Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(22)

Issues Search
    My Issues | Starred     Open | Closed | All

Side by Side Diff: Source/core/frame/csp/CSPDirectiveList.h

Issue 570563003: Implement CSP check for manifest fetching (Closed) Base URL: svn://svn.chromium.org/blink/trunk
Patch Set: Fixed nit from mkwst Created 6 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « Source/core/fetch/ResourceFetcher.cpp ('k') | Source/core/frame/csp/CSPDirectiveList.cpp » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright 2014 The Chromium Authors. All rights reserved. 1 // Copyright 2014 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef CSPDirectiveList_h 5 #ifndef CSPDirectiveList_h
6 #define CSPDirectiveList_h 6 #define CSPDirectiveList_h
7 7
8 #include "core/frame/csp/ContentSecurityPolicy.h" 8 #include "core/frame/csp/ContentSecurityPolicy.h"
9 #include "core/frame/csp/MediaListDirective.h" 9 #include "core/frame/csp/MediaListDirective.h"
10 #include "core/frame/csp/SourceListDirective.h" 10 #include "core/frame/csp/SourceListDirective.h"
(...skipping 28 matching lines...) Expand all
39 bool allowEval(ScriptState*, ContentSecurityPolicy::ReportingStatus) const; 39 bool allowEval(ScriptState*, ContentSecurityPolicy::ReportingStatus) const;
40 bool allowPluginType(const String& type, const String& typeAttribute, const KURL&, ContentSecurityPolicy::ReportingStatus) const; 40 bool allowPluginType(const String& type, const String& typeAttribute, const KURL&, ContentSecurityPolicy::ReportingStatus) const;
41 41
42 bool allowScriptFromSource(const KURL&, ContentSecurityPolicy::ReportingStat us) const; 42 bool allowScriptFromSource(const KURL&, ContentSecurityPolicy::ReportingStat us) const;
43 bool allowObjectFromSource(const KURL&, ContentSecurityPolicy::ReportingStat us) const; 43 bool allowObjectFromSource(const KURL&, ContentSecurityPolicy::ReportingStat us) const;
44 bool allowChildFrameFromSource(const KURL&, ContentSecurityPolicy::Reporting Status) const; 44 bool allowChildFrameFromSource(const KURL&, ContentSecurityPolicy::Reporting Status) const;
45 bool allowImageFromSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const; 45 bool allowImageFromSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const;
46 bool allowStyleFromSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const; 46 bool allowStyleFromSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const;
47 bool allowFontFromSource(const KURL&, ContentSecurityPolicy::ReportingStatus ) const; 47 bool allowFontFromSource(const KURL&, ContentSecurityPolicy::ReportingStatus ) const;
48 bool allowMediaFromSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const; 48 bool allowMediaFromSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const;
49 bool allowManifestFromSource(const KURL&, ContentSecurityPolicy::ReportingSt atus) const;
49 bool allowConnectToSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const; 50 bool allowConnectToSource(const KURL&, ContentSecurityPolicy::ReportingStatu s) const;
50 bool allowFormAction(const KURL&, ContentSecurityPolicy::ReportingStatus) co nst; 51 bool allowFormAction(const KURL&, ContentSecurityPolicy::ReportingStatus) co nst;
51 bool allowBaseURI(const KURL&, ContentSecurityPolicy::ReportingStatus) const ; 52 bool allowBaseURI(const KURL&, ContentSecurityPolicy::ReportingStatus) const ;
52 bool allowAncestors(LocalFrame*, const KURL&, ContentSecurityPolicy::Reporti ngStatus) const; 53 bool allowAncestors(LocalFrame*, const KURL&, ContentSecurityPolicy::Reporti ngStatus) const;
53 bool allowChildContextFromSource(const KURL&, ContentSecurityPolicy::Reporti ngStatus) const; 54 bool allowChildContextFromSource(const KURL&, ContentSecurityPolicy::Reporti ngStatus) const;
54 bool allowScriptNonce(const String&) const; 55 bool allowScriptNonce(const String&) const;
55 bool allowStyleNonce(const String&) const; 56 bool allowStyleNonce(const String&) const;
56 bool allowScriptHash(const CSPHashValue&) const; 57 bool allowScriptHash(const CSPHashValue&) const;
57 bool allowStyleHash(const CSPHashValue&) const; 58 bool allowStyleHash(const CSPHashValue&) const;
58 59
(...skipping 61 matching lines...) Expand 10 before | Expand all | Expand 10 after
120 OwnPtr<SourceListDirective> m_baseURI; 121 OwnPtr<SourceListDirective> m_baseURI;
121 OwnPtr<SourceListDirective> m_childSrc; 122 OwnPtr<SourceListDirective> m_childSrc;
122 OwnPtr<SourceListDirective> m_connectSrc; 123 OwnPtr<SourceListDirective> m_connectSrc;
123 OwnPtr<SourceListDirective> m_defaultSrc; 124 OwnPtr<SourceListDirective> m_defaultSrc;
124 OwnPtr<SourceListDirective> m_fontSrc; 125 OwnPtr<SourceListDirective> m_fontSrc;
125 OwnPtr<SourceListDirective> m_formAction; 126 OwnPtr<SourceListDirective> m_formAction;
126 OwnPtr<SourceListDirective> m_frameAncestors; 127 OwnPtr<SourceListDirective> m_frameAncestors;
127 OwnPtr<SourceListDirective> m_frameSrc; 128 OwnPtr<SourceListDirective> m_frameSrc;
128 OwnPtr<SourceListDirective> m_imgSrc; 129 OwnPtr<SourceListDirective> m_imgSrc;
129 OwnPtr<SourceListDirective> m_mediaSrc; 130 OwnPtr<SourceListDirective> m_mediaSrc;
131 OwnPtr<SourceListDirective> m_manifestSrc;
130 OwnPtr<SourceListDirective> m_objectSrc; 132 OwnPtr<SourceListDirective> m_objectSrc;
131 OwnPtr<SourceListDirective> m_scriptSrc; 133 OwnPtr<SourceListDirective> m_scriptSrc;
132 OwnPtr<SourceListDirective> m_styleSrc; 134 OwnPtr<SourceListDirective> m_styleSrc;
133 135
134 Vector<String> m_reportEndpoints; 136 Vector<String> m_reportEndpoints;
135 137
136 String m_evalDisabledErrorMessage; 138 String m_evalDisabledErrorMessage;
137 }; 139 };
138 140
139 141
140 } // namespace 142 } // namespace
141 143
142 #endif 144 #endif
OLDNEW
« no previous file with comments | « Source/core/fetch/ResourceFetcher.cpp ('k') | Source/core/frame/csp/CSPDirectiveList.cpp » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698