blob: eb4b799d0d36bc6b4676370b7d987f32ecb4e0c4 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
// Copyright 2015 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CONTENT_COMMON_SITE_ISOLATION_POLICY_H_
#define CONTENT_COMMON_SITE_ISOLATION_POLICY_H_
#include <vector>
#include "base/gtest_prod_util.h"
#include "base/macros.h"
#include "base/strings/string_piece_forward.h"
#include "content/common/content_export.h"
#include "url/origin.h"
namespace content {
// A centralized place for making policy decisions about out-of-process iframes,
// site isolation, --site-per-process, and related features.
//
// This is currently static because all these modes are controlled by command-
// line flags or field trials.
//
// These methods can be called from any thread.
class CONTENT_EXPORT SiteIsolationPolicy {
public:
// Returns true if every site should be placed in a dedicated process.
static bool UseDedicatedProcessesForAllSites();
// Returns whether cross-site document responses can be blocked.
enum CrossSiteDocumentBlockingEnabledState {
XSDB_ENABLED_UNCONDITIONALLY,
XSDB_ENABLED_IF_ISOLATED,
XSDB_DISABLED,
};
static CrossSiteDocumentBlockingEnabledState
IsCrossSiteDocumentBlockingEnabled();
// Returns true if third-party subframes of a page should be kept in a
// different process from the main frame.
static bool IsTopDocumentIsolationEnabled();
// Returns true if isolated origins feature is enabled.
static bool AreIsolatedOriginsEnabled();
// Returns the origins to isolate. See also AreIsolatedOriginsEnabled.
// This list applies globally to the whole browser in all profiles.
// TODO(lukasza): Make sure this list also includes the origins returned by
// ContentBrowserClient::GetOriginsRequiringDedicatedProcess.
static std::vector<url::Origin> GetIsolatedOrigins();
// Records metrics about which site isolation command-line flags are present.
// This should be called once on browser startup.
static void RecordSiteIsolationFlagUsage();
private:
SiteIsolationPolicy(); // Not instantiable.
FRIEND_TEST_ALL_PREFIXES(SiteIsolationPolicyTest, ParseIsolatedOrigins);
static std::vector<url::Origin> ParseIsolatedOrigins(base::StringPiece arg);
DISALLOW_COPY_AND_ASSIGN(SiteIsolationPolicy);
};
} // namespace content
#endif // CONTENT_COMMON_SITE_ISOLATION_POLICY_H_
|
