Share schemes needed for CSP between the browser and the renderer.

third_party/WebKit/Source/platform/weborigin/SchemeRegistry.cpp

 /*
  * Copyright (C) 2010 Apple Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 36 matching lines @@
         fetchAPISchemes({"http", "https"}),
         allowedInReferrerSchemes({"http", "https"}) {
     for (auto& scheme : url::GetLocalSchemes())
       localSchemes.insert(scheme.c_str());
     for (auto& scheme : url::GetSecureSchemes())
       secureSchemes.insert(scheme.c_str());
     for (auto& scheme : url::GetNoAccessSchemes())
       schemesWithUniqueOrigins.insert(scheme.c_str());
     for (auto& scheme : url::GetCORSEnabledSchemes())
       CORSEnabledSchemes.insert(scheme.c_str());
+    for (auto& scheme : url::GetCSPBypassingSchemes()) {
+      contentSecurityPolicyBypassingSchemes.insert(
+          scheme.c_str(), SchemeRegistry::PolicyAreaAll);
+    }
   }
   ~URLSchemesRegistry() = default;
 
   URLSchemesSet localSchemes;
   URLSchemesSet displayIsolatedURLSchemes;
   URLSchemesSet secureSchemes;
   URLSchemesSet schemesWithUniqueOrigins;
   URLSchemesSet emptyDocumentSchemes;
   URLSchemesSet schemesForbiddenFromDomainRelaxation;
   URLSchemesSet notAllowingJavascriptURLsSchemes;
@@ skipping 293 matching lines @@
 
 bool SchemeRegistry::schemeShouldBypassSecureContextCheck(
     const String& scheme) {
   if (scheme.isEmpty())
     return false;
   DCHECK_EQ(scheme, scheme.lower());
   return getURLSchemesRegistry().secureContextBypassingSchemes.contains(scheme);
 }
 
 }  // namespace blink