Changeset 83953 in webkit

Timestamp:

Apr 15, 2011 12:37:11 AM (13 years ago)

Author:

abarth@webkit.org

Message:

2011-04-15 Adam Barth <​abarth@webkit.org>

Reviewed by Eric Seidel.

Add support for CSP's 'self' source
​https://bugs.webkit.org/show_bug.cgi?id=58604

• http/tests/security/contentSecurityPolicy/script-src-self-expected.txt: Added.
• http/tests/security/contentSecurityPolicy/script-src-self.html: Added.

2011-04-15 Adam Barth <​abarth@webkit.org>

Reviewed by Eric Seidel.

Add support for CSP's 'self' source
​https://bugs.webkit.org/show_bug.cgi?id=58604

This change is now trivially easy.

Test: http/tests/security/contentSecurityPolicy/script-src-self.html

• page/ContentSecurityPolicy.cpp: (WebCore::CSPSourceList::addSourceSelf):

Location:

trunk

Files:

• LayoutTests/ChangeLog (modified) (1 diff)
• LayoutTests/http/tests/security/contentSecurityPolicy/script-src-self-expected.txt (added)
• LayoutTests/http/tests/security/contentSecurityPolicy/script-src-self.html (added)
• Source/WebCore/ChangeLog (modified) (1 diff)
• Source/WebCore/page/ContentSecurityPolicy.cpp (modified) (1 diff)

trunk/LayoutTests/ChangeLog

@@ +1 @@
+2011-04-15  Adam Barth  <abarth@webkit.org>
+
+        Reviewed by Eric Seidel.
+
+        Add support for CSP's 'self' source
+        https://bugs.webkit.org/show_bug.cgi?id=58604
+
+        * http/tests/security/contentSecurityPolicy/script-src-self-expected.txt: Added.
+        * http/tests/security/contentSecurityPolicy/script-src-self.html: Added.
+
 2011-04-14  Justin Novosad  <junov@chromium.org>
 

trunk/Source/WebCore/ChangeLog

@@ +1 @@
+2011-04-15  Adam Barth  <abarth@webkit.org>
+
+        Reviewed by Eric Seidel.
+
+        Add support for CSP's 'self' source
+        https://bugs.webkit.org/show_bug.cgi?id=58604
+
+        This change is now trivially easy.
+
+        Test: http/tests/security/contentSecurityPolicy/script-src-self.html
+
+        * page/ContentSecurityPolicy.cpp:
+        (WebCore::CSPSourceList::addSourceSelf):
+
 2011-04-15  Anna Cavender  <annacc@chromium.org>
 

trunk/Source/WebCore/page/ContentSecurityPolicy.cpp

@@ -391 +391 @@
 void CSPSourceList::addSourceSelf()
 {
-    // FIXME: Inherit the scheme, host, and port from the current URL.
-    notImplemented();
+    m_list.append(CSPSource(m_origin->protocol(), m_origin->host(), m_origin->port(), false, false));
 }