Apply meta tag referrer policy for preloaded requests

Source/core/html/parser/HTMLPreloadScanner.cpp

 /*
  * Copyright (C) 2008 Apple Inc. All Rights Reserved.
  * Copyright (C) 2009 Torch Mobile, Inc. http://www.torchmobile.com/
  * Copyright (C) 2010 Google Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
@@ skipping 155 matching lines @@
         if (match(m_tagImpl, sourceTag) && m_matchedMediaAttribute && pictureData.sourceURL.isEmpty()) {
             pictureData.sourceURL = m_srcsetImageCandidate.toString();
             pictureData.sourceSizeSet = m_sourceSizeSet;
             pictureData.sourceSize = m_sourceSize;
             pictureData.picked = true;
         } else if (match(m_tagImpl, imgTag) && !pictureData.sourceURL.isEmpty()) {
             setUrlToLoad(pictureData.sourceURL, AllowURLReplacement);
         }
     }
 
-    PassOwnPtr<PreloadRequest> createPreloadRequest(const KURL& predictedBaseURL, const SegmentedString& source, const ClientHintsPreferences& clientHintsPreferences, const PictureData& pictureData)
+    PassOwnPtr<PreloadRequest> createPreloadRequest(const KURL& predictedBaseURL, const SegmentedString& source, const ClientHintsPreferences& clientHintsPreferences, const PictureData& pictureData, const ReferrerPolicy referrerPolicy)
     {
         PreloadRequest::RequestType requestType = PreloadRequest::RequestTypePreload;
         if (shouldPreconnect())
             requestType = PreloadRequest::RequestTypePreconnect;
         else if (!shouldPreload() || !m_matchedMediaAttribute)
             return nullptr;
 
         TextPosition position = TextPosition(source.currentLine(), source.currentColumn());
         FetchRequest::ResourceWidth resourceWidth;
         float sourceSize = m_sourceSize;
         bool sourceSizeSet = m_sourceSizeSet;
         if (pictureData.picked) {
             sourceSizeSet = pictureData.sourceSizeSet;
             sourceSize = pictureData.sourceSize;
         }
         if (sourceSizeSet) {
             resourceWidth.width = sourceSize;
             resourceWidth.isSet = true;
         }
 
-        OwnPtr<PreloadRequest> request = PreloadRequest::create(initiatorFor(m_tagImpl), position, m_urlToLoad, predictedBaseURL, resourceType(), resourceWidth, clientHintsPreferences, requestType);
+        OwnPtr<PreloadRequest> request = PreloadRequest::create(initiatorFor(m_tagImpl), position, m_urlToLoad, predictedBaseURL, resourceType(), referrerPolicy, resourceWidth, clientHintsPreferences, requestType);
         if (isCORSEnabled())
             request->setCrossOriginEnabled(allowStoredCredentials());
         request->setCharset(charset());
         request->setDefer(m_defer);
         return request.release();
     }
 
 private:
     template<typename NameType>
     void processScriptAttribute(const NameType& attributeName, const String& attributeValue)
@@ skipping 258 matching lines @@
         return;
     ViewportDescription description(ViewportDescription::ViewportMeta);
     HTMLMetaElement::getViewportDescriptionFromContentAttribute(attributeValue, description, nullptr, documentParameters->viewportMetaZeroValuesQuirk);
     FloatSize initialViewport(documentParameters->mediaValues->viewportHeight(), documentParameters->mediaValues->viewportWidth());
     PageScaleConstraints constraints = description.resolve(initialViewport, documentParameters->defaultViewportMinWidth);
     MediaValuesCached* cachedMediaValues = static_cast<MediaValuesCached*>(documentParameters->mediaValues.get());
     cachedMediaValues->setViewportHeight(constraints.layoutSize.height());
     cachedMediaValues->setViewportWidth(constraints.layoutSize.width());
 }
 
-template<typename Token>
+static void handleMetaReferrer(const String& attributeValue, CachedDocumentParameters* documentParameters, CSSPreloadScanner* cssScanner)
+{
+    if (attributeValue.isEmpty() || attributeValue.isNull() || !SecurityPolicy::referrerPolicyFromString(attributeValue, &documentParameters->referrerPolicy)) {
+        documentParameters->referrerPolicy = ReferrerPolicyDefault;
+    }
+    cssScanner->setReferrerPolicy(documentParameters->referrerPolicy);
+}
+
+template <typename Token>
+static void handleMetaNameAttribute(const Token& token, CachedDocumentParameters* documentParameters, CSSPreloadScanner* cssScanner)
+{
+    const typename Token::Attribute* nameAttribute = token.getAttributeItem(nameAttr);
+    if (!nameAttribute)
+        return;
+
+    String nameAttributeValue(nameAttribute->value);
+    const typename Token::Attribute* contentAttribute = token.getAttributeItem(contentAttr);
+    if (!contentAttribute)
+        return;
+
+    String contentAttributeValue(contentAttribute->value);
+    if (equalIgnoringCase(nameAttributeValue, "viewport")) {
+        handleMetaViewport(contentAttributeValue, documentParameters);
+        return;
+    }
+
+    if (equalIgnoringCase(nameAttributeValue, "referrer")) {
+        handleMetaReferrer(contentAttributeValue, documentParameters, cssScanner);
+    }
+}
+
+template <typename Token>
 void TokenPreloadScanner::scanCommon(const Token& token, const SegmentedString& source, PreloadRequestStream& requests)
 {
     if (!m_documentParameters->doHtmlPreloadScanning)
         return;
 
     // Disable preload for documents with AppCache.
     if (m_isAppCacheEnabled)
         return;
 
     // http://crbug.com/434230 Disable preload for documents with CSP <meta> tags
@@ skipping 53 matching lines @@
                 String equivAttributeValue(equivAttribute->value);
                 if (equalIgnoringCase(equivAttributeValue, "content-security-policy")) {
                     m_isCSPEnabled = true;
                 } else if (equalIgnoringCase(equivAttributeValue, "accept-ch")) {
                     const typename Token::Attribute* contentAttribute = token.getAttributeItem(contentAttr);
                     if (contentAttribute)
                         handleAcceptClientHintsHeader(String(contentAttribute->value), m_clientHintsPreferences, nullptr);
                 }
                 return;
             }
-            const typename Token::Attribute* nameAttribute = token.getAttributeItem(nameAttr);
-            if (nameAttribute && equalIgnoringCase(String(nameAttribute->value), "viewport")) {
-                const typename Token::Attribute* contentAttribute = token.getAttributeItem(contentAttr);
-                if (contentAttribute)
-                    handleMetaViewport(String(contentAttribute->value), m_documentParameters.get());
-                return;
-            }
+
+            handleMetaNameAttribute(token, m_documentParameters.get(), &m_cssScanner);
         }
 
         if (match(tagImpl, pictureTag)) {
             m_inPicture = true;
             m_pictureData = PictureData();
             return;
         }
 
         StartTagScanner scanner(tagImpl, m_documentParameters->mediaValues);
         scanner.processAttributes(token.attributes());
         if (m_inPicture)
             scanner.handlePictureSourceURL(m_pictureData);
-        OwnPtr<PreloadRequest> request = scanner.createPreloadRequest(m_predictedBaseElementURL, source, m_clientHintsPreferences, m_pictureData);
+        OwnPtr<PreloadRequest> request = scanner.createPreloadRequest(m_predictedBaseElementURL, source, m_clientHintsPreferences, m_pictureData, m_documentParameters->referrerPolicy);
         if (request)
             requests.append(request.release());
         return;
     }
     default: {
         return;
     }
     }
 }
 
@@ skipping 50 matching lines @@
     ASSERT(document);
     doHtmlPreloadScanning = !document->settings() || document->settings()->doHtmlPreloadScanning();
     if (givenMediaValues)
         mediaValues = givenMediaValues;
     else
         mediaValues = MediaValuesCached::create(*document);
     ASSERT(mediaValues->isSafeToSendToAnotherThread());
     defaultViewportMinWidth = document->viewportDefaultMinWidth();
     viewportMetaZeroValuesQuirk = document->settings() && document->settings()->viewportMetaZeroValuesQuirk();
     viewportMetaEnabled = document->settings() && document->settings()->viewportMetaEnabled();
+    referrerPolicy = ReferrerPolicyDefault;
 }
 
 }