Replicate feature policy container policies.

third_party/WebKit/Source/core/html/HTMLFrameOwnerElement.h

 /*
  * Copyright (C) 2006, 2007, 2009 Apple Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
  *
  * This library is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  * Library General Public License for more details.
  *
  * You should have received a copy of the GNU Library General Public License
  * along with this library; see the file COPYING.LIB.  If not, write to
  * the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
  * Boston, MA 02110-1301, USA.
  *
  */
 
 #ifndef HTMLFrameOwnerElement_h
 #define HTMLFrameOwnerElement_h
 
 #include "core/CoreExport.h"
 #include "core/dom/Document.h"
 #include "core/frame/FrameOwner.h"
 #include "core/html/HTMLElement.h"
+#include "platform/feature_policy/FeaturePolicy.h"
 #include "platform/heap/Handle.h"
 #include "platform/scroll/ScrollTypes.h"
 #include "platform/weborigin/SecurityPolicy.h"
 #include "wtf/HashCountedSet.h"
 
 namespace blink {
 
 class ExceptionState;
 class Frame;
 class FrameViewBase;
@@ skipping 48 matching lines @@
     return getAttribute(HTMLNames::nameAttr);
   }
   ScrollbarMode scrollingMode() const override { return ScrollbarAuto; }
   int marginWidth() const override { return -1; }
   int marginHeight() const override { return -1; }
   bool allowFullscreen() const override { return false; }
   bool allowPaymentRequest() const override { return false; }
   bool isDisplayNone() const override { return !m_widget; }
   AtomicString csp() const override { return nullAtom; }
   const WebVector<WebFeaturePolicyFeature>& allowedFeatures() const override;
+  const WebParsedFeaturePolicy& containerPolicy() const override;
 
   DECLARE_VIRTUAL_TRACE();
 
  protected:
   HTMLFrameOwnerElement(const QualifiedName& tagName, Document&);
   void setSandboxFlags(SandboxFlags);
 
   bool loadOrRedirectSubframe(const KURL&,
                               const AtomicString& frameName,
                               bool replaceCurrentItem);
   bool isKeyboardFocusable() const override;
 
   void disposeWidgetSoon(FrameViewBase*);
   void frameOwnerPropertiesChanged();
+  void updateContainerPolicy();
 
  private:
   // Intentionally private to prevent redundant checks when the type is
   // already HTMLFrameOwnerElement.
   bool isLocal() const final { return true; }
   bool isRemote() const final { return false; }
 
   bool isFrameOwnerElement() const final { return true; }
 
   virtual ReferrerPolicy referrerPolicyAttribute() {
     return ReferrerPolicyDefault;
   }
 
   Member<Frame> m_contentFrame;
   Member<FrameViewBase> m_widget;
   SandboxFlags m_sandboxFlags;
+
+  WebParsedFeaturePolicy m_containerPolicy;
+
+  // Tracks the absolute URL represented by the contents of the src attribute.
+  KURL m_absoluteURL;

[alexmos, 2017/04/06 00:44:22]

Why do we need to track this?  Could you get it instead just by looking up the
src attribute?  (I recall some Blink folks weren't fond of tracking too many
(slightly) different kinds of URLs, at least on Document.  dcheng@ knows the
historical perspective on that)

[iclelland, 2017/04/09 03:25:54]

My concern here was that the absolute URL isn't just what's in the src
attribute, various kinds of relative URLs need to combine with the parent
frame's base to determine how the src attribute is interpreted.

I was thinking that that meant we needed to hold on to it for longer than just
in |HTMLFrameOwnerElement::loadOrRedirectSubframe|, but as Luna pointed out, the
new code doesn't actually use it anywhere else, so I don't think we need to
store it.

I've removed it, and, since this class doesn't have any other concept of
location, moved the responsibility for calculating the relevant origin into
HTMLFrameElementBase.

 };
 
 DEFINE_ELEMENT_TYPE_CASTS(HTMLFrameOwnerElement, isFrameOwnerElement());
 
 class SubframeLoadingDisabler {
   STACK_ALLOCATED();
 
  public:
   explicit SubframeLoadingDisabler(Node& root)
       : SubframeLoadingDisabler(&root) {}
@@ skipping 31 matching lines @@
 
 DEFINE_TYPE_CASTS(HTMLFrameOwnerElement,
                   FrameOwner,
                   owner,
                   owner->isLocal(),
                   owner.isLocal());
 
 }  // namespace blink
 
 #endif  // HTMLFrameOwnerElement_h