP.
+  virtual bool should_bypass_main_world_csp() const = 0;

[nasko, 2017/02/15 21:28:44]

Why is this method on the public interface? I don't see any code outside of
content/ using it.

[arthursonzogni, 2017/02/16 17:32:41]

You are right.

 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_BROWSER_NAVIGATION_HANDLE_H_