Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(581)

Side by Side Diff: third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h

Issue 2784753003: CSP: Enable whitelisting of external JavaScript via hashes (Closed)
Patch Set: remove duplicate test Created 3 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 /* 1 /*
2 * Copyright (C) 2011 Google, Inc. All rights reserved. 2 * Copyright (C) 2011 Google, Inc. All rights reserved.
3 * 3 *
4 * Redistribution and use in source and binary forms, with or without 4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that the following conditions 5 * modification, are permitted provided that the following conditions
6 * are met: 6 * are met:
7 * 1. Redistributions of source code must retain the above copyright 7 * 1. Redistributions of source code must retain the above copyright
8 * notice, this list of conditions and the following disclaimer. 8 * notice, this list of conditions and the following disclaimer.
9 * 2. Redistributions in binary form must reproduce the above copyright 9 * 2. Redistributions in binary form must reproduce the above copyright
10 * notice, this list of conditions and the following disclaimer in the 10 * notice, this list of conditions and the following disclaimer in the
(...skipping 210 matching lines...) Expand 10 before | Expand all | Expand 10 after
221 const KURL&, 221 const KURL&,
222 RedirectStatus = RedirectStatus::NoRedirect, 222 RedirectStatus = RedirectStatus::NoRedirect,
223 SecurityViolationReportingPolicy = 223 SecurityViolationReportingPolicy =
224 SecurityViolationReportingPolicy::Report) const; 224 SecurityViolationReportingPolicy::Report) const;
225 225
226 // Passing 'String()' into the |nonce| arguments in the following methods 226 // Passing 'String()' into the |nonce| arguments in the following methods
227 // represents an unnonced resource load. 227 // represents an unnonced resource load.
228 bool allowScriptFromSource( 228 bool allowScriptFromSource(
229 const KURL&, 229 const KURL&,
230 const String& nonce, 230 const String& nonce,
231 const IntegrityMetadataSet& hashes,
231 ParserDisposition, 232 ParserDisposition,
232 RedirectStatus = RedirectStatus::NoRedirect, 233 RedirectStatus = RedirectStatus::NoRedirect,
233 SecurityViolationReportingPolicy = 234 SecurityViolationReportingPolicy =
234 SecurityViolationReportingPolicy::Report) const; 235 SecurityViolationReportingPolicy::Report) const;
235 bool allowStyleFromSource(const KURL&, 236 bool allowStyleFromSource(const KURL&,
236 const String& nonce, 237 const String& nonce,
237 RedirectStatus = RedirectStatus::NoRedirect, 238 RedirectStatus = RedirectStatus::NoRedirect,
238 SecurityViolationReportingPolicy = 239 SecurityViolationReportingPolicy =
239 SecurityViolationReportingPolicy::Report) const; 240 SecurityViolationReportingPolicy::Report) const;
240 bool allowInlineScript(Element*, 241 bool allowInlineScript(Element*,
(...skipping 206 matching lines...) Expand 10 before | Expand all | Expand 10 after
447 String m_disableEvalErrorMessage; 448 String m_disableEvalErrorMessage;
448 WebInsecureRequestPolicy m_insecureRequestPolicy; 449 WebInsecureRequestPolicy m_insecureRequestPolicy;
449 450
450 Member<CSPSource> m_selfSource; 451 Member<CSPSource> m_selfSource;
451 String m_selfProtocol; 452 String m_selfProtocol;
452 }; 453 };
453 454
454 } // namespace blink 455 } // namespace blink
455 456
456 #endif 457 #endif
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698