Move container policy logic to frame owner classes.

third_party/WebKit/Source/core/html/HTMLFrameElement.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2000 Simon Hausmann (hausmann@kde.org)
  *           (C) 2001 Dirk Mueller (mueller@kde.org)
  * Copyright (C) 2004, 2006, 2009 Apple Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
@@ skipping 58 matching lines @@
     frame_border_set_ = !params.new_value.IsNull();
     // FIXME: If we are already attached, this has no effect.
   } else if (params.name == noresizeAttr) {
     if (GetLayoutObject())
       GetLayoutObject()->UpdateFromElement();
   } else {
     HTMLFrameElementBase::ParseAttribute(params);
   }
 }
 
+Vector<WebParsedFeaturePolicyDeclaration>
+HTMLFrameElement::ConstructContainerPolicy() const {
+  WebParsedFeaturePolicy base_container_policy =
+      HTMLFrameOwnerElement::ConstructContainerPolicy();
+  // Frame elements are not allowed to enable the fullscreen feature. Remove any
+  // fullscreen policy which was added by the generic ConstructContainerPolicy
+  // algorithm.
+  Vector<WebParsedFeaturePolicyDeclaration> filtered_container_policy;
+  for (size_t i = 0; i < base_container_policy.size(); ++i) {
+    if (base_container_policy[i].feature !=
+        WebFeaturePolicyFeature::kFullscreen) {
+      filtered_container_policy.push_back(base_container_policy[i]);
+    }
+  }
+  // Add an empty whitelist for the fullscreen feature so that the framed
+  // content is unable to use the API, regardless of origin.
+  WebParsedFeaturePolicyDeclaration whitelist;
+  whitelist.feature = WebFeaturePolicyFeature::kFullscreen;
+  whitelist.matches_all_origins = false;
+  whitelist.origins = Vector<WebSecurityOrigin>(0UL);
+  filtered_container_policy.push_back(whitelist);
+  return filtered_container_policy;
+}
+
 }  // namespace blink