ladybird/Libraries/LibWeb/ContentSecurityPolicy/Directives/DirectiveFactory.h

/*
 * Copyright (c) 2025, Luke Wilde <luke@ladybird.org>
 *
 * SPDX-License-Identifier: BSD-2-Clause
 */

#pragma once

#include <AK/String.h>
#include <AK/Vector.h>
#include <LibGC/Forward.h>
#include <LibGC/Ptr.h>
#include <LibWeb/Forward.h>

namespace Web::ContentSecurityPolicy::Directives {

[[nodiscard]] GC::Ref<Directive> create_directive(GC::Heap&, String name, Vector<String> value);

}
LibWeb: Introduce Content Security Policy policies and directives These form the basis of Content Security Policy. A policy is a collection of directives that are parsed from either the Content-Security-Policy(-Report-Only) HTTP header, or the `<meta>` element. The directives are what restrict the operations can be performed in the current global execution context. For example, "frame-ancestors: none" tells us to prevent the page from being loaded in an embedded context, such as `<iframe>`. You can see it a bit like OpenBSD's pledge() functionality, but for the web platform: https://man.openbsd.org/pledge.2 2024-11-25 16:17:17 +00:00			`/*`
			`* Copyright (c) 2025, Luke Wilde <luke@ladybird.org>`
			`*`
			`* SPDX-License-Identifier: BSD-2-Clause`
			`*/`

			`#pragma once`

			`#include <AK/String.h>`
			`#include <AK/Vector.h>`
LibWeb: Make a bunch of CSP classes not realm associated These are not associated with a javascript realm, so to avoid confusion about which realm these need to be created in, make all of these objects a GC::Cell, and deal with the fallout. 2025-04-26 11:35:51 +12:00			`#include <LibGC/Forward.h>`
LibWeb: Introduce Content Security Policy policies and directives These form the basis of Content Security Policy. A policy is a collection of directives that are parsed from either the Content-Security-Policy(-Report-Only) HTTP header, or the `<meta>` element. The directives are what restrict the operations can be performed in the current global execution context. For example, "frame-ancestors: none" tells us to prevent the page from being loaded in an embedded context, such as `<iframe>`. You can see it a bit like OpenBSD's pledge() functionality, but for the web platform: https://man.openbsd.org/pledge.2 2024-11-25 16:17:17 +00:00			`#include <LibGC/Ptr.h>`
			`#include <LibWeb/Forward.h>`

			`namespace Web::ContentSecurityPolicy::Directives {`

LibWeb: Make a bunch of CSP classes not realm associated These are not associated with a javascript realm, so to avoid confusion about which realm these need to be created in, make all of these objects a GC::Cell, and deal with the fallout. 2025-04-26 11:35:51 +12:00			`[[nodiscard]] GC::Ref<Directive> create_directive(GC::Heap&, String name, Vector<String> value);`
LibWeb: Introduce Content Security Policy policies and directives These form the basis of Content Security Policy. A policy is a collection of directives that are parsed from either the Content-Security-Policy(-Report-Only) HTTP header, or the `<meta>` element. The directives are what restrict the operations can be performed in the current global execution context. For example, "frame-ancestors: none" tells us to prevent the page from being loaded in an embedded context, such as `<iframe>`. You can see it a bit like OpenBSD's pledge() functionality, but for the web platform: https://man.openbsd.org/pledge.2 2024-11-25 16:17:17 +00:00
			`}`