Source/core/frame/ContentSecurityPolicy.h - Issue 91353002: CSP 1.1: Implement the 'frame-ancestors' directive.

Side by Side Diff: Source/core/frame/ContentSecurityPolicy.h

Issue 91353002: CSP 1.1: Implement the 'frame-ancestors' directive. (Closed) Base URL: svn://svn.chromium.org/blink/trunk

Patch Set: Rebase. Created 6 years, 11 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch | Annotate | Revision Log

« no previous file with comments | « LayoutTests/http/tests/security/contentSecurityPolicy/resources/frame-in-frame.pl ('k') | Source/core/frame/ContentSecurityPolicy.cpp » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

OLD	NEW
1 /*	1 /*

2 * Copyright (C) 2011 Google, Inc. All rights reserved.	2 * Copyright (C) 2011 Google, Inc. All rights reserved.

3 *	3 *

4 * Redistribution and use in source and binary forms, with or without	4 * Redistribution and use in source and binary forms, with or without

5 * modification, are permitted provided that the following conditions	5 * modification, are permitted provided that the following conditions

6 * are met:	6 * are met:

7 * 1. Redistributions of source code must retain the above copyright	7 * 1. Redistributions of source code must retain the above copyright

8 * notice, this list of conditions and the following disclaimer.	8 * notice, this list of conditions and the following disclaimer.

9 * 2. Redistributions in binary form must reproduce the above copyright	9 * 2. Redistributions in binary form must reproduce the above copyright

10 * notice, this list of conditions and the following disclaimer in the	10 * notice, this list of conditions and the following disclaimer in the

(...skipping 92 matching lines...) Expand 10 before \| Expand all \| Expand 10 after Loading...
103 bool allowScriptFromSource(const KURL&, ReportingStatus = SendReport) const;	103 bool allowScriptFromSource(const KURL&, ReportingStatus = SendReport) const;

104 bool allowObjectFromSource(const KURL&, ReportingStatus = SendReport) const;	104 bool allowObjectFromSource(const KURL&, ReportingStatus = SendReport) const;

105 bool allowChildFrameFromSource(const KURL&, ReportingStatus = SendReport) co nst;	105 bool allowChildFrameFromSource(const KURL&, ReportingStatus = SendReport) co nst;

106 bool allowImageFromSource(const KURL&, ReportingStatus = SendReport) const;	106 bool allowImageFromSource(const KURL&, ReportingStatus = SendReport) const;

107 bool allowStyleFromSource(const KURL&, ReportingStatus = SendReport) const;	107 bool allowStyleFromSource(const KURL&, ReportingStatus = SendReport) const;

108 bool allowFontFromSource(const KURL&, ReportingStatus = SendReport) const;	108 bool allowFontFromSource(const KURL&, ReportingStatus = SendReport) const;

109 bool allowMediaFromSource(const KURL&, ReportingStatus = SendReport) const;	109 bool allowMediaFromSource(const KURL&, ReportingStatus = SendReport) const;

110 bool allowConnectToSource(const KURL&, ReportingStatus = SendReport) const;	110 bool allowConnectToSource(const KURL&, ReportingStatus = SendReport) const;

111 bool allowFormAction(const KURL&, ReportingStatus = SendReport) const;	111 bool allowFormAction(const KURL&, ReportingStatus = SendReport) const;

112 bool allowBaseURI(const KURL&, ReportingStatus = SendReport) const;	112 bool allowBaseURI(const KURL&, ReportingStatus = SendReport) const;

	113 bool allowAncestors(Frame*, ReportingStatus = SendReport) const;

	114

113 // The nonce and hash allow functions are guaranteed to not have any side	115 // The nonce and hash allow functions are guaranteed to not have any side

114 // effects, including reporting.	116 // effects, including reporting.

115 bool allowScriptNonce(const String& nonce) const;	117 bool allowScriptNonce(const String& nonce) const;

116 bool allowStyleNonce(const String& nonce) const;	118 bool allowStyleNonce(const String& nonce) const;

117 bool allowScriptHash(const String& source) const;	119 bool allowScriptHash(const String& source) const;

118 bool allowStyleHash(const String& source) const;	120 bool allowStyleHash(const String& source) const;

119	121

120 void usesScriptHashAlgorithms(uint8_t HashAlgorithms);	122 void usesScriptHashAlgorithms(uint8_t HashAlgorithms);

121 void usesStyleHashAlgorithms(uint8_t HashAlgorithms);	123 void usesStyleHashAlgorithms(uint8_t HashAlgorithms);

122	124

(...skipping 53 matching lines...) Expand 10 before \| Expand all \| Expand 10 after Loading...
176 // We put the hash functions used on the policy object so that we only need	178 // We put the hash functions used on the policy object so that we only need

177 // to calculate a hash once and then distribute it to all of the directives	179 // to calculate a hash once and then distribute it to all of the directives

178 // for validation.	180 // for validation.

179 uint8_t m_scriptHashAlgorithmsUsed;	181 uint8_t m_scriptHashAlgorithmsUsed;

180 uint8_t m_styleHashAlgorithmsUsed;	182 uint8_t m_styleHashAlgorithmsUsed;

181 };	183 };

182	184

183 }	185 }

184	186

185 #endif	187 #endif

OLD	NEW