Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(452)

Issues Search
    My Issues | Starred     Open | Closed | All

Side by Side Diff: Source/core/frame/csp/CSPDirectiveList.h

Issue 570563003: Implement CSP check for manifest fetching (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Created 6 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« Source/core/fetch/ResourceFetcher.cpp ('K') | « Source/core/fetch/ResourceFetcher.cpp ('k') | Source/core/frame/csp/CSPDirectiveList.cpp » ('j') | Source/core/frame/csp/CSPDirectiveList.cpp » ('J')
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright 2014 The Chromium Authors. All rights reserved. 1 // Copyright 2014 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef CSPDirectiveList_h 5 #ifndef CSPDirectiveList_h
6 #define CSPDirectiveList_h 6 #define CSPDirectiveList_h
7 7
8 #include "core/frame/csp/ContentSecurityPolicy.h" 8 #include "core/frame/csp/ContentSecurityPolicy.h"
9 #include "core/frame/csp/MediaListDirective.h" 9 #include "core/frame/csp/MediaListDirective.h"
10 #include "core/frame/csp/SourceListDirective.h" 10 #include "core/frame/csp/SourceListDirective.h"
(...skipping 28 matching lines...) Expand all
39 bool allowEval(ScriptState*, ContentSecurityPolicy::ReportingStatus) const; 39 bool allowEval(ScriptState*, ContentSecurityPolicy::ReportingStatus) const;
40 bool allowPluginType(const String& type, const String& typeAttribute, const KURL&, ContentSecurityPolicy::ReportingStatus) const; 40 bool allowPluginType(const String& type, const String& typeAttribute, const KURL&, ContentSecurityPolicy::ReportingStatus) const;
41 41
42 bool allowScriptFromSource(const KURL&, ContentSecurityPolicy::ReportingStat us) const; 42 bool allowScriptFromSource(const KURL&, ContentSecurityPolicy::ReportingStat us) const;
43 bool allowObjectFromSource(const KURL&, ContentSecurityPolicy::ReportingStat us) const; 43 bool allowObjectFromSource(const KURL&, ContentSecurityPolicy::ReportingStat us) const;
44 bool allowChildFrameFromSource(const KURL&, ContentSecurityPolicy::Reporting Status) const; 44 bool allowChildFrameFromSource(const KURL&, ContentSecurityPolicy::Reporting Status) const;
45 bool allowImageFromSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const; 45 bool allowImageFromSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const;
46 bool allowStyleFromSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const; 46 bool allowStyleFromSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const;
47 bool allowFontFromSource(const KURL&, ContentSecurityPolicy::ReportingStatus ) const; 47 bool allowFontFromSource(const KURL&, ContentSecurityPolicy::ReportingStatus ) const;
48 bool allowMediaFromSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const; 48 bool allowMediaFromSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const;
49 bool allowManifestFromSource(const KURL&, ContentSecurityPolicy::ReportingSt atus) const;
49 bool allowConnectToSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const; 50 bool allowConnectToSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const;
50 bool allowFormAction(const KURL&, ContentSecurityPolicy::ReportingStatus) co nst; 51 bool allowFormAction(const KURL&, ContentSecurityPolicy::ReportingStatus) co nst;
51 bool allowBaseURI(const KURL&, ContentSecurityPolicy::ReportingStatus) const ; 52 bool allowBaseURI(const KURL&, ContentSecurityPolicy::ReportingStatus) const ;
52 bool allowAncestors(LocalFrame*, ContentSecurityPolicy::ReportingStatus) con st; 53 bool allowAncestors(LocalFrame*, ContentSecurityPolicy::ReportingStatus) con st;
53 bool allowChildContextFromSource(const KURL&, ContentSecurityPolicy::Reporti ngStatus) const; 54 bool allowChildContextFromSource(const KURL&, ContentSecurityPolicy::Reporti ngStatus) const;
54 bool allowScriptNonce(const String&) const; 55 bool allowScriptNonce(const String&) const;
55 bool allowStyleNonce(const String&) const; 56 bool allowStyleNonce(const String&) const;
56 bool allowScriptHash(const CSPHashValue&) const; 57 bool allowScriptHash(const CSPHashValue&) const;
57 bool allowStyleHash(const CSPHashValue&) const; 58 bool allowStyleHash(const CSPHashValue&) const;
58 59
(...skipping 60 matching lines...) Expand 10 before | Expand all | Expand 10 after
119 OwnPtr<SourceListDirective> m_baseURI; 120 OwnPtr<SourceListDirective> m_baseURI;
120 OwnPtr<SourceListDirective> m_childSrc; 121 OwnPtr<SourceListDirective> m_childSrc;
121 OwnPtr<SourceListDirective> m_connectSrc; 122 OwnPtr<SourceListDirective> m_connectSrc;
122 OwnPtr<SourceListDirective> m_defaultSrc; 123 OwnPtr<SourceListDirective> m_defaultSrc;
123 OwnPtr<SourceListDirective> m_fontSrc; 124 OwnPtr<SourceListDirective> m_fontSrc;
124 OwnPtr<SourceListDirective> m_formAction; 125 OwnPtr<SourceListDirective> m_formAction;
125 OwnPtr<SourceListDirective> m_frameAncestors; 126 OwnPtr<SourceListDirective> m_frameAncestors;
126 OwnPtr<SourceListDirective> m_frameSrc; 127 OwnPtr<SourceListDirective> m_frameSrc;
127 OwnPtr<SourceListDirective> m_imgSrc; 128 OwnPtr<SourceListDirective> m_imgSrc;
128 OwnPtr<SourceListDirective> m_mediaSrc; 129 OwnPtr<SourceListDirective> m_mediaSrc;
130 OwnPtr<SourceListDirective> m_manifestSrc;
129 OwnPtr<SourceListDirective> m_objectSrc; 131 OwnPtr<SourceListDirective> m_objectSrc;
130 OwnPtr<SourceListDirective> m_scriptSrc; 132 OwnPtr<SourceListDirective> m_scriptSrc;
131 OwnPtr<SourceListDirective> m_styleSrc; 133 OwnPtr<SourceListDirective> m_styleSrc;
132 134
133 Vector<String> m_reportEndpoints; 135 Vector<String> m_reportEndpoints;
134 136
135 String m_evalDisabledErrorMessage; 137 String m_evalDisabledErrorMessage;
136 }; 138 };
137 139
138 140
139 } // namespace 141 } // namespace
140 142
141 #endif 143 #endif
OLDNEW
« Source/core/fetch/ResourceFetcher.cpp ('K') | « Source/core/fetch/ResourceFetcher.cpp ('k') | Source/core/frame/csp/CSPDirectiveList.cpp » ('j') | Source/core/frame/csp/CSPDirectiveList.cpp » ('J')

Powered by Google App Engine
This is Rietveld 408576698