OLD | NEW |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef EXTENSIONS_COMMON_MANIFEST_HANDLERS_CSP_INFO_H_ | 5 #ifndef EXTENSIONS_COMMON_MANIFEST_HANDLERS_CSP_INFO_H_ |
6 #define EXTENSIONS_COMMON_MANIFEST_HANDLERS_CSP_INFO_H_ | 6 #define EXTENSIONS_COMMON_MANIFEST_HANDLERS_CSP_INFO_H_ |
7 | 7 |
8 #include <string> | 8 #include <string> |
9 | 9 |
10 #include "extensions/common/extension.h" | 10 #include "extensions/common/extension.h" |
11 #include "extensions/common/manifest_handler.h" | 11 #include "extensions/common/manifest_handler.h" |
12 | 12 |
13 namespace extensions { | 13 namespace extensions { |
14 | 14 |
15 // A structure to hold the Content-Security-Policy information. | 15 // A structure to hold the Content-Security-Policy information. |
16 struct CSPInfo : public Extension::ManifestData { | 16 struct CSPInfo : public Extension::ManifestData { |
17 explicit CSPInfo(const std::string& security_policy); | 17 explicit CSPInfo(const std::string& security_policy); |
18 virtual ~CSPInfo(); | 18 ~CSPInfo() override; |
19 | 19 |
20 // The Content-Security-Policy for an extension. Extensions can use | 20 // The Content-Security-Policy for an extension. Extensions can use |
21 // Content-Security-Policies to mitigate cross-site scripting and other | 21 // Content-Security-Policies to mitigate cross-site scripting and other |
22 // vulnerabilities. | 22 // vulnerabilities. |
23 std::string content_security_policy; | 23 std::string content_security_policy; |
24 | 24 |
25 static const std::string& GetContentSecurityPolicy( | 25 static const std::string& GetContentSecurityPolicy( |
26 const Extension* extension); | 26 const Extension* extension); |
27 | 27 |
28 // Returns the Content Security Policy that the specified resource should be | 28 // Returns the Content Security Policy that the specified resource should be |
29 // served with. | 29 // served with. |
30 static const std::string& GetResourceContentSecurityPolicy( | 30 static const std::string& GetResourceContentSecurityPolicy( |
31 const Extension* extension, | 31 const Extension* extension, |
32 const std::string& relative_path); | 32 const std::string& relative_path); |
33 }; | 33 }; |
34 | 34 |
35 // Parses "content_security_policy" and "app.content_security_policy" keys. | 35 // Parses "content_security_policy" and "app.content_security_policy" keys. |
36 class CSPHandler : public ManifestHandler { | 36 class CSPHandler : public ManifestHandler { |
37 public: | 37 public: |
38 explicit CSPHandler(bool is_platform_app); | 38 explicit CSPHandler(bool is_platform_app); |
39 virtual ~CSPHandler(); | 39 ~CSPHandler() override; |
40 | 40 |
41 virtual bool Parse(Extension* extension, base::string16* error) override; | 41 bool Parse(Extension* extension, base::string16* error) override; |
42 virtual bool AlwaysParseForType(Manifest::Type type) const override; | 42 bool AlwaysParseForType(Manifest::Type type) const override; |
43 | 43 |
44 private: | 44 private: |
45 virtual const std::vector<std::string> Keys() const override; | 45 const std::vector<std::string> Keys() const override; |
46 | 46 |
47 bool is_platform_app_; | 47 bool is_platform_app_; |
48 | 48 |
49 DISALLOW_COPY_AND_ASSIGN(CSPHandler); | 49 DISALLOW_COPY_AND_ASSIGN(CSPHandler); |
50 }; | 50 }; |
51 | 51 |
52 } // namespace extensions | 52 } // namespace extensions |
53 | 53 |
54 #endif // EXTENSIONS_COMMON_MANIFEST_HANDLERS_CSP_INFO_H_ | 54 #endif // EXTENSIONS_COMMON_MANIFEST_HANDLERS_CSP_INFO_H_ |
OLD | NEW |