PlzNavigate: Enforce 'frame-src' CSP on the browser.

content/common/content_security_policy/csp_source_list.cc

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/content_security_policy/csp_context.h"
 
 namespace content {
 
 namespace {
 
 const GURL ExtractInnerURL(const GURL& url) {
   if (const GURL* inner_url = url.inner_url())
     return *inner_url;
   else
     // TODO(arthursonzogni): revisit this once GURL::inner_url support blob-URL.
     return GURL(url.path());
 }
 
 const GURL GetEffectiveURL(CSPContext* context, const GURL& url) {
   // Due to backwards-compatibility concerns, we allow 'self' to match blob and
   // filesystem inner URLs if we are in a context that bypasses
   // ContentSecurityPolicy in the main world.
-  if (context->SelfSchemeShouldBypassCSP()) {
+  if (context->SelfSchemeShouldBypassCsp()) {
     if (url.SchemeIsFileSystem() || url.SchemeIsBlob())
       return ExtractInnerURL(url);
   }
   return url;
 }
 
 bool AllowFromSources(const GURL& url,
                       const std::vector<CSPSource>& sources,
                       CSPContext* context,
                       bool is_redirect) {
@@ skipping 66 matching lines @@
   }
 
   return text.str();
 }
 
 bool CSPSourceList::IsNone() const {
   return !allow_self && !allow_star && sources.empty();
 }
 
 }  // namespace content