PlzNavigate: Enforce 'frame-src' CSP on the browser.

content/renderer/content_security_policy_util.h

Index: content/renderer/content_security_policy_util.h
diff --git a/content/renderer/content_security_policy_util.h b/content/renderer/content_security_policy_util.h
index 30858d85dd20fd9818e16ec2ae795a1c490d7e0a..b09aa2f1ee1f500f35479fc00ca3cea24d1eef99 100644
--- a/content/renderer/content_security_policy_util.h
+++ b/content/renderer/content_security_policy_util.h
@@ -6,18 +6,22 @@
 #define CONTENT_RENDERER_CONTENT_SECURITY_POLICY_UTIL_H_
 
 #include "content/common/content_security_policy/content_security_policy.h"
-
-namespace blink {
-struct WebContentSecurityPolicyPolicy;
-}  // namespace blink
+#include "content/common/content_security_policy/csp_context.h"
+#include "third_party/WebKit/public/platform/WebContentSecurityPolicyStruct.h"
 
 namespace content {
 
-// Convert a WebContentSecurityPolicy into a ContentSecurityPolicy, these two
-// classes are the reflection of each other. One in content, the other in blink.
+// Convert a WebContentSecurityPolicy into a CSPPolicy. These two classes

[alexmos, 2017/03/13 17:26:26]

nit: CSPPolicy => ContentSecurityPolicy, since that's what's returned from this?

[arthursonzogni, 2017/03/14 15:38:57]

Thanks!

+// represent the exact same thing, but one is in content, the other is in blink.
 ContentSecurityPolicy BuildContentSecurityPolicy(
     const blink::WebContentSecurityPolicyPolicy&);
 
+// Convert a CSPViolationParams into a WebContentSecurityPolicyViolation. These
+// two classes represent the exact same thing, but one is in content, the other
+// is in blink.
+blink::WebContentSecurityPolicyViolation BuildWebContentSecurityPolicyViolation(
+    const content::CSPViolationParams& violation_params);
+
 }  // namespace content
 
 #endif /* CONTENT_RENDERER_CONTENT_SECURITY_POLICY_UTIL_H_ */