Share schemes needed for CSP between the browser and the renderer.

content/public/common/content_client.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_PUBLIC_COMMON_CONTENT_CLIENT_H_
 #define CONTENT_PUBLIC_COMMON_CONTENT_CLIENT_H_
 
 #include <set>
 #include <string>
 #include <vector>
@@ skipping 93 matching lines @@
     std::vector<std::string> standard_schemes;
     std::vector<std::string> referrer_schemes;
     std::vector<std::string> savable_schemes;
     // Additional schemes that should be allowed to register service workers.
     // Only secure and trustworthy schemes should be added.
     std::vector<std::string> service_worker_schemes;
     // For the following three, see the documentation in WebSecurityPolicy.
     std::vector<std::string> local_schemes;
     std::vector<std::string> no_access_schemes;
     std::vector<std::string> cors_enabled_schemes;
+    std::vector<std::string> bypassing_csp_schemes;

[nasko, 2017/02/09 00:13:15]

nit: I'd reorder the name a bit - csp_bypassing_schemes, matches a bit better
the rest of the names.

[arthursonzogni, 2017/02/09 09:15:53]

Done.

     // See https://www.w3.org/TR/powerful-features/#is-origin-trustworthy.
     std::vector<std::string> secure_schemes;
     std::vector<GURL> secure_origins;
   };
 
   virtual void AddAdditionalSchemes(Schemes* schemes) {}
 
   // Returns whether the given message should be sent in a swapped out renderer.
   virtual bool CanSendWhileSwappedOut(const IPC::Message* message);
 
@@ skipping 72 matching lines @@
   ContentGpuClient* gpu_;
   // The embedder API for participating in renderer logic.
   ContentRendererClient* renderer_;
   // The embedder API for participating in utility logic.
   ContentUtilityClient* utility_;
 };
 
 }  // namespace content
 
 #endif  // CONTENT_PUBLIC_COMMON_CONTENT_CLIENT_H_