https://codereview.chromium.org/2002003002

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/8b74280c04ed4eeee89c9da257c4cee86afdfd1d

commit 8b74280c04ed4eeee89c9da257c4cee86afdfd1d
Author: mkwst <mkwst@chromium.org>
Date: Thu May 26 10:52:17 2016

Generate CSP violation reports for 'block-all-mixed-content'

As of https://github.com/w3c/webappsec-mixed-content/commit/e9c559c6672e3219a0c1f6f4f7c5c187f3d51377,
'block-all-mixed-content' generates violation reports. This patch implements that functionality.

BUG=613956

Review-Url: https://codereview.chromium.org/2002003002
Cr-Commit-Position: refs/heads/master@{#396155}

[delete] https://crrev.com/9a1916358318e35f8045864784dc757bfb617eee/third_party/WebKit/LayoutTests/http/tests/security/mixedContent/strict-mode-image-blocked.https-expected.txt
[modify] https://crrev.com/8b74280c04ed4eeee89c9da257c4cee86afdfd1d/third_party/WebKit/LayoutTests/http/tests/security/mixedContent/strict-mode-image-blocked.https.html
[add] https://crrev.com/8b74280c04ed4eeee89c9da257c4cee86afdfd1d/third_party/WebKit/LayoutTests/http/tests/security/mixedContent/strict-mode-image-no-policy.https.html
[add] https://crrev.com/8b74280c04ed4eeee89c9da257c4cee86afdfd1d/third_party/WebKit/LayoutTests/http/tests/security/mixedContent/strict-mode-image-reportonly.https.php
[modify] https://crrev.com/8b74280c04ed4eeee89c9da257c4cee86afdfd1d/third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.cpp
[modify] https://crrev.com/8b74280c04ed4eeee89c9da257c4cee86afdfd1d/third_party/WebKit/Source/core/frame/csp/CSPDirectiveList.h
[modify] https://crrev.com/8b74280c04ed4eeee89c9da257c4cee86afdfd1d/third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.cpp
[modify] https://crrev.com/8b74280c04ed4eeee89c9da257c4cee86afdfd1d/third_party/WebKit/Source/core/frame/csp/ContentSecurityPolicy.h
[modify] https://crrev.com/8b74280c04ed4eeee89c9da257c4cee86afdfd1d/third_party/WebKit/Source/core/loader/MixedContentChecker.cpp

Hey Mike, 

What would the value of violated-directive be in this scenario? 

Can we expect to see things like default-src/script-src or block-all-mixed-content? 

Cheers!

> What would the value of violated-directive be in this scenario?

`block-all-mixed-content`

I plan to add something similar for 'upgrade-insecure-requests' shortly.