| OLD | NEW |
| (Empty) |
| 1 /* | |
| 2 * Copyright (C) 1999 Lars Knoll (knoll@kde.org) | |
| 3 * (C) 1999 Antti Koivisto (koivisto@kde.org) | |
| 4 * (C) 2001 Dirk Mueller (mueller@kde.org) | |
| 5 * Copyright (C) 2004, 2005, 2006, 2007, 2008 Apple Inc. All rights reserved. | |
| 6 * (C) 2006 Alexey Proskuryakov (ap@nypop.com) | |
| 7 * Copyright (C) 2008 Torch Mobile Inc. All rights reserved. (http://www.torchmo
bile.com/) | |
| 8 * | |
| 9 * This library is free software; you can redistribute it and/or | |
| 10 * modify it under the terms of the GNU Library General Public | |
| 11 * License as published by the Free Software Foundation; either | |
| 12 * version 2 of the License, or (at your option) any later version. | |
| 13 * | |
| 14 * This library is distributed in the hope that it will be useful, | |
| 15 * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
| 16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
| 17 * Library General Public License for more details. | |
| 18 * | |
| 19 * You should have received a copy of the GNU Library General Public License | |
| 20 * along with this library; see the file COPYING.LIB. If not, write to | |
| 21 * the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, | |
| 22 * Boston, MA 02110-1301, USA. | |
| 23 */ | |
| 24 | |
| 25 #include "config.h" | |
| 26 #include "platform/network/FormDataBuilder.h" | |
| 27 | |
| 28 #include <limits> | |
| 29 #include "wtf/CryptographicallyRandomNumber.h" | |
| 30 #include "wtf/HexNumber.h" | |
| 31 #include "wtf/text/CString.h" | |
| 32 #include "wtf/text/TextEncoding.h" | |
| 33 | |
| 34 namespace blink { | |
| 35 | |
| 36 // Helper functions | |
| 37 static inline void append(Vector<char>& buffer, char string) | |
| 38 { | |
| 39 buffer.append(string); | |
| 40 } | |
| 41 | |
| 42 static inline void append(Vector<char>& buffer, const char* string) | |
| 43 { | |
| 44 buffer.append(string, strlen(string)); | |
| 45 } | |
| 46 | |
| 47 static inline void append(Vector<char>& buffer, const CString& string) | |
| 48 { | |
| 49 buffer.append(string.data(), string.length()); | |
| 50 } | |
| 51 | |
| 52 static void appendQuotedString(Vector<char>& buffer, const CString& string) | |
| 53 { | |
| 54 // Append a string as a quoted value, escaping quotes and line breaks. | |
| 55 // FIXME: Is it correct to use percent escaping here? Other browsers do not
encode these characters yet, | |
| 56 // so we should test popular servers to find out if there is an encoding for
m they can handle. | |
| 57 size_t length = string.length(); | |
| 58 for (size_t i = 0; i < length; ++i) { | |
| 59 char c = string.data()[i]; | |
| 60 | |
| 61 switch (c) { | |
| 62 case 0x0a: | |
| 63 append(buffer, "%0A"); | |
| 64 break; | |
| 65 case 0x0d: | |
| 66 append(buffer, "%0D"); | |
| 67 break; | |
| 68 case '"': | |
| 69 append(buffer, "%22"); | |
| 70 break; | |
| 71 default: | |
| 72 append(buffer, c); | |
| 73 } | |
| 74 } | |
| 75 } | |
| 76 | |
| 77 WTF::TextEncoding FormDataBuilder::encodingFromAcceptCharset(const String& accep
tCharset, const String& charset, const String& defaultCharset) | |
| 78 { | |
| 79 String normalizedAcceptCharset = acceptCharset; | |
| 80 normalizedAcceptCharset.replace(',', ' '); | |
| 81 | |
| 82 Vector<String> charsets; | |
| 83 normalizedAcceptCharset.split(' ', charsets); | |
| 84 | |
| 85 WTF::TextEncoding encoding; | |
| 86 | |
| 87 Vector<String>::const_iterator end = charsets.end(); | |
| 88 for (Vector<String>::const_iterator it = charsets.begin(); it != end; ++it)
{ | |
| 89 if ((encoding = WTF::TextEncoding(*it)).isValid()) | |
| 90 return encoding; | |
| 91 } | |
| 92 | |
| 93 if (charset.isEmpty()) { | |
| 94 if (defaultCharset.isEmpty()) | |
| 95 return WTF::UTF8Encoding(); | |
| 96 | |
| 97 return defaultCharset; | |
| 98 } | |
| 99 | |
| 100 return charset; | |
| 101 } | |
| 102 | |
| 103 Vector<char> FormDataBuilder::generateUniqueBoundaryString() | |
| 104 { | |
| 105 Vector<char> boundary; | |
| 106 | |
| 107 // The RFC 2046 spec says the alphanumeric characters plus the | |
| 108 // following characters are legal for boundaries: '()+_,-./:=? | |
| 109 // However the following characters, though legal, cause some sites | |
| 110 // to fail: (),./:=+ | |
| 111 // Note that our algorithm makes it twice as much likely for 'A' or 'B' | |
| 112 // to appear in the boundary string, because 0x41 and 0x42 are present in | |
| 113 // the below array twice. | |
| 114 static const char alphaNumericEncodingMap[64] = { | |
| 115 0x41, 0x42, 0x43, 0x44, 0x45, 0x46, 0x47, 0x48, | |
| 116 0x49, 0x4A, 0x4B, 0x4C, 0x4D, 0x4E, 0x4F, 0x50, | |
| 117 0x51, 0x52, 0x53, 0x54, 0x55, 0x56, 0x57, 0x58, | |
| 118 0x59, 0x5A, 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, | |
| 119 0x67, 0x68, 0x69, 0x6A, 0x6B, 0x6C, 0x6D, 0x6E, | |
| 120 0x6F, 0x70, 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, | |
| 121 0x77, 0x78, 0x79, 0x7A, 0x30, 0x31, 0x32, 0x33, | |
| 122 0x34, 0x35, 0x36, 0x37, 0x38, 0x39, 0x41, 0x42 | |
| 123 }; | |
| 124 | |
| 125 // Start with an informative prefix. | |
| 126 append(boundary, "----WebKitFormBoundary"); | |
| 127 | |
| 128 // Append 16 random 7bit ascii AlphaNumeric characters. | |
| 129 Vector<char> randomBytes; | |
| 130 | |
| 131 for (unsigned i = 0; i < 4; ++i) { | |
| 132 uint32_t randomness = cryptographicallyRandomNumber(); | |
| 133 randomBytes.append(alphaNumericEncodingMap[(randomness >> 24) & 0x3F]); | |
| 134 randomBytes.append(alphaNumericEncodingMap[(randomness >> 16) & 0x3F]); | |
| 135 randomBytes.append(alphaNumericEncodingMap[(randomness >> 8) & 0x3F]); | |
| 136 randomBytes.append(alphaNumericEncodingMap[randomness & 0x3F]); | |
| 137 } | |
| 138 | |
| 139 boundary.appendVector(randomBytes); | |
| 140 boundary.append(0); // Add a 0 at the end so we can use this as a C-style st
ring. | |
| 141 return boundary; | |
| 142 } | |
| 143 | |
| 144 void FormDataBuilder::beginMultiPartHeader(Vector<char>& buffer, const CString&
boundary, const CString& name) | |
| 145 { | |
| 146 addBoundaryToMultiPartHeader(buffer, boundary); | |
| 147 | |
| 148 // FIXME: This loses data irreversibly if the input name includes characters
you can't encode | |
| 149 // in the website's character set. | |
| 150 append(buffer, "Content-Disposition: form-data; name=\""); | |
| 151 appendQuotedString(buffer, name); | |
| 152 append(buffer, '"'); | |
| 153 } | |
| 154 | |
| 155 void FormDataBuilder::addBoundaryToMultiPartHeader(Vector<char>& buffer, const C
String& boundary, bool isLastBoundary) | |
| 156 { | |
| 157 append(buffer, "--"); | |
| 158 append(buffer, boundary); | |
| 159 | |
| 160 if (isLastBoundary) | |
| 161 append(buffer, "--"); | |
| 162 | |
| 163 append(buffer, "\r\n"); | |
| 164 } | |
| 165 | |
| 166 void FormDataBuilder::addFilenameToMultiPartHeader(Vector<char>& buffer, const W
TF::TextEncoding& encoding, const String& filename) | |
| 167 { | |
| 168 // FIXME: This loses data irreversibly if the filename includes characters y
ou can't encode | |
| 169 // in the website's character set. | |
| 170 append(buffer, "; filename=\""); | |
| 171 appendQuotedString(buffer, encoding.encode(filename, WTF::QuestionMarksForUn
encodables)); | |
| 172 append(buffer, '"'); | |
| 173 } | |
| 174 | |
| 175 void FormDataBuilder::addContentTypeToMultiPartHeader(Vector<char>& buffer, cons
t CString& mimeType) | |
| 176 { | |
| 177 append(buffer, "\r\nContent-Type: "); | |
| 178 append(buffer, mimeType); | |
| 179 } | |
| 180 | |
| 181 void FormDataBuilder::finishMultiPartHeader(Vector<char>& buffer) | |
| 182 { | |
| 183 append(buffer, "\r\n\r\n"); | |
| 184 } | |
| 185 | |
| 186 void FormDataBuilder::addKeyValuePairAsFormData(Vector<char>& buffer, const CStr
ing& key, const CString& value, FormData::EncodingType encodingType) | |
| 187 { | |
| 188 if (encodingType == FormData::TextPlain) { | |
| 189 if (!buffer.isEmpty()) | |
| 190 append(buffer, "\r\n"); | |
| 191 append(buffer, key); | |
| 192 append(buffer, '='); | |
| 193 append(buffer, value); | |
| 194 } else { | |
| 195 if (!buffer.isEmpty()) | |
| 196 append(buffer, '&'); | |
| 197 encodeStringAsFormData(buffer, key); | |
| 198 append(buffer, '='); | |
| 199 encodeStringAsFormData(buffer, value); | |
| 200 } | |
| 201 } | |
| 202 | |
| 203 void FormDataBuilder::encodeStringAsFormData(Vector<char>& buffer, const CString
& string) | |
| 204 { | |
| 205 // Same safe characters as Netscape for compatibility. | |
| 206 static const char safeCharacters[] = "-._*"; | |
| 207 | |
| 208 // http://www.w3.org/TR/html4/interact/forms.html#h-17.13.4.1 | |
| 209 unsigned length = string.length(); | |
| 210 for (unsigned i = 0; i < length; ++i) { | |
| 211 unsigned char c = string.data()[i]; | |
| 212 | |
| 213 if ((c >= 'A' && c <= 'Z') || (c >= 'a' && c <= 'z') || (c >= '0' && c <
= '9') || strchr(safeCharacters, c)) | |
| 214 append(buffer, c); | |
| 215 else if (c == ' ') | |
| 216 append(buffer, '+'); | |
| 217 else if (c == '\n' || (c == '\r' && (i + 1 >= length || string.data()[i
+ 1] != '\n'))) | |
| 218 append(buffer, "%0D%0A"); | |
| 219 else if (c != '\r') { | |
| 220 append(buffer, '%'); | |
| 221 appendByteAsHex(c, buffer); | |
| 222 } | |
| 223 } | |
| 224 } | |
| 225 | |
| 226 } | |
| OLD | NEW |