Implement referrerpolicy attribute for img elements

Source/core/html/HTMLImageElement.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  * Copyright (C) 2004, 2005, 2006, 2007, 2008, 2010 Apple Inc. All rights reserved.
  * Copyright (C) 2010 Google Inc. All rights reserved.
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
  * License as published by the Free Software Foundation; either
  * version 2 of the License, or (at your option) any later version.
@@ skipping 33 matching lines @@
 #include "core/html/parser/HTMLSrcsetParser.h"
 #include "core/inspector/ConsoleMessage.h"
 #include "core/layout/LayoutBlockFlow.h"
 #include "core/layout/LayoutImage.h"
 #include "core/page/Page.h"
 #include "core/style/ContentData.h"
 #include "platform/ContentType.h"
 #include "platform/EventDispatchForbiddenScope.h"
 #include "platform/MIMETypeRegistry.h"
 #include "platform/RuntimeEnabledFeatures.h"
+#include "platform/weborigin/SecurityPolicy.h"
 
 namespace blink {
 
 using namespace HTMLNames;
 
 class HTMLImageElement::ViewportChangeListener final : public MediaQueryListListener {
 public:
     static RefPtrWillBeRawPtr<ViewportChangeListener> create(HTMLImageElement* element)
     {
         return adoptRefWillBeNoop(new ViewportChangeListener(element));
@@ skipping 314 matching lines @@
         ImageCandidate candidate = findBestFitImageFromPictureParent();
         if (!candidate.isEmpty()) {
             setBestFitURLAndDPRFromImageCandidate(candidate);
             imageWasModified = true;
         }
     }
 
     // If we have been inserted from a layoutObject-less document,
     // our loader may have not fetched the image, so do it now.
     if ((insertionPoint->inDocument() && !imageLoader().image()) || imageWasModified)
-        imageLoader().updateFromElement(ImageLoader::UpdateNormal);
+        imageLoader().updateFromElement(ImageLoader::UpdateNormal, referrerPolicy());
 
     return HTMLElement::insertedInto(insertionPoint);
 }
 
 void HTMLImageElement::removedFrom(ContainerNode* insertionPoint)
 {
     if (!m_form || NodeTraversal::highestAncestorOrSelf(*m_form.get()) != NodeTraversal::highestAncestorOrSelf(*this))
         resetFormOwner();
     if (m_listener)
         document().mediaQueryMatcher().removeViewportListener(m_listener);
@@ skipping 254 matching lines @@
 {
     float value;
     // We don't care here if the sizes attribute exists, so we ignore the return value.
     // If it doesn't exist, we just return the default.
     sourceSizeValue(element, document(), value);
     return value;
 }
 
 void HTMLImageElement::forceReload() const
 {
-    imageLoader().updateFromElement(ImageLoader::UpdateForcedReload);
+    imageLoader().updateFromElement(ImageLoader::UpdateForcedReload, referrerPolicy());
 }
 
 void HTMLImageElement::selectSourceURL(ImageLoader::UpdateFromElementBehavior behavior)
 {
     if (!document().isActive())
         return;
 
     bool foundURL = false;
     ImageCandidate candidate = findBestFitImageFromPictureParent();
     if (!candidate.isEmpty()) {
         setBestFitURLAndDPRFromImageCandidate(candidate);
         foundURL = true;
     }
 
     if (!foundURL) {
         candidate = bestFitSourceForImageAttributes(document().devicePixelRatio(), sourceSize(*this), fastGetAttribute(srcAttr), fastGetAttribute(srcsetAttr), &document());
         setBestFitURLAndDPRFromImageCandidate(candidate);
     }
     if (m_intrinsicSizingViewportDependant && !m_listener) {
         m_listener = ViewportChangeListener::create(this);
         document().mediaQueryMatcher().addViewportListener(m_listener);
     }
-    imageLoader().updateFromElement(behavior);
+    imageLoader().updateFromElement(behavior, referrerPolicy());
 
     if (imageLoader().image() || (imageLoader().hasPendingActivity() && !imageSourceURL().isEmpty()))
         ensurePrimaryContent();
     else
         ensureFallbackContent();
 }
 
 const KURL& HTMLImageElement::sourceURL() const
 {
     return cachedImage()->response().url();
@@ skipping 55 matching lines @@
     EventDispatchForbiddenScope::AllowUserAgentEvents allowEvents;
     ensureUserAgentShadowRoot();
 }
 
 bool HTMLImageElement::isOpaque() const
 {
     Image* image = const_cast<HTMLImageElement*>(this)->imageContents();
     return image && image->currentFrameKnownToBeOpaque();
 }
 
+ReferrerPolicy HTMLImageElement::referrerPolicy() const
+{
+    ReferrerPolicy policy = ReferrerPolicyDefault;
+    if (RuntimeEnabledFeatures::referrerPolicyAttributeEnabled() && hasAttribute(referrerpolicyAttr)) {
+        SecurityPolicy::referrerPolicyFromString(fastGetAttribute(referrerpolicyAttr), &policy);
+    }
+
+    return policy;
 }

[Yoav Weiss, 2015/08/18 07:22:17]

Processing the referrer every time referrerPolicy() is called means that you'd
have to translate it from string each time. It's better to process it once in
parseAttribute() and on relevant mutations (if there are any).

Also, missed a newline :)

[estark, 2015/08/18 17:34:26]

Done.

+}