1 /* 2 * Copyright (C) 2012 Google Inc. All rights reserved. 3 * 4 * Redistribution and use in source and binary forms, with or without 5 * modification, are permitted provided that the following conditions 6 * are met: 7 * 1. Redistributions of source code must retain the above copyright 8 * notice, this list of conditions and the following disclaimer. 9 * 2. Redistributions in binary form must reproduce the above copyright 10 * notice, this list of conditions and the following disclaimer in the 11 * documentation and/or other materials provided with the distribution. 12 * 13 * THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS'' AND ANY 14 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED 15 * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 16 * DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS BE LIABLE FOR ANY 17 * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES 18 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 19 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON 20 * ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 21 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS 22 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 23 */ 24 25 [ 26 ImplementedAs=DOMSecurityPolicy 27 ] interface SecurityPolicy { 28 readonly attribute boolean allowsEval; 29 readonly attribute boolean allowsInlineScript; 30 readonly attribute boolean allowsInlineStyle; 31 readonly attribute boolean isActive; 32 33 readonly attribute DOMStringList reportURIs; 34 35 boolean allowsConnectionTo(DOMString url); 36 boolean allowsFontFrom(DOMString url); 37 boolean allowsFormAction(DOMString url); 38 boolean allowsFrameFrom(DOMString url); 39 boolean allowsImageFrom(DOMString url); 40 boolean allowsMediaFrom(DOMString url); 41 boolean allowsObjectFrom(DOMString url); 42 boolean allowsPluginType(DOMString type); 43 boolean allowsScriptFrom(DOMString url); 44 boolean allowsStyleFrom(DOMString url); 45 }; 46