Index: Source/core/frame/csp/ContentSecurityPolicy.h |
diff --git a/Source/core/frame/csp/ContentSecurityPolicy.h b/Source/core/frame/csp/ContentSecurityPolicy.h |
index c6a919c5f2096c540c6296f64425d00e93fd912d..c6c303041ce0bd76d580eaece50bd05bb675385d 100644 |
--- a/Source/core/frame/csp/ContentSecurityPolicy.h |
+++ b/Source/core/frame/csp/ContentSecurityPolicy.h |
@@ -126,10 +126,14 @@ public: |
// The nonce and hash allow functions are guaranteed to not have any side |
// effects, including reporting. |
- bool allowScriptNonce(const String& nonce) const; |
- bool allowStyleNonce(const String& nonce) const; |
- bool allowScriptHash(const String& source) const; |
- bool allowStyleHash(const String& source) const; |
+ // Nonce/Hash functions check all policies relating to use of a script/style |
+ // with the given nonce/hash and return true all CSP policies allow it. |
+ // If these return true, callers can then process the content or |
+ // issue a load and be safe disabling any further CSP checks. |
+ bool allowScriptWithNonce(const String& nonce) const; |
+ bool allowStyleWithNonce(const String& nonce) const; |
+ bool allowScriptWithHash(const String& source) const; |
+ bool allowStyleWithHash(const String& source) const; |
void usesScriptHashAlgorithms(uint8_t ContentSecurityPolicyHashAlgorithm); |
void usesStyleHashAlgorithms(uint8_t ContentSecurityPolicyHashAlgorithm); |