Implement upgrade-insecure-requests in browser for frame requests

content/common/content_security_policy/content_security_policy.cc

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <sstream>
 #include "base/strings/string_split.h"
 #include "base/strings/string_util.h"
 #include "content/common/content_security_policy/csp_context.h"
 
 namespace content {
 
 namespace {
 
 static CSPDirective::Name CSPFallback(CSPDirective::Name directive) {
   switch (directive) {
     case CSPDirective::DefaultSrc:
     case CSPDirective::FormAction:
+    case CSPDirective::UpgradeInsecureRequests:
       return CSPDirective::Unknown;
 
     case CSPDirective::FrameSrc:
       return CSPDirective::ChildSrc;
 
     case CSPDirective::ChildSrc:
       return CSPDirective::DefaultSrc;
 
     case CSPDirective::Unknown:
       NOTREACHED();
@@ skipping 151 matching lines @@
       text << "; ";
     is_first_policy = false;
     text << "report-uri";
     for (const std::string& endpoint : report_endpoints)
       text << " " << endpoint;
   }
 
   return text.str();
 }
 
+// static
+bool ContentSecurityPolicy::ShouldUpgradeInsecureRequest(
+    const ContentSecurityPolicy& policy) {
+  for (const CSPDirective& directive : policy.directives) {
+    if (directive.name == CSPDirective::UpgradeInsecureRequests)
+      return true;
+  }
+  return false;
+}
+
 }  // namespace content