Share schemes needed for CSP between the browser and the renderer.

url/url_util.h

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef URL_URL_UTIL_H_
 #define URL_URL_UTIL_H_
 
 #include <string>
 #include <vector>
 
@@ skipping 80 matching lines @@
 // loaded with them to not have access to pages loaded with any other URL
 // scheme.
 URL_EXPORT void AddNoAccessScheme(const char* new_scheme);
 URL_EXPORT const std::vector<std::string>& GetNoAccessSchemes();
 
 // Adds an application-defined scheme to the list of schemes that can be sent
 // CORS requests.
 URL_EXPORT void AddCORSEnabledScheme(const char* new_scheme);
 URL_EXPORT const std::vector<std::string>& GetCORSEnabledSchemes();
 
+// Adds an application-defined scheme to the list of schemes that can bypass the
+// Content-Security-Policy(CSP) checks.
+URL_EXPORT void AddBypassingCSPScheme(const char* new_scheme);
+URL_EXPORT const std::vector<std::string>& GetBypassingCSPSchemes();

[Mike West, 2017/02/08 14:59:53]

I'm pretty hard-pressed to call this a concept that //url should know about.

+
 // Sets a flag to prevent future calls to Add*Scheme from succeeding.
 //
 // This is designed to help prevent errors for multithreaded applications.
 // Normal usage would be to call Add*Scheme for your custom schemes at
 // the beginning of program initialization, and then LockSchemeRegistries. This
 // prevents future callers from mistakenly calling Add*Scheme when the
 // program is running with multiple threads, where such usage would be
 // dangerous.
 //
 // We could have had Add*Scheme use a lock instead, but that would add
@@ skipping 146 matching lines @@
 
 // Escapes the given string as defined by the JS method encodeURIComponent. See
 // https://developer.mozilla.org/en/JavaScript/Reference/Global_Objects/encodeURIComponent
 URL_EXPORT void EncodeURIComponent(const char* input,
                                    int length,
                                    CanonOutput* output);
 
 }  // namespace url
 
 #endif  // URL_URL_UTIL_H_