PlzNavigate: Enforce 'frame-src' CSP on the browser.

content/browser/frame_host/render_frame_host_impl.h

Index: content/browser/frame_host/render_frame_host_impl.h
diff --git a/content/browser/frame_host/render_frame_host_impl.h b/content/browser/frame_host/render_frame_host_impl.h
index fb6835216d3fb4c557d6d2a694aa3bc3eb2fcf35..003f61d3f3a5a34855034525677d52f9e11cfdcf 100644
--- a/content/browser/frame_host/render_frame_host_impl.h
+++ b/content/browser/frame_host/render_frame_host_impl.h
@@ -30,7 +30,7 @@
 #include "content/common/accessibility_mode_enums.h"
 #include "content/common/ax_content_node_data.h"
 #include "content/common/content_export.h"
-#include "content/common/content_security_policy/csp_policy.h"
+#include "content/common/content_security_policy/csp_context.h"
 #include "content/common/download/mhtml_save_status.h"
 #include "content/common/frame.mojom.h"
 #include "content/common/frame_message_enums.h"
@@ -557,6 +557,12 @@ class CONTENT_EXPORT RenderFrameHostImpl
                         bool has_stale_copy_in_cache,
                         int error_code);
 
+  // PlzNavigate
+  // Inform the renderer process that a navigation has been blocked by a content
+  // security policy.
+  void ContentSecurityPolicyViolation(

[nasko, 2017/02/15 21:28:44]

nit: Start the method name with a verb, maybe Report...

[arthursonzogni, 2017/02/16 17:32:41]

Done.

+      const CSPViolationParams& violation_params);
+
   // Sets up the Mojo connection between this instance and its associated render
   // frame if it has not yet been set up.
   void SetUpMojoIfNeeded();