Index: Source/core/dom/RemoteSecurityContext.cpp |
diff --git a/Source/core/dom/RemoteSecurityContext.cpp b/Source/core/dom/RemoteSecurityContext.cpp |
new file mode 100644 |
index 0000000000000000000000000000000000000000..8e773494a296f65f99532b8080bc915b94729911 |
--- /dev/null |
+++ b/Source/core/dom/RemoteSecurityContext.cpp |
@@ -0,0 +1,47 @@ |
+// Copyright 2014 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+#include "config.h" |
+#include "core/dom/RemoteSecurityContext.h" |
+ |
+#include "core/frame/csp/ContentSecurityPolicy.h" |
+#include "platform/weborigin/SecurityOrigin.h" |
+ |
+namespace blink { |
+ |
+RemoteSecurityContext::RemoteSecurityContext() |
+ : SecurityContext() |
+{ |
+ // RemoteSecurityContext's origin is expected to stay uninitialized until |
+ // we set it using replicated origin data from the browser process. |
+ ASSERT(!haveInitializedSecurityOrigin()); |
+ |
+ // CSP will not be replicated for RemoteSecurityContexts, as it is moving |
+ // to the browser process. For now, initialize CSP to a default |
+ // locked-down policy. |
+ setContentSecurityPolicy(ContentSecurityPolicy::create()); |
+ |
+ // FIXME: Document::initSecurityContext has a few other things we may |
+ // eventually want here, such as enforcing a setting to |
+ // grantUniversalAccess(). |
+} |
+ |
+PassRefPtr<RemoteSecurityContext> RemoteSecurityContext::create() |
+{ |
+ return adoptRef(new RemoteSecurityContext()); |
+} |
+ |
+void RemoteSecurityContext::setReplicatedOrigin(PassRefPtr<SecurityOrigin> origin) |
+{ |
+ // FIXME: Currently, replicated security origins are passed only at |
+ // RemoteFrame creation time. Eventually, this class will also need to |
+ // handle origin updates to handle cases like setting document.domain, but |
+ // for now, check that this is the first and only time we are setting the |
+ // origin. |
+ ASSERT(!haveInitializedSecurityOrigin()); |
+ setSecurityOrigin(origin); |
+} |
+ |
+ |
+} // namespace blink |