| OLD | NEW |
| 1 /* | 1 /* |
| 2 * Copyright (C) 2011 Google, Inc. All rights reserved. | 2 * Copyright (C) 2011 Google, Inc. All rights reserved. |
| 3 * | 3 * |
| 4 * Redistribution and use in source and binary forms, with or without | 4 * Redistribution and use in source and binary forms, with or without |
| 5 * modification, are permitted provided that the following conditions | 5 * modification, are permitted provided that the following conditions |
| 6 * are met: | 6 * are met: |
| 7 * 1. Redistributions of source code must retain the above copyright | 7 * 1. Redistributions of source code must retain the above copyright |
| 8 * notice, this list of conditions and the following disclaimer. | 8 * notice, this list of conditions and the following disclaimer. |
| 9 * 2. Redistributions in binary form must reproduce the above copyright | 9 * 2. Redistributions in binary form must reproduce the above copyright |
| 10 * notice, this list of conditions and the following disclaimer in the | 10 * notice, this list of conditions and the following disclaimer in the |
| (...skipping 32 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 43 #include "core/inspector/ConsoleMessage.h" | 43 #include "core/inspector/ConsoleMessage.h" |
| 44 #include "core/inspector/InspectorInstrumentation.h" | 44 #include "core/inspector/InspectorInstrumentation.h" |
| 45 #include "core/inspector/ScriptCallStack.h" | 45 #include "core/inspector/ScriptCallStack.h" |
| 46 #include "core/loader/DocumentLoader.h" | 46 #include "core/loader/DocumentLoader.h" |
| 47 #include "core/loader/PingLoader.h" | 47 #include "core/loader/PingLoader.h" |
| 48 #include "platform/JSONValues.h" | 48 #include "platform/JSONValues.h" |
| 49 #include "platform/ParsingUtilities.h" | 49 #include "platform/ParsingUtilities.h" |
| 50 #include "platform/RuntimeEnabledFeatures.h" | 50 #include "platform/RuntimeEnabledFeatures.h" |
| 51 #include "platform/network/ContentSecurityPolicyParsers.h" | 51 #include "platform/network/ContentSecurityPolicyParsers.h" |
| 52 #include "platform/network/ContentSecurityPolicyResponseHeaders.h" | 52 #include "platform/network/ContentSecurityPolicyResponseHeaders.h" |
| 53 #include "platform/network/FormData.h" | 53 #include "platform/network/EncodedFormData.h" |
| 54 #include "platform/network/ResourceRequest.h" | 54 #include "platform/network/ResourceRequest.h" |
| 55 #include "platform/network/ResourceResponse.h" | 55 #include "platform/network/ResourceResponse.h" |
| 56 #include "platform/weborigin/KURL.h" | 56 #include "platform/weborigin/KURL.h" |
| 57 #include "platform/weborigin/KnownPorts.h" | 57 #include "platform/weborigin/KnownPorts.h" |
| 58 #include "platform/weborigin/SchemeRegistry.h" | 58 #include "platform/weborigin/SchemeRegistry.h" |
| 59 #include "platform/weborigin/SecurityOrigin.h" | 59 #include "platform/weborigin/SecurityOrigin.h" |
| 60 #include "public/platform/Platform.h" | 60 #include "public/platform/Platform.h" |
| 61 #include "public/platform/WebURLRequest.h" | 61 #include "public/platform/WebURLRequest.h" |
| 62 #include "wtf/StringHasher.h" | 62 #include "wtf/StringHasher.h" |
| 63 #include "wtf/text/StringBuilder.h" | 63 #include "wtf/text/StringBuilder.h" |
| (...skipping 703 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 767 } | 767 } |
| 768 cspReport->setNumber("status-code", violationData.statusCode()); | 768 cspReport->setNumber("status-code", violationData.statusCode()); |
| 769 | 769 |
| 770 RefPtr<JSONObject> reportObject = JSONObject::create(); | 770 RefPtr<JSONObject> reportObject = JSONObject::create(); |
| 771 reportObject->setObject("csp-report", cspReport.release()); | 771 reportObject->setObject("csp-report", cspReport.release()); |
| 772 String stringifiedReport = reportObject->toJSONString(); | 772 String stringifiedReport = reportObject->toJSONString(); |
| 773 | 773 |
| 774 if (!shouldSendViolationReport(stringifiedReport)) | 774 if (!shouldSendViolationReport(stringifiedReport)) |
| 775 return; | 775 return; |
| 776 | 776 |
| 777 RefPtr<FormData> report = FormData::create(stringifiedReport.utf8()); | 777 RefPtr<EncodedFormData> report = EncodedFormData::create(stringifiedReport.u
tf8()); |
| 778 | 778 |
| 779 for (const String& endpoint : reportEndpoints) { | 779 for (const String& endpoint : reportEndpoints) { |
| 780 // If we have a context frame we're dealing with 'frame-ancestors' and w
e don't have our | 780 // If we have a context frame we're dealing with 'frame-ancestors' and w
e don't have our |
| 781 // own execution context. Use the frame's document to complete the endpo
int URL, overriding | 781 // own execution context. Use the frame's document to complete the endpo
int URL, overriding |
| 782 // its URL with the blocked document's URL. | 782 // its URL with the blocked document's URL. |
| 783 ASSERT(!contextFrame || !m_executionContext); | 783 ASSERT(!contextFrame || !m_executionContext); |
| 784 ASSERT(!contextFrame || equalIgnoringCase(effectiveDirective, FrameAnces
tors)); | 784 ASSERT(!contextFrame || equalIgnoringCase(effectiveDirective, FrameAnces
tors)); |
| 785 KURL url = contextFrame ? frame->document()->completeURLWithOverride(end
point, blockedURL) : completeURL(endpoint); | 785 KURL url = contextFrame ? frame->document()->completeURLWithOverride(end
point, blockedURL) : completeURL(endpoint); |
| 786 PingLoader::sendViolationReport(frame, url, report, PingLoader::ContentS
ecurityPolicyViolationReport); | 786 PingLoader::sendViolationReport(frame, url, report, PingLoader::ContentS
ecurityPolicyViolationReport); |
| 787 } | 787 } |
| (...skipping 220 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 1008 // Collisions have no security impact, so we can save space by storing only
the string's hash rather than the whole report. | 1008 // Collisions have no security impact, so we can save space by storing only
the string's hash rather than the whole report. |
| 1009 return !m_violationReportsSent.contains(report.impl()->hash()); | 1009 return !m_violationReportsSent.contains(report.impl()->hash()); |
| 1010 } | 1010 } |
| 1011 | 1011 |
| 1012 void ContentSecurityPolicy::didSendViolationReport(const String& report) | 1012 void ContentSecurityPolicy::didSendViolationReport(const String& report) |
| 1013 { | 1013 { |
| 1014 m_violationReportsSent.add(report.impl()->hash()); | 1014 m_violationReportsSent.add(report.impl()->hash()); |
| 1015 } | 1015 } |
| 1016 | 1016 |
| 1017 } // namespace blink | 1017 } // namespace blink |
| OLD | NEW |