webkit  2cdf99a9e3038c7e01b3c37e8ad903ecbe5eecf1
https://github.com/WebKit/webkit
Public Types | Public Member Functions | List of all members
WebCore::ContentSecurityPolicy Class Reference

#include <ContentSecurityPolicy.h>

Public Types

enum  PolicyFrom {
  PolicyFrom::API, PolicyFrom::HTTPEquivMeta, PolicyFrom::HTTPHeader, PolicyFrom::Inherited,
  PolicyFrom::API, PolicyFrom::HTTPEquivMeta, PolicyFrom::HTTPHeader, PolicyFrom::Inherited
}
 
enum  ReportParsingErrors {
  No, Yes, No, No,
  No, Yes, Yes, Yes
}
 
enum  RedirectResponseReceived { No, Yes, RedirectResponseReceived::No, RedirectResponseReceived::Yes }
 
enum  InsecureRequestType {
  InsecureRequestType::Load, InsecureRequestType::FormSubmission, InsecureRequestType::Navigation, InsecureRequestType::Load,
  InsecureRequestType::FormSubmission, InsecureRequestType::Navigation
}
 
enum  PolicyFrom {
  PolicyFrom::API, PolicyFrom::HTTPEquivMeta, PolicyFrom::HTTPHeader, PolicyFrom::Inherited,
  PolicyFrom::API, PolicyFrom::HTTPEquivMeta, PolicyFrom::HTTPHeader, PolicyFrom::Inherited
}
 
enum  ReportParsingErrors {
  No, Yes, No, No,
  No, Yes, Yes, Yes
}
 
enum  RedirectResponseReceived { No, Yes, RedirectResponseReceived::No, RedirectResponseReceived::Yes }
 
enum  InsecureRequestType {
  InsecureRequestType::Load, InsecureRequestType::FormSubmission, InsecureRequestType::Navigation, InsecureRequestType::Load,
  InsecureRequestType::FormSubmission, InsecureRequestType::Navigation
}
 

Public Member Functions

 ContentSecurityPolicy (ScriptExecutionContext &)
 
 ContentSecurityPolicy (const SecurityOrigin &, const Frame *=nullptr)
 
 ~ContentSecurityPolicy ()
 
void copyStateFrom (const ContentSecurityPolicy *)
 
void copyUpgradeInsecureRequestStateFrom (const ContentSecurityPolicy &)
 
void didCreateWindowShell (JSDOMWindowShell &) const
 
ContentSecurityPolicyResponseHeaders responseHeaders () const
 
void didReceiveHeaders (const ContentSecurityPolicyResponseHeaders &, ReportParsingErrors=ReportParsingErrors::Yes)
 
void didReceiveHeader (const String &, ContentSecurityPolicyHeaderType, ContentSecurityPolicy::PolicyFrom)
 
bool allowScriptWithNonce (const String &nonce, bool overrideContentSecurityPolicy=false) const
 
bool allowStyleWithNonce (const String &nonce, bool overrideContentSecurityPolicy=false) const
 
bool allowJavaScriptURLs (const String &contextURL, const WTF::OrdinalNumber &contextLine, bool overrideContentSecurityPolicy=false) const
 
bool allowInlineEventHandlers (const String &contextURL, const WTF::OrdinalNumber &contextLine, bool overrideContentSecurityPolicy=false) const
 
bool allowInlineScript (const String &contextURL, const WTF::OrdinalNumber &contextLine, const String &scriptContent, bool overrideContentSecurityPolicy=false) const
 
bool allowInlineStyle (const String &contextURL, const WTF::OrdinalNumber &contextLine, const String &styleContent, bool overrideContentSecurityPolicy=false) const
 
bool allowEval (JSC::ExecState *, bool overrideContentSecurityPolicy=false) const
 
bool allowPluginType (const String &type, const String &typeAttribute, const URL &, bool overrideContentSecurityPolicy=false) const
 
bool allowFrameAncestors (const Frame &, const URL &, bool overrideContentSecurityPolicy=false) const
 
bool allowScriptFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowImageFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowStyleFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowFontFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowMediaFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowChildFrameFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowChildContextFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowConnectToSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowFormAction (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowObjectFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowBaseURI (const URL &, bool overrideContentSecurityPolicy=false) const
 
void setOverrideAllowInlineStyle (bool)
 
void gatherReportURIs (DOMStringList &) const
 
bool allowRunningOrDisplayingInsecureContent (const URL &)
 
void reportInvalidPluginTypes (const String &) const
 
void reportDirectiveAsSourceExpression (const String &directiveName, const String &sourceExpression) const
 
void reportInvalidPathCharacter (const String &directiveName, const String &value, const char) const
 
void reportInvalidSourceExpression (const String &directiveName, const String &source) const
 
bool urlMatchesSelf (const URL &) const
 
bool allowContentSecurityPolicySourceStarToMatchAnyProtocol () const
 
void reportDuplicateDirective (const String &) const
 
void reportInvalidDirectiveValueCharacter (const String &directiveName, const String &value) const
 
void reportInvalidSandboxFlags (const String &) const
 
void reportInvalidDirectiveInReportOnlyMode (const String &) const
 
void reportInvalidDirectiveInHTTPEquivMeta (const String &) const
 
void reportMissingReportURI (const String &) const
 
void reportUnsupportedDirective (const String &) const
 
void enforceSandboxFlags (SandboxFlags sandboxFlags)
 
void addHashAlgorithmsForInlineScripts (OptionSet< ContentSecurityPolicyHashAlgorithm > hashAlgorithmsForInlineScripts)
 
void addHashAlgorithmsForInlineStylesheets (OptionSet< ContentSecurityPolicyHashAlgorithm > hashAlgorithmsForInlineStylesheets)
 
bool protocolMatchesSelf (const URL &) const
 
void setUpgradeInsecureRequests (bool)
 
bool upgradeInsecureRequests () const
 
void upgradeInsecureRequestIfNeeded (ResourceRequest &, InsecureRequestType) const
 
void upgradeInsecureRequestIfNeeded (URL &, InsecureRequestType) const
 
HashSet< RefPtr< SecurityOrigin > > && takeNavigationRequestsToUpgrade ()
 
void inheritInsecureNavigationRequestsToUpgradeFromOpener (const ContentSecurityPolicy &)
 
void setInsecureNavigationRequestsToUpgrade (HashSet< RefPtr< SecurityOrigin >> &&)
 
 ContentSecurityPolicy (ScriptExecutionContext &)
 
 ContentSecurityPolicy (const SecurityOrigin &, const Frame *=nullptr)
 
 ~ContentSecurityPolicy ()
 
void copyStateFrom (const ContentSecurityPolicy *)
 
void copyUpgradeInsecureRequestStateFrom (const ContentSecurityPolicy &)
 
void didCreateWindowShell (JSDOMWindowShell &) const
 
ContentSecurityPolicyResponseHeaders responseHeaders () const
 
void didReceiveHeaders (const ContentSecurityPolicyResponseHeaders &, ReportParsingErrors=ReportParsingErrors::Yes)
 
void didReceiveHeader (const String &, ContentSecurityPolicyHeaderType, ContentSecurityPolicy::PolicyFrom)
 
bool allowScriptWithNonce (const String &nonce, bool overrideContentSecurityPolicy=false) const
 
bool allowStyleWithNonce (const String &nonce, bool overrideContentSecurityPolicy=false) const
 
bool allowJavaScriptURLs (const String &contextURL, const WTF::OrdinalNumber &contextLine, bool overrideContentSecurityPolicy=false) const
 
bool allowInlineEventHandlers (const String &contextURL, const WTF::OrdinalNumber &contextLine, bool overrideContentSecurityPolicy=false) const
 
bool allowInlineScript (const String &contextURL, const WTF::OrdinalNumber &contextLine, const String &scriptContent, bool overrideContentSecurityPolicy=false) const
 
bool allowInlineStyle (const String &contextURL, const WTF::OrdinalNumber &contextLine, const String &styleContent, bool overrideContentSecurityPolicy=false) const
 
bool allowEval (JSC::ExecState *, bool overrideContentSecurityPolicy=false) const
 
bool allowPluginType (const String &type, const String &typeAttribute, const URL &, bool overrideContentSecurityPolicy=false) const
 
bool allowFrameAncestors (const Frame &, const URL &, bool overrideContentSecurityPolicy=false) const
 
bool allowScriptFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowImageFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowStyleFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowFontFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowMediaFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowChildFrameFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowChildContextFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowConnectToSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowFormAction (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowObjectFromSource (const URL &, RedirectResponseReceived=RedirectResponseReceived::No) const
 
bool allowBaseURI (const URL &, bool overrideContentSecurityPolicy=false) const
 
void setOverrideAllowInlineStyle (bool)
 
void gatherReportURIs (DOMStringList &) const
 
bool allowRunningOrDisplayingInsecureContent (const URL &)
 
void reportInvalidPluginTypes (const String &) const
 
void reportDirectiveAsSourceExpression (const String &directiveName, const String &sourceExpression) const
 
void reportInvalidPathCharacter (const String &directiveName, const String &value, const char) const
 
void reportInvalidSourceExpression (const String &directiveName, const String &source) const
 
bool urlMatchesSelf (const URL &) const
 
bool allowContentSecurityPolicySourceStarToMatchAnyProtocol () const
 
void reportDuplicateDirective (const String &) const
 
void reportInvalidDirectiveValueCharacter (const String &directiveName, const String &value) const
 
void reportInvalidSandboxFlags (const String &) const
 
void reportInvalidDirectiveInReportOnlyMode (const String &) const
 
void reportInvalidDirectiveInHTTPEquivMeta (const String &) const
 
void reportMissingReportURI (const String &) const
 
void reportUnsupportedDirective (const String &) const
 
void enforceSandboxFlags (SandboxFlags sandboxFlags)
 
void addHashAlgorithmsForInlineScripts (OptionSet< ContentSecurityPolicyHashAlgorithm > hashAlgorithmsForInlineScripts)
 
void addHashAlgorithmsForInlineStylesheets (OptionSet< ContentSecurityPolicyHashAlgorithm > hashAlgorithmsForInlineStylesheets)
 
bool protocolMatchesSelf (const URL &) const
 
void setUpgradeInsecureRequests (bool)
 
bool upgradeInsecureRequests () const
 
void upgradeInsecureRequestIfNeeded (ResourceRequest &, InsecureRequestType) const
 
void upgradeInsecureRequestIfNeeded (URL &, InsecureRequestType) const
 
HashSet< RefPtr< SecurityOrigin > > && takeNavigationRequestsToUpgrade ()
 
void inheritInsecureNavigationRequestsToUpgradeFromOpener (const ContentSecurityPolicy &)
 
void setInsecureNavigationRequestsToUpgrade (HashSet< RefPtr< SecurityOrigin >> &&)
 
template<typename Predicate , typename... Args>
std::enable_if<!std::is_convertible< Predicate, ContentSecurityPolicy::ViolatedDirectiveCallback >::value, bool >::type allPoliciesWithDispositionAllow (Disposition disposition, Predicate &&predicate, Args &&... args) const
 
template<typename Predicate , typename... Args>
bool allPoliciesWithDispositionAllow (Disposition disposition, ViolatedDirectiveCallback &&callback, Predicate &&predicate, Args &&... args) const
 
template<typename Predicate , typename... Args>
bool allPoliciesAllow (ViolatedDirectiveCallback &&callback, Predicate &&predicate, Args &&... args) const
 

Member Enumeration Documentation

◆ InsecureRequestType [1/2]

Enumerator
Load 
FormSubmission 
Navigation 
Load 
FormSubmission 
Navigation 

◆ InsecureRequestType [2/2]

Enumerator
Load 
FormSubmission 
Navigation 
Load 
FormSubmission 
Navigation 

◆ PolicyFrom [1/2]

Enumerator
API 
HTTPEquivMeta 
HTTPHeader 
Inherited 
API 
HTTPEquivMeta 
HTTPHeader 
Inherited 

◆ PolicyFrom [2/2]

Enumerator
API 
HTTPEquivMeta 
HTTPHeader 
Inherited 
API 
HTTPEquivMeta 
HTTPHeader 
Inherited 

◆ RedirectResponseReceived [1/2]

Enumerator
No 
Yes 
No 
Yes 

◆ RedirectResponseReceived [2/2]

Enumerator
No 
Yes 
No 
Yes 

◆ ReportParsingErrors [1/2]

Enumerator
No 
Yes 
No 
No 
No 
Yes 
Yes 
Yes 

◆ ReportParsingErrors [2/2]

Enumerator
No 
Yes 
No 
No 
No 
Yes 
Yes 
Yes 

Constructor & Destructor Documentation

◆ ContentSecurityPolicy() [1/4]

WebCore::ContentSecurityPolicy::ContentSecurityPolicy ( ScriptExecutionContext scriptExecutionContext)
explicit

◆ ContentSecurityPolicy() [2/4]

WebCore::ContentSecurityPolicy::ContentSecurityPolicy ( const SecurityOrigin securityOrigin,
const Frame frame = nullptr 
)
explicit

◆ ~ContentSecurityPolicy() [1/2]

WebCore::ContentSecurityPolicy::~ContentSecurityPolicy ( )

◆ ContentSecurityPolicy() [3/4]

WebCore::ContentSecurityPolicy::ContentSecurityPolicy ( ScriptExecutionContext )
explicit

◆ ContentSecurityPolicy() [4/4]

WebCore::ContentSecurityPolicy::ContentSecurityPolicy ( const SecurityOrigin ,
const Frame = nullptr 
)
explicit

◆ ~ContentSecurityPolicy() [2/2]

WebCore::ContentSecurityPolicy::~ContentSecurityPolicy ( )

Member Function Documentation

◆ addHashAlgorithmsForInlineScripts() [1/2]

void WebCore::ContentSecurityPolicy::addHashAlgorithmsForInlineScripts ( OptionSet< ContentSecurityPolicyHashAlgorithm hashAlgorithmsForInlineScripts)
inline

◆ addHashAlgorithmsForInlineScripts() [2/2]

void WebCore::ContentSecurityPolicy::addHashAlgorithmsForInlineScripts ( OptionSet< ContentSecurityPolicyHashAlgorithm hashAlgorithmsForInlineScripts)
inline

◆ addHashAlgorithmsForInlineStylesheets() [1/2]

void WebCore::ContentSecurityPolicy::addHashAlgorithmsForInlineStylesheets ( OptionSet< ContentSecurityPolicyHashAlgorithm hashAlgorithmsForInlineStylesheets)
inline

◆ addHashAlgorithmsForInlineStylesheets() [2/2]

void WebCore::ContentSecurityPolicy::addHashAlgorithmsForInlineStylesheets ( OptionSet< ContentSecurityPolicyHashAlgorithm hashAlgorithmsForInlineStylesheets)
inline

◆ allowBaseURI() [1/2]

bool WebCore::ContentSecurityPolicy::allowBaseURI ( const URL ,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowBaseURI() [2/2]

bool WebCore::ContentSecurityPolicy::allowBaseURI ( const URL url,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowChildContextFromSource() [1/2]

bool WebCore::ContentSecurityPolicy::allowChildContextFromSource ( const URL ,
RedirectResponseReceived  = RedirectResponseReceived::No 
) const

◆ allowChildContextFromSource() [2/2]

bool WebCore::ContentSecurityPolicy::allowChildContextFromSource ( const URL url,
RedirectResponseReceived  redirectResponseReceived = RedirectResponseReceived::No 
) const

◆ allowChildFrameFromSource() [1/2]

bool WebCore::ContentSecurityPolicy::allowChildFrameFromSource ( const URL ,
RedirectResponseReceived  = RedirectResponseReceived::No 
) const

◆ allowChildFrameFromSource() [2/2]

bool WebCore::ContentSecurityPolicy::allowChildFrameFromSource ( const URL url,
RedirectResponseReceived  redirectResponseReceived = RedirectResponseReceived::No 
) const

◆ allowConnectToSource() [1/2]

bool WebCore::ContentSecurityPolicy::allowConnectToSource ( const URL ,
RedirectResponseReceived  = RedirectResponseReceived::No 
) const

◆ allowConnectToSource() [2/2]

bool WebCore::ContentSecurityPolicy::allowConnectToSource ( const URL url,
RedirectResponseReceived  redirectResponseReceived = RedirectResponseReceived::No 
) const

◆ allowContentSecurityPolicySourceStarToMatchAnyProtocol() [1/2]

bool WebCore::ContentSecurityPolicy::allowContentSecurityPolicySourceStarToMatchAnyProtocol ( ) const

◆ allowContentSecurityPolicySourceStarToMatchAnyProtocol() [2/2]

bool WebCore::ContentSecurityPolicy::allowContentSecurityPolicySourceStarToMatchAnyProtocol ( ) const

◆ allowEval() [1/2]

bool WebCore::ContentSecurityPolicy::allowEval ( JSC::ExecState ,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowEval() [2/2]

bool WebCore::ContentSecurityPolicy::allowEval ( JSC::ExecState state,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowFontFromSource() [1/2]

bool WebCore::ContentSecurityPolicy::allowFontFromSource ( const URL ,
RedirectResponseReceived  = RedirectResponseReceived::No 
) const

◆ allowFontFromSource() [2/2]

bool WebCore::ContentSecurityPolicy::allowFontFromSource ( const URL url,
RedirectResponseReceived  redirectResponseReceived = RedirectResponseReceived::No 
) const

◆ allowFormAction() [1/2]

bool WebCore::ContentSecurityPolicy::allowFormAction ( const URL ,
RedirectResponseReceived  = RedirectResponseReceived::No 
) const

◆ allowFormAction() [2/2]

bool WebCore::ContentSecurityPolicy::allowFormAction ( const URL url,
RedirectResponseReceived  redirectResponseReceived = RedirectResponseReceived::No 
) const

◆ allowFrameAncestors() [1/2]

bool WebCore::ContentSecurityPolicy::allowFrameAncestors ( const Frame ,
const URL ,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowFrameAncestors() [2/2]

bool WebCore::ContentSecurityPolicy::allowFrameAncestors ( const Frame frame,
const URL url,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowImageFromSource() [1/2]

bool WebCore::ContentSecurityPolicy::allowImageFromSource ( const URL url,
RedirectResponseReceived  redirectResponseReceived = RedirectResponseReceived::No 
) const

◆ allowImageFromSource() [2/2]

bool WebCore::ContentSecurityPolicy::allowImageFromSource ( const URL ,
RedirectResponseReceived  = RedirectResponseReceived::No 
) const

◆ allowInlineEventHandlers() [1/2]

bool WebCore::ContentSecurityPolicy::allowInlineEventHandlers ( const String contextURL,
const WTF::OrdinalNumber contextLine,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowInlineEventHandlers() [2/2]

bool WebCore::ContentSecurityPolicy::allowInlineEventHandlers ( const String contextURL,
const WTF::OrdinalNumber contextLine,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowInlineScript() [1/2]

bool WebCore::ContentSecurityPolicy::allowInlineScript ( const String contextURL,
const WTF::OrdinalNumber contextLine,
const String scriptContent,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowInlineScript() [2/2]

bool WebCore::ContentSecurityPolicy::allowInlineScript ( const String contextURL,
const WTF::OrdinalNumber contextLine,
const String scriptContent,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowInlineStyle() [1/2]

bool WebCore::ContentSecurityPolicy::allowInlineStyle ( const String contextURL,
const WTF::OrdinalNumber contextLine,
const String styleContent,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowInlineStyle() [2/2]

bool WebCore::ContentSecurityPolicy::allowInlineStyle ( const String contextURL,
const WTF::OrdinalNumber contextLine,
const String styleContent,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowJavaScriptURLs() [1/2]

bool WebCore::ContentSecurityPolicy::allowJavaScriptURLs ( const String contextURL,
const WTF::OrdinalNumber contextLine,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowJavaScriptURLs() [2/2]

bool WebCore::ContentSecurityPolicy::allowJavaScriptURLs ( const String contextURL,
const WTF::OrdinalNumber contextLine,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowMediaFromSource() [1/2]

bool WebCore::ContentSecurityPolicy::allowMediaFromSource ( const URL ,
RedirectResponseReceived  = RedirectResponseReceived::No 
) const

◆ allowMediaFromSource() [2/2]

bool WebCore::ContentSecurityPolicy::allowMediaFromSource ( const URL url,
RedirectResponseReceived  redirectResponseReceived = RedirectResponseReceived::No 
) const

◆ allowObjectFromSource() [1/2]

bool WebCore::ContentSecurityPolicy::allowObjectFromSource ( const URL ,
RedirectResponseReceived  = RedirectResponseReceived::No 
) const

◆ allowObjectFromSource() [2/2]

bool WebCore::ContentSecurityPolicy::allowObjectFromSource ( const URL url,
RedirectResponseReceived  redirectResponseReceived = RedirectResponseReceived::No 
) const

◆ allowPluginType() [1/2]

bool WebCore::ContentSecurityPolicy::allowPluginType ( const String type,
const String typeAttribute,
const URL ,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowPluginType() [2/2]

bool WebCore::ContentSecurityPolicy::allowPluginType ( const String type,
const String typeAttribute,
const URL url,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowRunningOrDisplayingInsecureContent() [1/2]

bool WebCore::ContentSecurityPolicy::allowRunningOrDisplayingInsecureContent ( const URL )

◆ allowRunningOrDisplayingInsecureContent() [2/2]

bool WebCore::ContentSecurityPolicy::allowRunningOrDisplayingInsecureContent ( const URL url)

◆ allowScriptFromSource() [1/2]

bool WebCore::ContentSecurityPolicy::allowScriptFromSource ( const URL url,
RedirectResponseReceived  redirectResponseReceived = RedirectResponseReceived::No 
) const

◆ allowScriptFromSource() [2/2]

bool WebCore::ContentSecurityPolicy::allowScriptFromSource ( const URL ,
RedirectResponseReceived  = RedirectResponseReceived::No 
) const

◆ allowScriptWithNonce() [1/2]

bool WebCore::ContentSecurityPolicy::allowScriptWithNonce ( const String nonce,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowScriptWithNonce() [2/2]

bool WebCore::ContentSecurityPolicy::allowScriptWithNonce ( const String nonce,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowStyleFromSource() [1/2]

bool WebCore::ContentSecurityPolicy::allowStyleFromSource ( const URL ,
RedirectResponseReceived  = RedirectResponseReceived::No 
) const

◆ allowStyleFromSource() [2/2]

bool WebCore::ContentSecurityPolicy::allowStyleFromSource ( const URL url,
RedirectResponseReceived  redirectResponseReceived = RedirectResponseReceived::No 
) const

◆ allowStyleWithNonce() [1/2]

bool WebCore::ContentSecurityPolicy::allowStyleWithNonce ( const String nonce,
bool  overrideContentSecurityPolicy = false 
) const

◆ allowStyleWithNonce() [2/2]

bool WebCore::ContentSecurityPolicy::allowStyleWithNonce ( const String nonce,
bool  overrideContentSecurityPolicy = false 
) const

◆ allPoliciesAllow()

template<typename Predicate , typename... Args>
bool WebCore::ContentSecurityPolicy::allPoliciesAllow ( ViolatedDirectiveCallback &&  callback,
Predicate &&  predicate,
Args &&...  args 
) const

◆ allPoliciesWithDispositionAllow() [1/2]

template<typename Predicate , typename... Args>
std::enable_if<!std::is_convertible<Predicate, ContentSecurityPolicy::ViolatedDirectiveCallback>::value, bool>::type WebCore::ContentSecurityPolicy::allPoliciesWithDispositionAllow ( Disposition  disposition,
Predicate &&  predicate,
Args &&...  args 
) const

◆ allPoliciesWithDispositionAllow() [2/2]

template<typename Predicate , typename... Args>
bool WebCore::ContentSecurityPolicy::allPoliciesWithDispositionAllow ( Disposition  disposition,
ViolatedDirectiveCallback &&  callback,
Predicate &&  predicate,
Args &&...  args 
) const

◆ copyStateFrom() [1/2]

void WebCore::ContentSecurityPolicy::copyStateFrom ( const ContentSecurityPolicy )

◆ copyStateFrom() [2/2]

void WebCore::ContentSecurityPolicy::copyStateFrom ( const ContentSecurityPolicy other)

◆ copyUpgradeInsecureRequestStateFrom() [1/2]

void WebCore::ContentSecurityPolicy::copyUpgradeInsecureRequestStateFrom ( const ContentSecurityPolicy other)

◆ copyUpgradeInsecureRequestStateFrom() [2/2]

void WebCore::ContentSecurityPolicy::copyUpgradeInsecureRequestStateFrom ( const ContentSecurityPolicy )

◆ didCreateWindowShell() [1/2]

void WebCore::ContentSecurityPolicy::didCreateWindowShell ( JSDOMWindowShell ) const

◆ didCreateWindowShell() [2/2]

void WebCore::ContentSecurityPolicy::didCreateWindowShell ( JSDOMWindowShell windowShell) const

◆ didReceiveHeader() [1/2]

void WebCore::ContentSecurityPolicy::didReceiveHeader ( const String header,
ContentSecurityPolicyHeaderType  type,
ContentSecurityPolicy::PolicyFrom  policyFrom 
)

◆ didReceiveHeader() [2/2]

void WebCore::ContentSecurityPolicy::didReceiveHeader ( const String ,
ContentSecurityPolicyHeaderType  ,
ContentSecurityPolicy::PolicyFrom   
)

◆ didReceiveHeaders() [1/2]

void WebCore::ContentSecurityPolicy::didReceiveHeaders ( const ContentSecurityPolicyResponseHeaders headers,
ReportParsingErrors  reportParsingErrors = ReportParsingErrors::Yes 
)

◆ didReceiveHeaders() [2/2]

void WebCore::ContentSecurityPolicy::didReceiveHeaders ( const ContentSecurityPolicyResponseHeaders ,
ReportParsingErrors  = ReportParsingErrors::Yes 
)

◆ enforceSandboxFlags() [1/2]

void WebCore::ContentSecurityPolicy::enforceSandboxFlags ( SandboxFlags  sandboxFlags)
inline

◆ enforceSandboxFlags() [2/2]

void WebCore::ContentSecurityPolicy::enforceSandboxFlags ( SandboxFlags  sandboxFlags)
inline

◆ gatherReportURIs() [1/2]

void WebCore::ContentSecurityPolicy::gatherReportURIs ( DOMStringList ) const

◆ gatherReportURIs() [2/2]

void WebCore::ContentSecurityPolicy::gatherReportURIs ( DOMStringList ) const

◆ inheritInsecureNavigationRequestsToUpgradeFromOpener() [1/2]

void WebCore::ContentSecurityPolicy::inheritInsecureNavigationRequestsToUpgradeFromOpener ( const ContentSecurityPolicy )

◆ inheritInsecureNavigationRequestsToUpgradeFromOpener() [2/2]

void WebCore::ContentSecurityPolicy::inheritInsecureNavigationRequestsToUpgradeFromOpener ( const ContentSecurityPolicy other)

◆ protocolMatchesSelf() [1/2]

bool WebCore::ContentSecurityPolicy::protocolMatchesSelf ( const URL url) const

◆ protocolMatchesSelf() [2/2]

bool WebCore::ContentSecurityPolicy::protocolMatchesSelf ( const URL ) const

◆ reportDirectiveAsSourceExpression() [1/2]

void WebCore::ContentSecurityPolicy::reportDirectiveAsSourceExpression ( const String directiveName,
const String sourceExpression 
) const

◆ reportDirectiveAsSourceExpression() [2/2]

void WebCore::ContentSecurityPolicy::reportDirectiveAsSourceExpression ( const String directiveName,
const String sourceExpression 
) const

◆ reportDuplicateDirective() [1/2]

void WebCore::ContentSecurityPolicy::reportDuplicateDirective ( const String name) const

◆ reportDuplicateDirective() [2/2]

void WebCore::ContentSecurityPolicy::reportDuplicateDirective ( const String ) const

◆ reportInvalidDirectiveInHTTPEquivMeta() [1/2]

void WebCore::ContentSecurityPolicy::reportInvalidDirectiveInHTTPEquivMeta ( const String ) const

◆ reportInvalidDirectiveInHTTPEquivMeta() [2/2]

void WebCore::ContentSecurityPolicy::reportInvalidDirectiveInHTTPEquivMeta ( const String directiveName) const

◆ reportInvalidDirectiveInReportOnlyMode() [1/2]

void WebCore::ContentSecurityPolicy::reportInvalidDirectiveInReportOnlyMode ( const String ) const

◆ reportInvalidDirectiveInReportOnlyMode() [2/2]

void WebCore::ContentSecurityPolicy::reportInvalidDirectiveInReportOnlyMode ( const String directiveName) const

◆ reportInvalidDirectiveValueCharacter() [1/2]

void WebCore::ContentSecurityPolicy::reportInvalidDirectiveValueCharacter ( const String directiveName,
const String value 
) const

◆ reportInvalidDirectiveValueCharacter() [2/2]

void WebCore::ContentSecurityPolicy::reportInvalidDirectiveValueCharacter ( const String directiveName,
const String value 
) const

◆ reportInvalidPathCharacter() [1/2]

void WebCore::ContentSecurityPolicy::reportInvalidPathCharacter ( const String directiveName,
const String value,
const char  invalidChar 
) const

◆ reportInvalidPathCharacter() [2/2]

void WebCore::ContentSecurityPolicy::reportInvalidPathCharacter ( const String directiveName,
const String value,
const char   
) const

◆ reportInvalidPluginTypes() [1/2]

void WebCore::ContentSecurityPolicy::reportInvalidPluginTypes ( const String ) const

◆ reportInvalidPluginTypes() [2/2]

void WebCore::ContentSecurityPolicy::reportInvalidPluginTypes ( const String pluginType) const

◆ reportInvalidSandboxFlags() [1/2]

void WebCore::ContentSecurityPolicy::reportInvalidSandboxFlags ( const String invalidFlags) const

◆ reportInvalidSandboxFlags() [2/2]

void WebCore::ContentSecurityPolicy::reportInvalidSandboxFlags ( const String ) const

◆ reportInvalidSourceExpression() [1/2]

void WebCore::ContentSecurityPolicy::reportInvalidSourceExpression ( const String directiveName,
const String source 
) const

◆ reportInvalidSourceExpression() [2/2]

void WebCore::ContentSecurityPolicy::reportInvalidSourceExpression ( const String directiveName,
const String source 
) const

◆ reportMissingReportURI() [1/2]

void WebCore::ContentSecurityPolicy::reportMissingReportURI ( const String ) const

◆ reportMissingReportURI() [2/2]

void WebCore::ContentSecurityPolicy::reportMissingReportURI ( const String policy) const

◆ reportUnsupportedDirective() [1/2]

void WebCore::ContentSecurityPolicy::reportUnsupportedDirective ( const String name) const

◆ reportUnsupportedDirective() [2/2]

void WebCore::ContentSecurityPolicy::reportUnsupportedDirective ( const String ) const

◆ responseHeaders() [1/2]

ContentSecurityPolicyResponseHeaders WebCore::ContentSecurityPolicy::responseHeaders ( ) const

◆ responseHeaders() [2/2]

ContentSecurityPolicyResponseHeaders WebCore::ContentSecurityPolicy::responseHeaders ( ) const

◆ setInsecureNavigationRequestsToUpgrade() [1/2]

void WebCore::ContentSecurityPolicy::setInsecureNavigationRequestsToUpgrade ( HashSet< RefPtr< SecurityOrigin >> &&  )

◆ setInsecureNavigationRequestsToUpgrade() [2/2]

void WebCore::ContentSecurityPolicy::setInsecureNavigationRequestsToUpgrade ( HashSet< RefPtr< SecurityOrigin >> &&  insecureNavigationRequests)

◆ setOverrideAllowInlineStyle() [1/2]

void WebCore::ContentSecurityPolicy::setOverrideAllowInlineStyle ( bool  value)

◆ setOverrideAllowInlineStyle() [2/2]

void WebCore::ContentSecurityPolicy::setOverrideAllowInlineStyle ( bool  )

◆ setUpgradeInsecureRequests() [1/2]

void WebCore::ContentSecurityPolicy::setUpgradeInsecureRequests ( bool  upgradeInsecureRequests)

◆ setUpgradeInsecureRequests() [2/2]

void WebCore::ContentSecurityPolicy::setUpgradeInsecureRequests ( bool  )

◆ takeNavigationRequestsToUpgrade() [1/2]

HashSet< RefPtr< SecurityOrigin > > && WebCore::ContentSecurityPolicy::takeNavigationRequestsToUpgrade ( )

◆ takeNavigationRequestsToUpgrade() [2/2]

HashSet<RefPtr<SecurityOrigin> >&& WebCore::ContentSecurityPolicy::takeNavigationRequestsToUpgrade ( )

◆ upgradeInsecureRequestIfNeeded() [1/4]

void WebCore::ContentSecurityPolicy::upgradeInsecureRequestIfNeeded ( ResourceRequest request,
InsecureRequestType  requestType 
) const

◆ upgradeInsecureRequestIfNeeded() [2/4]

void WebCore::ContentSecurityPolicy::upgradeInsecureRequestIfNeeded ( ResourceRequest ,
InsecureRequestType   
) const

◆ upgradeInsecureRequestIfNeeded() [3/4]

void WebCore::ContentSecurityPolicy::upgradeInsecureRequestIfNeeded ( URL ,
InsecureRequestType   
) const

◆ upgradeInsecureRequestIfNeeded() [4/4]

void WebCore::ContentSecurityPolicy::upgradeInsecureRequestIfNeeded ( URL url,
InsecureRequestType  requestType 
) const

◆ upgradeInsecureRequests() [1/2]

bool WebCore::ContentSecurityPolicy::upgradeInsecureRequests ( ) const
inline

◆ upgradeInsecureRequests() [2/2]

bool WebCore::ContentSecurityPolicy::upgradeInsecureRequests ( ) const
inline

◆ urlMatchesSelf() [1/2]

bool WebCore::ContentSecurityPolicy::urlMatchesSelf ( const URL url) const

◆ urlMatchesSelf() [2/2]

bool WebCore::ContentSecurityPolicy::urlMatchesSelf ( const URL ) const

The documentation for this class was generated from the following files: