Index: net/http/http_security_headers.h |
=================================================================== |
--- net/http/http_security_headers.h (revision 0) |
+++ net/http/http_security_headers.h (revision 0) |
@@ -0,0 +1,57 @@ |
+// Copyright (c) 2012 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+#ifndef NET_HTTP_HTTP_SECURITY_HEADERS_H_ |
+#define NET_HTTP_HTTP_SECURITY_HEADERS_H_ |
+ |
+#include <string> |
+ |
+#include "base/basictypes.h" |
+#include "base/gtest_prod_util.h" |
+#include "base/time.h" |
+#include "base/values.h" |
+#include "net/base/hash_value.h" |
+#include "net/base/net_export.h" |
+ |
+namespace net { |
+ |
+const int64 kMaxHSTSAgeSecs = 86400 * 365; // 1 year |
+ |
+// Parses |value| as a Strict-Transport-Security header value. If successful, |
+// returns true and sets |*expiry| and |*include_subdomains|. |
+// Otherwise returns false and leaves the output parameters unchanged. |
+// Interprets the max-age directive relative to |now|. |
+// |
+// value is the right-hand side of: |
+// |
+// "Strict-Transport-Security" ":" |
+// [ directive ] *( ";" [ directive ] ) |
+bool NET_EXPORT_PRIVATE ParseHSTSHeader(const base::Time& now, |
+ const std::string& value, |
+ base::Time* expiry, // OUT |
Ryan Sleevi
2012/11/13 19:02:32
drop the "// OUT"
unsafe
2012/11/13 23:20:18
Done.
|
+ bool* include_subdomains); // OUT |
+ |
+// Parses |value| as a Public-Key-Pins header value. If successful, |
+// returns true and populates the expiry and hashes values. |
+// Otherwise returns false and leaves the output parameters unchanged. |
+// Interprets the max-age directive relative to |now|. |
+// Checks that the header's public key pins overlaps with the SSL chain |
+// as specified in chain_hashes. |
Ryan Sleevi
2012/11/13 19:02:32
nit: Could you expand on this comment more.
In pa
palmer
2012/11/13 19:35:04
Well, we might decide against allowing coalescing,
unsafe
2012/11/13 23:20:18
Expanded the comment more. Did not say anything a
|
+// |
+// value is the right-hand side of: |
+// |
+// "Public-Key-Pins" ":" |
+// "max-age" "=" delta-seconds ";" |
+// "pin-" algo "=" base64 [ ";" ... ] |
+bool NET_EXPORT_PRIVATE ParseHPKPHeader(const base::Time& now, |
+ const std::string& value, |
+ const HashValueVector& chain_hashes, |
+ base::Time* expiry, // OUT |
+ HashValueVector* hashes); // OUT |
+ |
+} // namespace net |
+ |
+ |
+#endif // NET_HTTP_HTTP_SECURITY_HEADERS_H_ |
+ |