1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. 2 // Use of this source code is governed by a BSD-style license that can be 3 // found in the LICENSE file. 4 5 #include "content/public/browser/url_data_source.h" 6 7 #include "content/browser/webui/url_data_manager.h" 8 #include "content/public/browser/browser_thread.h" 9 #include "content/public/common/url_constants.h" 10 #include "net/url_request/url_request.h" 11 12 namespace content { 13 14 void URLDataSource::Add(BrowserContext* browser_context, 15 URLDataSource* source) { 16 URLDataManager::AddDataSource(browser_context, source); 17 } 18 19 base::MessageLoop* URLDataSource::MessageLoopForRequestPath( 20 const std::string& path) const { 21 return BrowserThread::UnsafeGetMessageLoopForThread(BrowserThread::UI); 22 } 23 24 bool URLDataSource::ShouldReplaceExistingSource() const { 25 return true; 26 } 27 28 bool URLDataSource::AllowCaching() const { 29 return true; 30 } 31 32 bool URLDataSource::ShouldAddContentSecurityPolicy() const { 33 return true; 34 } 35 36 std::string URLDataSource::GetContentSecurityPolicyObjectSrc() const { 37 return "object-src 'none';"; 38 } 39 40 std::string URLDataSource::GetContentSecurityPolicyFrameSrc() const { 41 return "frame-src 'none';"; 42 } 43 44 bool URLDataSource::ShouldDenyXFrameOptions() const { 45 return true; 46 } 47 48 bool URLDataSource::ShouldServiceRequest(const net::URLRequest* request) const { 49 if (request->url().SchemeIs(kChromeDevToolsScheme) || 50 request->url().SchemeIs(kChromeUIScheme)) 51 return true; 52 return false; 53 } 54 55 bool URLDataSource::ShouldServeMimeTypeAsContentTypeHeader() const { 56 return false; 57 } 58 59 } // namespace content 60