CSP: Add 'script-sample' to violation reports.

third_party/WebKit/Source/core/frame/csp/SourceListDirective.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "core/frame/csp/SourceListDirective.h"
 
 #include "core/frame/csp/CSPSource.h"
 #include "core/frame/csp/ContentSecurityPolicy.h"
 #include "platform/network/ContentSecurityPolicyParsers.h"
 #include "platform/weborigin/KURL.h"
@@ skipping 11 matching lines @@
                                          ContentSecurityPolicy* policy)
     : CSPDirective(name, value, policy),
       m_policy(policy),
       m_directiveName(name),
       m_allowSelf(false),
       m_allowStar(false),
       m_allowInline(false),
       m_allowEval(false),
       m_allowDynamic(false),
       m_allowHashedAttributes(false),
+      m_reportSample(false),
       m_hashAlgorithmsUsed(0) {
   Vector<UChar> characters;
   value.appendTo(characters);
   parse(characters.data(), characters.data() + characters.size());
 }
 
 static bool isSourceListNone(const UChar* begin, const UChar* end) {
   skipWhile<UChar, isASCIISpace>(begin, end);
 
   const UChar* position = begin;
@@ skipping 54 matching lines @@
 }
 
 bool SourceListDirective::allowHash(const CSPHashValue& hashValue) const {
   return m_hashes.contains(hashValue);
 }
 
 bool SourceListDirective::allowHashedAttributes() const {
   return m_allowHashedAttributes;
 }
 
+bool SourceListDirective::allowReportSample() const {
+  if (!m_policy->experimentalFeaturesEnabled())
+    return false;
+  return m_reportSample;
+}
+
 bool SourceListDirective::isNone() const {
   return !m_list.size() && !m_allowSelf && !m_allowStar && !m_allowInline &&
          !m_allowHashedAttributes && !m_allowEval && !m_allowDynamic &&
          !m_nonces.size() && !m_hashes.size();
 }
 
 uint8_t SourceListDirective::hashAlgorithmsUsed() const {
   return m_hashAlgorithmsUsed;
 }
 
@@ skipping 88 matching lines @@
   if (equalIgnoringCase("'strict-dynamic'", token)) {
     addSourceStrictDynamic();
     return true;
   }
 
   if (equalIgnoringCase("'unsafe-hashed-attributes'", token)) {
     addSourceUnsafeHashedAttributes();
     return true;
   }
 
+  if (equalIgnoringCase("'report-sample'", token)) {
+    addReportSample();
+    return true;
+  }
+
   String nonce;
   if (!parseNonce(begin, end, nonce))
     return false;
 
   if (!nonce.isNull()) {
     addSourceNonce(nonce);
     return true;
   }
 
   DigestValue hash;
@@ skipping 329 matching lines @@
 }
 
 void SourceListDirective::addSourceStrictDynamic() {
   m_allowDynamic = true;
 }
 
 void SourceListDirective::addSourceUnsafeHashedAttributes() {
   m_allowHashedAttributes = true;
 }
 
+void SourceListDirective::addReportSample() {
+  m_reportSample = true;
+}
+
 void SourceListDirective::addSourceNonce(const String& nonce) {
   m_nonces.insert(nonce);
 }
 
 void SourceListDirective::addSourceHash(
     const ContentSecurityPolicyHashAlgorithm& algorithm,
     const DigestValue& hash) {
   m_hashes.insert(CSPHashValue(algorithm, hash));
   m_hashAlgorithmsUsed |= algorithm;
 }
@@ skipping 248 matching lines @@
   return normalized;
 }
 
 DEFINE_TRACE(SourceListDirective) {
   visitor->trace(m_policy);
   visitor->trace(m_list);
   CSPDirective::trace(visitor);
 }
 
 }  // namespace blink