Source/core/frame/ContentSecurityPolicy.h - Issue 91353002: CSP 1.1: Implement the 'frame-ancestors' directive.

Side by Side Diff: Source/core/frame/ContentSecurityPolicy.h

Issue 91353002: CSP 1.1: Implement the 'frame-ancestors' directive. (Closed) Base URL: svn://svn.chromium.org/blink/trunk

Patch Set: Ugh. Created 6 years, 11 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch | Annotate | Revision Log

« no previous file with comments | « LayoutTests/http/tests/security/contentSecurityPolicy/resources/frame-ancestors-test.js ('k') | Source/core/frame/ContentSecurityPolicy.cpp » ('j') | Source/core/loader/FrameLoader.cpp » ('J')
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Hide Comments ('s')

OLD	NEW
1 /*	1 /*

2 * Copyright (C) 2011 Google, Inc. All rights reserved.	2 * Copyright (C) 2011 Google, Inc. All rights reserved.

3 *	3 *

4 * Redistribution and use in source and binary forms, with or without	4 * Redistribution and use in source and binary forms, with or without

5 * modification, are permitted provided that the following conditions	5 * modification, are permitted provided that the following conditions

6 * are met:	6 * are met:

7 * 1. Redistributions of source code must retain the above copyright	7 * 1. Redistributions of source code must retain the above copyright

8 * notice, this list of conditions and the following disclaimer.	8 * notice, this list of conditions and the following disclaimer.

9 * 2. Redistributions in binary form must reproduce the above copyright	9 * 2. Redistributions in binary form must reproduce the above copyright

10 * notice, this list of conditions and the following disclaimer in the	10 * notice, this list of conditions and the following disclaimer in the

(...skipping 86 matching lines...) Expand 10 before \| Expand all \| Expand 10 after Loading...
97 bool allowScriptFromSource(const KURL&, ReportingStatus = SendReport) const;	97 bool allowScriptFromSource(const KURL&, ReportingStatus = SendReport) const;

98 bool allowObjectFromSource(const KURL&, ReportingStatus = SendReport) const;	98 bool allowObjectFromSource(const KURL&, ReportingStatus = SendReport) const;

99 bool allowChildFrameFromSource(const KURL&, ReportingStatus = SendReport) co nst;	99 bool allowChildFrameFromSource(const KURL&, ReportingStatus = SendReport) co nst;

100 bool allowImageFromSource(const KURL&, ReportingStatus = SendReport) const;	100 bool allowImageFromSource(const KURL&, ReportingStatus = SendReport) const;

101 bool allowStyleFromSource(const KURL&, ReportingStatus = SendReport) const;	101 bool allowStyleFromSource(const KURL&, ReportingStatus = SendReport) const;

102 bool allowFontFromSource(const KURL&, ReportingStatus = SendReport) const;	102 bool allowFontFromSource(const KURL&, ReportingStatus = SendReport) const;

103 bool allowMediaFromSource(const KURL&, ReportingStatus = SendReport) const;	103 bool allowMediaFromSource(const KURL&, ReportingStatus = SendReport) const;

104 bool allowConnectToSource(const KURL&, ReportingStatus = SendReport) const;	104 bool allowConnectToSource(const KURL&, ReportingStatus = SendReport) const;

105 bool allowFormAction(const KURL&, ReportingStatus = SendReport) const;	105 bool allowFormAction(const KURL&, ReportingStatus = SendReport) const;

106 bool allowBaseURI(const KURL&, ReportingStatus = SendReport) const;	106 bool allowBaseURI(const KURL&, ReportingStatus = SendReport) const;

	107 bool allowAncestors(Frame*, ReportingStatus = SendReport) const;

	108

107 // The nonce and hash allow functions are guaranteed to not have any side	109 // The nonce and hash allow functions are guaranteed to not have any side

108 // effects, including reporting.	110 // effects, including reporting.

109 bool allowScriptNonce(const String& nonce) const;	111 bool allowScriptNonce(const String& nonce) const;

110 bool allowStyleNonce(const String& nonce) const;	112 bool allowStyleNonce(const String& nonce) const;

111 bool allowScriptHash(const String& source) const;	113 bool allowScriptHash(const String& source) const;

112	114

113 void usesScriptHashAlgorithms(uint8_t HashAlgorithms);	115 void usesScriptHashAlgorithms(uint8_t HashAlgorithms);

114	116

115 ReflectedXSSDisposition reflectedXSSDisposition() const;	117 ReflectedXSSDisposition reflectedXSSDisposition() const;

116	118

(...skipping 45 matching lines...) Expand 10 before \| Expand all \| Expand 10 after Loading...
162	164

163 // We put the hash functions used on the policy object so that we only need	165 // We put the hash functions used on the policy object so that we only need

164 // to calculate a script hash once and then distribute it to all of the	166 // to calculate a script hash once and then distribute it to all of the

165 // directives for validation.	167 // directives for validation.

166 uint8_t m_sourceHashAlgorithmsUsed;	168 uint8_t m_sourceHashAlgorithmsUsed;

167 };	169 };

168	170

169 }	171 }

170	172

171 #endif	173 #endif

OLD	NEW