PlzNavigate: Enforce 'frame-src' CSP on the browser.

third_party/WebKit/Source/web/LocalFrameClientImpl.cpp

 /*
  * Copyright (C) 2009, 2012 Google Inc. All rights reserved.
  * Copyright (C) 2011 Apple Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
@@ skipping 516 matching lines @@
   return userPolicy == NavigationPolicyNewBackgroundTab;
 }
 
 NavigationPolicy LocalFrameClientImpl::decidePolicyForNavigation(
     const ResourceRequest& request,
     DocumentLoader* loader,
     NavigationType type,
     NavigationPolicy policy,
     bool replacesCurrentHistoryItem,
     bool isClientRedirect,
-    HTMLFormElement* form) {
+    HTMLFormElement* form,
+    ContentSecurityPolicyDisposition
+        shouldCheckMainWorldContentSecurityPolicy) {
   if (!m_webFrame->client())
     return NavigationPolicyIgnore;
 
   if (policy == NavigationPolicyNewBackgroundTab &&
       !allowCreatingBackgroundTabs() &&
       !UIEventWithKeyState::newTabModifierSetFromIsolatedWorld())
     policy = NavigationPolicyNewForegroundTab;
 
   WebDataSourceImpl* ds = WebDataSourceImpl::fromDocumentLoader(loader);
 
@@ skipping 16 matching lines @@
 
   WrappedResourceRequest wrappedResourceRequest(request);
   WebFrameClient::NavigationPolicyInfo navigationInfo(wrappedResourceRequest);
   navigationInfo.navigationType = static_cast<WebNavigationType>(type);
   navigationInfo.defaultPolicy = static_cast<WebNavigationPolicy>(policy);
   navigationInfo.extraData = ds ? ds->getExtraData() : nullptr;
   navigationInfo.replacesCurrentHistoryItem = replacesCurrentHistoryItem;
   navigationInfo.isHistoryNavigationInNewChildFrame =
       isHistoryNavigationInNewChildFrame;
   navigationInfo.isClientRedirect = isClientRedirect;
+  navigationInfo.shouldCheckMainWorldContentSecurityPolicy =
+      shouldCheckMainWorldContentSecurityPolicy == CheckContentSecurityPolicy
+          ? WebContentSecurityPolicyDispositionCheck
+          : WebContentSecurityPolicyDispositionDoNotCheck;
   // Caching could be disabled for requests initiated by DevTools.
   // TODO(ananta)
   // We should extract the network cache state into a global component which
   // can be queried here and wherever necessary.
   navigationInfo.isCacheDisabled =
       devToolsAgent() ? devToolsAgent()->cacheDisabled() : false;
   if (form)
     navigationInfo.form = WebFormElement(form);
 
   std::unique_ptr<SourceLocation> sourceLocation =
@@ skipping 440 matching lines @@
 KURL LocalFrameClientImpl::overrideFlashEmbedWithHTML(const KURL& url) {
   return m_webFrame->client()->overrideFlashEmbedWithHTML(WebURL(url));
 }
 
 void LocalFrameClientImpl::setHasReceivedUserGesture() {
   if (m_webFrame->client())
     m_webFrame->client()->setHasReceivedUserGesture();
 }
 
 }  // namespace blink