OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "base/base64.h" | 5 #include "base/base64.h" |
6 #include "base/basictypes.h" | 6 #include "base/basictypes.h" |
7 #include "base/strings/string_number_conversions.h" | 7 #include "base/strings/string_number_conversions.h" |
8 #include "base/strings/string_tokenizer.h" | 8 #include "base/strings/string_tokenizer.h" |
9 #include "base/strings/string_util.h" | 9 #include "base/strings/string_util.h" |
10 #include "net/http/http_security_headers.h" | 10 #include "net/http/http_security_headers.h" |
(...skipping 181 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
192 tokenizer.set_options(base::StringTokenizer::RETURN_DELIMS); | 192 tokenizer.set_options(base::StringTokenizer::RETURN_DELIMS); |
193 tokenizer.set_quote_chars("\""); | 193 tokenizer.set_quote_chars("\""); |
194 std::string unquoted; | 194 std::string unquoted; |
195 while (tokenizer.GetNext()) { | 195 while (tokenizer.GetNext()) { |
196 DCHECK(!tokenizer.token_is_delim() || tokenizer.token().length() == 1); | 196 DCHECK(!tokenizer.token_is_delim() || tokenizer.token().length() == 1); |
197 switch (state) { | 197 switch (state) { |
198 case START: | 198 case START: |
199 case DIRECTIVE_END: | 199 case DIRECTIVE_END: |
200 if (IsAsciiWhitespace(*tokenizer.token_begin())) | 200 if (IsAsciiWhitespace(*tokenizer.token_begin())) |
201 continue; | 201 continue; |
202 if (LowerCaseEqualsASCII(tokenizer.token(), "max-age")) { | 202 if (base::LowerCaseEqualsASCII(tokenizer.token(), "max-age")) { |
203 state = AFTER_MAX_AGE_LABEL; | 203 state = AFTER_MAX_AGE_LABEL; |
204 max_age_observed++; | 204 max_age_observed++; |
205 } else if (LowerCaseEqualsASCII(tokenizer.token(), | 205 } else if (base::LowerCaseEqualsASCII(tokenizer.token(), |
206 "includesubdomains")) { | 206 "includesubdomains")) { |
207 state = AFTER_INCLUDE_SUBDOMAINS; | 207 state = AFTER_INCLUDE_SUBDOMAINS; |
208 include_subdomains_observed++; | 208 include_subdomains_observed++; |
209 include_subdomains_candidate = true; | 209 include_subdomains_candidate = true; |
210 } else { | 210 } else { |
211 state = AFTER_UNKNOWN_LABEL; | 211 state = AFTER_UNKNOWN_LABEL; |
212 } | 212 } |
213 break; | 213 break; |
214 | 214 |
215 case AFTER_MAX_AGE_LABEL: | 215 case AFTER_MAX_AGE_LABEL: |
216 if (IsAsciiWhitespace(*tokenizer.token_begin())) | 216 if (IsAsciiWhitespace(*tokenizer.token_begin())) |
(...skipping 72 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
289 std::string source = value; | 289 std::string source = value; |
290 | 290 |
291 while (!source.empty()) { | 291 while (!source.empty()) { |
292 StringPair semicolon = Split(source, ';'); | 292 StringPair semicolon = Split(source, ';'); |
293 semicolon.first = Strip(semicolon.first); | 293 semicolon.first = Strip(semicolon.first); |
294 semicolon.second = Strip(semicolon.second); | 294 semicolon.second = Strip(semicolon.second); |
295 StringPair equals = Split(semicolon.first, '='); | 295 StringPair equals = Split(semicolon.first, '='); |
296 equals.first = Strip(equals.first); | 296 equals.first = Strip(equals.first); |
297 equals.second = Strip(equals.second); | 297 equals.second = Strip(equals.second); |
298 | 298 |
299 if (LowerCaseEqualsASCII(equals.first, "max-age")) { | 299 if (base::LowerCaseEqualsASCII(equals.first, "max-age")) { |
300 if (equals.second.empty() || | 300 if (equals.second.empty() || |
301 !MaxAgeToInt(equals.second.begin(), equals.second.end(), | 301 !MaxAgeToInt(equals.second.begin(), equals.second.end(), |
302 &max_age_candidate)) { | 302 &max_age_candidate)) { |
303 return false; | 303 return false; |
304 } | 304 } |
305 parsed_max_age = true; | 305 parsed_max_age = true; |
306 } else if (LowerCaseEqualsASCII(equals.first, "pin-sha1")) { | 306 } else if (base::LowerCaseEqualsASCII(equals.first, "pin-sha1")) { |
307 if (!ParseAndAppendPin(equals.second, HASH_VALUE_SHA1, &pins)) | 307 if (!ParseAndAppendPin(equals.second, HASH_VALUE_SHA1, &pins)) |
308 return false; | 308 return false; |
309 } else if (LowerCaseEqualsASCII(equals.first, "pin-sha256")) { | 309 } else if (base::LowerCaseEqualsASCII(equals.first, "pin-sha256")) { |
310 if (!ParseAndAppendPin(equals.second, HASH_VALUE_SHA256, &pins)) | 310 if (!ParseAndAppendPin(equals.second, HASH_VALUE_SHA256, &pins)) |
311 return false; | 311 return false; |
312 } else if (LowerCaseEqualsASCII(equals.first, "includesubdomains")) { | 312 } else if (base::LowerCaseEqualsASCII(equals.first, "includesubdomains")) { |
313 include_subdomains_candidate = true; | 313 include_subdomains_candidate = true; |
314 } else { | 314 } else { |
315 // Silently ignore unknown directives for forward compatibility. | 315 // Silently ignore unknown directives for forward compatibility. |
316 } | 316 } |
317 | 317 |
318 source = semicolon.second; | 318 source = semicolon.second; |
319 } | 319 } |
320 | 320 |
321 if (!parsed_max_age) | 321 if (!parsed_max_age) |
322 return false; | 322 return false; |
323 | 323 |
324 if (!IsPinListValid(pins, chain_hashes)) | 324 if (!IsPinListValid(pins, chain_hashes)) |
325 return false; | 325 return false; |
326 | 326 |
327 *max_age = base::TimeDelta::FromSeconds(max_age_candidate); | 327 *max_age = base::TimeDelta::FromSeconds(max_age_candidate); |
328 *include_subdomains = include_subdomains_candidate; | 328 *include_subdomains = include_subdomains_candidate; |
329 hashes->swap(pins); | 329 hashes->swap(pins); |
330 | 330 |
331 return true; | 331 return true; |
332 } | 332 } |
333 | 333 |
334 } // namespace net | 334 } // namespace net |
OLD | NEW |