Generalize validation of developer input for Web Notifications

Source/modules/notifications/NotificationData.cpp

+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "config.h"
+#include "modules/notifications/NotificationData.h"
+
+#include "bindings/core/v8/ExceptionState.h"
+#include "bindings/core/v8/SerializedScriptValue.h"
+#include "bindings/core/v8/SerializedScriptValueFactory.h"
+#include "core/dom/ExecutionContext.h"
+#include "modules/notifications/Notification.h"
+#include "modules/notifications/NotificationOptions.h"
+#include "modules/vibration/NavigatorVibration.h"
+#include "platform/weborigin/KURL.h"
+
+namespace blink {
+namespace {
+
+WebNotificationData::Direction toDirectionEnumValue(const String& direction)
+{
+    if (direction == "ltr")
+        return WebNotificationData::DirectionLeftToRight;
+    if (direction == "rtl")
+        return WebNotificationData::DirectionRightToLeft;
+
+    return WebNotificationData::DirectionAuto;
+}
+
+} // namespace
+
+WebNotificationData createWebNotificationData(ExecutionContext* executionContext, const String& title, const NotificationOptions& options, ExceptionState& exceptionState)
+{
+    // If silent is true, the notification must not have a vibration pattern.
+    if (options.hasVibrate() && options.silent()) {
+        exceptionState.throwTypeError("Silent notifications must not specify vibration patterns.");
+        return WebNotificationData();
+    }
+
+    WebNotificationData webData;
+
+    webData.title = title;
+    webData.direction = toDirectionEnumValue(options.dir());
+    webData.lang = options.lang();
+    webData.body = options.body();
+    webData.tag = options.tag();
+
+    KURL iconUrl;
+
+    // TODO(peter): Apply the appropriate CORS checks on the |iconUrl|.
+    if (options.hasIcon() && !options.icon().isEmpty()) {
+        iconUrl = executionContext->completeURL(options.icon());
+        if (!iconUrl.isValid())
+            iconUrl = KURL();
+    }
+
+    webData.icon = iconUrl;
+    webData.vibrate = NavigatorVibration::sanitizeVibrationPattern(options.vibrate());
+    webData.silent = options.silent();
+
+    if (options.hasData()) {
+        RefPtr<SerializedScriptValue> serializedScriptValue = SerializedScriptValueFactory::instance().create(options.data().isolate(), options.data(), nullptr, exceptionState);
+        if (exceptionState.hadException())
+            return WebNotificationData();
+
+        Vector<char> serializedData;
+        serializedScriptValue->toWireBytes(serializedData);
+
+        webData.data = serializedData;
+    }
+
+    Vector<WebNotificationAction> actions;
+
+    const size_t maxActions = Notification::maxActions();
+    for (const NotificationAction& action : options.actions()) {
+        if (action.action().isEmpty()) {
+            exceptionState.throwTypeError("NotificationAction `action` must not be empty.");
+            return WebNotificationData();
+        }
+
+        if (action.title().isEmpty()) {
+            exceptionState.throwTypeError("NotificationAction `title` must not be empty.");
+            return WebNotificationData();
+        }
+
+        if (actions.size() >= maxActions)
+            continue;
+
+        WebNotificationAction webAction;
+        webAction.action = action.action();
+        webAction.title = action.title();
+
+        actions.append(webAction);
+    }
+
+    webData.actions = actions;
+
+    return webData;
+}
+
+} // namespace blink