Replicate feature policy container policies.

content/browser/frame_host/frame_tree_node.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/frame_host/frame_tree_node.h"
 
 #include <queue>
 #include <utility>
 
 #include "base/lazy_instance.h"
@@ skipping 303 matching lines @@
 
 void FrameTreeNode::SetPendingSandboxFlags(
     blink::WebSandboxFlags sandbox_flags) {
   pending_sandbox_flags_ = sandbox_flags;
 
   // Subframes should always inherit their parent's sandbox flags.
   if (parent())
     pending_sandbox_flags_ |= parent()->effective_sandbox_flags();
 }
 
+void FrameTreeNode::SetPendingContainerPolicy(
+    const ParsedFeaturePolicyHeader& container_policy) {
+  pending_container_policy_ = container_policy;
+
+  // Validate that inherited policy matches?

[iclelland, 2017/04/05 02:19:07]

This isn't necessary; the container policy can be anything, really, unlike
sandbox flags. When combined with the parent policy, it will be enforced that
the child frame cannot pick up any features which the parent frame did not
already have access to.

+}
+
 bool FrameTreeNode::IsDescendantOf(FrameTreeNode* other) const {
   if (!other || !other->child_count())
     return false;
 
   for (FrameTreeNode* node = parent(); node; node = node->parent()) {
     if (node == other)
       return true;
   }
 
   return false;
@@ skipping 23 matching lines @@
         render_manager_.speculative_frame_host();
     if (speculative_frame_host && speculative_frame_host->is_loading())
       return true;
   } else {
     if (pending_frame_host && pending_frame_host->is_loading())
       return true;
   }
   return current_frame_host->is_loading();
 }
 
-bool FrameTreeNode::CommitPendingSandboxFlags() {
+bool FrameTreeNode::CommitPendingFramePolicy() {
   bool did_change_flags =
-      pending_sandbox_flags_ != replication_state_.sandbox_flags;
+      pending_sandbox_flags_ != replication_state_.sandbox_flags ||
+      pending_container_policy_ != replication_state_.container_policy;
   replication_state_.sandbox_flags = pending_sandbox_flags_;
+  replication_state_.container_policy = pending_container_policy_;
   return did_change_flags;
 }
 
 void FrameTreeNode::CreatedNavigationRequest(
     std::unique_ptr<NavigationRequest> navigation_request) {
   CHECK(IsBrowserSideNavigationEnabled());
 
   // This is never called when navigating to a Javascript URL. For the loading
   // state, this matches what Blink is doing: Blink doesn't send throbber
   // notifications for Javascript URLS.
@@ skipping 192 matching lines @@
       }
       return parent_->child_at(i + relative_offset);
     }
   }
 
   NOTREACHED() << "FrameTreeNode not found in its parent's children.";
   return nullptr;
 }
 
 }  // namespace content