Make most of CSP code work with non-Document ExecutionContext

third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.cpp

 /*
  * Copyright (C) 2011 Google, Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 160 matching lines @@
                                security_origin.Port(), String(),
                                CSPSource::kNoWildcard, CSPSource::kNoWildcard);
 }
 
 void ContentSecurityPolicy::ApplyPolicySideEffectsToExecutionContext() {
   DCHECK(execution_context_ &&
          execution_context_->GetSecurityContext().GetSecurityOrigin());
 
   SetupSelf(*execution_context_->GetSecurityContext().GetSecurityOrigin());
 
-  // If we're in a Document, set mixed content checking and sandbox
-  // flags, then dump all the parsing error messages, then poke at histograms.
-  if (Document* document = this->GetDocument()) {
-    if (sandbox_mask_ != kSandboxNone) {
-      UseCounter::Count(document, UseCounter::kSandboxViaCSP);
+  // Set mixed content checking and sandbox flags, then dump all the parsing
+  // error messages, then poke at histograms.
+  Document* document = this->GetDocument();
+  if (sandbox_mask_ != kSandboxNone) {
+    UseCounter::Count(execution_context_, UseCounter::kSandboxViaCSP);
+    if (document)
       document->EnforceSandboxFlags(sandbox_mask_);
-    }
-    if (treat_as_public_address_)
-      document->SetAddressSpace(kWebAddressSpacePublic);
+    else
+      execution_context_->GetSecurityContext().ApplySandboxFlags(sandbox_mask_);
+  }
+  if (treat_as_public_address_) {
+    execution_context_->GetSecurityContext().SetAddressSpace(
+        kWebAddressSpacePublic);
+  }
 
+  if (document) {
     document->EnforceInsecureRequestPolicy(insecure_request_policy_);
-    if (insecure_request_policy_ & kUpgradeInsecureRequests) {
-      UseCounter::Count(document, UseCounter::kUpgradeInsecureRequestsEnabled);
-      if (!document->Url().Host().IsEmpty())
-        document->AddInsecureNavigationUpgrade(
-            document->Url().Host().Impl()->GetHash());
-    }
+  } else {
+    execution_context_->GetSecurityContext().SetInsecureRequestPolicy(
+        insecure_request_policy_);
+  }
 
-    for (const auto& console_message : console_messages_)
-      execution_context_->AddConsoleMessage(console_message);
-    console_messages_.clear();
-
-    for (const auto& policy : policies_) {
-      UseCounter::Count(*document, GetUseCounterType(policy->HeaderType()));
-      if (policy->AllowDynamic())
-        UseCounter::Count(*document, UseCounter::kCSPWithStrictDynamic);
+  if (insecure_request_policy_ & kUpgradeInsecureRequests) {
+    UseCounter::Count(execution_context_,
+                      UseCounter::kUpgradeInsecureRequestsEnabled);
+    if (!execution_context_->Url().Host().IsEmpty()) {
+      execution_context_->GetSecurityContext().AddInsecureNavigationUpgrade(
+          execution_context_->Url().Host().Impl()->GetHash());
     }
   }
 
+  for (const auto& console_message : console_messages_)
+    execution_context_->AddConsoleMessage(console_message);
+  console_messages_.clear();
+
+  for (const auto& policy : policies_) {
+    UseCounter::Count(execution_context_,
+                      GetUseCounterType(policy->HeaderType()));
+    if (policy->AllowDynamic())
+      UseCounter::Count(execution_context_, UseCounter::kCSPWithStrictDynamic);
+  }
+
   // We disable 'eval()' even in the case of report-only policies, and rely on
   // the check in the V8Initializer::codeGenerationCheckCallbackInMainThread
   // callback to determine whether the call should execute or not.
   if (!disable_eval_error_message_.IsNull())
     execution_context_->DisableEval(disable_eval_error_message_);
 }
 
 ContentSecurityPolicy::~ContentSecurityPolicy() {}
 
 DEFINE_TRACE(ContentSecurityPolicy) {
@@ skipping 1468 matching lines @@
   if (SecurityOrigin::ShouldUseInnerURL(url)) {
     return SchemeRegistry::SchemeShouldBypassContentSecurityPolicy(
         SecurityOrigin::ExtractInnerURL(url).Protocol(), area);
   } else {
     return SchemeRegistry::SchemeShouldBypassContentSecurityPolicy(
         url.Protocol(), area);
   }
 }
 
 }  // namespace blink