CSP: Enable whitelisting of external JavaScript via hashes

third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CSPDirectiveList_h
 #define CSPDirectiveList_h
 
 #include "core/frame/csp/ContentSecurityPolicy.h"
 #include "core/frame/csp/MediaListDirective.h"
 #include "core/frame/csp/SourceListDirective.h"
@@ skipping 60 matching lines @@
                  SecurityViolationReportingPolicy,
                  ContentSecurityPolicy::ExceptionStatus =
                      ContentSecurityPolicy::WillNotThrowException) const;
   bool allowPluginType(const String& type,
                        const String& typeAttribute,
                        const KURL&,
                        SecurityViolationReportingPolicy) const;
 
   bool allowScriptFromSource(const KURL&,
                              const String& nonce,
+                             const IntegrityMetadataSet& hashes,
                              ParserDisposition,
                              ResourceRequest::RedirectStatus,
                              SecurityViolationReportingPolicy) const;
   bool allowStyleFromSource(const KURL&,
                             const String& nonce,
                             ResourceRequest::RedirectStatus,
                             SecurityViolationReportingPolicy) const;
 
   bool allowObjectFromSource(const KURL&,
                              ResourceRequest::RedirectStatus,
@@ skipping 143 matching lines @@
       const String& directiveText,
       const ContentSecurityPolicy::DirectiveType&,
       const String& message,
       const KURL& blockedURL,
       ScriptState*,
       const ContentSecurityPolicy::ExceptionStatus) const;
 
   bool checkEval(SourceListDirective*) const;
   bool checkDynamic(SourceListDirective*) const;
   bool isMatchingNoncePresent(SourceListDirective*, const String&) const;
+  bool areAllMatchingHashesPresent(SourceListDirective*,
+                                   const IntegrityMetadataSet&) const;
   bool checkHash(SourceListDirective*, const CSPHashValue&) const;
   bool checkHashedAttributes(SourceListDirective*) const;
   bool checkSource(SourceListDirective*,
                    const KURL&,
                    ResourceRequest::RedirectStatus) const;
   bool checkMediaType(MediaListDirective*,
                       const String& type,
                       const String& typeAttribute) const;
   bool checkAncestors(SourceListDirective*, LocalFrame*) const;
   bool checkRequestWithoutIntegrity(WebURLRequest::RequestContext) const;
@@ skipping 80 matching lines @@
   uint8_t m_requireSRIFor;
 
   Vector<String> m_reportEndpoints;
 
   String m_evalDisabledErrorMessage;
 };
 
 }  // namespace blink
 
 #endif