CSP: Add 'script-sample' to violation reports.

third_party/WebKit/Source/core/frame/csp/SourceListDirective.h

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SourceListDirective_h
 #define SourceListDirective_h
 
 #include "core/CoreExport.h"
 #include "core/frame/csp/CSPDirective.h"
 #include "core/frame/csp/CSPSource.h"
@@ skipping 26 matching lines @@
 
   bool allows(const KURL&,
               ResourceRequest::RedirectStatus =
                   ResourceRequest::RedirectStatus::NoRedirect) const;
   bool allowInline() const;
   bool allowEval() const;
   bool allowDynamic() const;
   bool allowNonce(const String& nonce) const;
   bool allowHash(const CSPHashValue&) const;
   bool allowHashedAttributes() const;
+  bool allowReportSample() const;
   bool isNone() const;
   bool isHashOrNoncePresent() const;
   uint8_t hashAlgorithmsUsed() const;
   bool allowAllInline() const;
 
   // The algorothm is described more extensively here:
   // https://w3c.github.io/webappsec-csp/embedded/#subsume-source-list
   bool subsumes(const HeapVector<Member<SourceListDirective>>&) const;
 
   // Export a subset of the source list that affect navigation.
@@ skipping 36 matching lines @@
                  const UChar* end,
                  DigestValue& hash,
                  ContentSecurityPolicyHashAlgorithm&);
 
   void addSourceSelf();
   void addSourceStar();
   void addSourceUnsafeInline();
   void addSourceUnsafeEval();
   void addSourceStrictDynamic();
   void addSourceUnsafeHashedAttributes();
+  void addReportSample();
   void addSourceNonce(const String& nonce);
   void addSourceHash(const ContentSecurityPolicyHashAlgorithm&,
                      const DigestValue& hash);
 
   static void addSourceToMap(HeapHashMap<String, Member<CSPSource>>&,
                              CSPSource*);
 
   bool hasSourceMatchInList(const KURL&, ResourceRequest::RedirectStatus) const;
   HashSet<String> getIntersectNonces(const HashSet<String>& other) const;
   HashSet<CSPHashValue> getIntersectHashes(
       const HashSet<CSPHashValue>& other) const;
   HeapVector<Member<CSPSource>> getIntersectCSPSources(
       const HeapVector<Member<CSPSource>>& other) const;
   HeapHashMap<String, Member<CSPSource>> getIntersectSchemesOnly(
       const HeapVector<Member<CSPSource>>& other) const;
   bool subsumesNoncesAndHashes(const HashSet<String>& nonces,
                                const HashSet<CSPHashValue> hashes) const;
   HeapVector<Member<CSPSource>> getSources(Member<CSPSource>) const;
 
   Member<ContentSecurityPolicy> m_policy;
   HeapVector<Member<CSPSource>> m_list;
   String m_directiveName;
   bool m_allowSelf;
   bool m_allowStar;
   bool m_allowInline;
   bool m_allowEval;
   bool m_allowDynamic;
   bool m_allowHashedAttributes;
+  bool m_reportSample;
   HashSet<String> m_nonces;
   HashSet<CSPHashValue> m_hashes;
   uint8_t m_hashAlgorithmsUsed;
 };
 
 }  // namespace blink
 
 #endif