PlzNavigate: Enforce 'frame-src' CSP on the browser.

third_party/WebKit/public/web/WebFrameClient.h

 /*
  * Copyright (C) 2011, 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 282 matching lines @@
     // should stop in blink. In all other cases, the urlRequest should not
     // be modified.
     WebURLRequest& urlRequest;
     WebNavigationType navigationType;
     WebNavigationPolicy defaultPolicy;
     bool replacesCurrentHistoryItem;
     bool isHistoryNavigationInNewChildFrame;
     bool isClientRedirect;
     WebFormElement form;
     bool isCacheDisabled;
+    bool shouldBypassMainWorldCSP;

[dcheng, 2017/03/16 08:34:47]

I would encourage the use of an enum for this (and similarly in the content
layer): having so many bool parameters can be a little unreadable.

[arthursonzogni, 2017/03/16 15:47:36]

By seeing all of these booleans, I thought that I had to do the same, that it
was a sort of implicit coding style rule that applies to content/ and that is
different from the blink's one.
Thanks for the information.

 
     NavigationPolicyInfo(WebURLRequest& urlRequest)
         : extraData(nullptr),
           urlRequest(urlRequest),
           navigationType(WebNavigationTypeOther),
           defaultPolicy(WebNavigationPolicyIgnore),
           replacesCurrentHistoryItem(false),
           isHistoryNavigationInNewChildFrame(false),
           isClientRedirect(false),
-          isCacheDisabled(false) {}
+          isCacheDisabled(false),
+          shouldBypassMainWorldCSP(false) {}
   };
 
   virtual WebNavigationPolicy decidePolicyForNavigation(
       const NavigationPolicyInfo& info) {
     return info.defaultPolicy;
   }
 
   // During a history navigation, we may choose to load new subframes from
   // history as well.  This returns such a history item if appropriate.
   virtual WebHistoryItem historyItemForNewChildFrame() {
@@ skipping 422 matching lines @@
   // Overwrites the given URL to use an HTML5 embed if possible.
   // An empty URL is returned if the URL is not overriden.
   virtual WebURL overrideFlashEmbedWithHTML(const WebURL& url) {
     return WebURL();
   }
 };
 
 }  // namespace blink
 
 #endif