Index: content/browser/frame_host/xfo_throttle.cc |
diff --git a/content/browser/frame_host/xfo_throttle.cc b/content/browser/frame_host/xfo_throttle.cc |
new file mode 100644 |
index 0000000000000000000000000000000000000000..b09d7f4a5be58806553725f49027993a95a8264d |
--- /dev/null |
+++ b/content/browser/frame_host/xfo_throttle.cc |
@@ -0,0 +1,157 @@ |
+// Copyright 2015 The Chromium Authors. All rights reserved. |
+// Use of this source code is governed by a BSD-style license that can be |
+// found in the LICENSE file. |
+ |
+#include "content/browser/frame_host/xfo_throttle.h" |
+ |
+#include "base/strings/string_util.h" |
+#include "base/strings/stringprintf.h" |
+#include "content/browser/frame_host/frame_tree.h" |
+#include "content/browser/frame_host/frame_tree_node.h" |
+#include "content/browser/frame_host/navigation_handle_impl.h" |
+#include "content/public/browser/browser_thread.h" |
+#include "content/public/browser/navigation_handle.h" |
+#include "content/public/browser/navigation_throttle.h" |
+#include "content/public/common/console_message_level.h" |
+#include "net/http/http_response_headers.h" |
+#include "url/origin.h" |
+ |
+namespace content { |
+ |
+// static |
+scoped_ptr<NavigationThrottle> XFOThrottle::MaybeCreateThrottleFor( |
+ NavigationHandle* handle) { |
+ DCHECK_CURRENTLY_ON(content::BrowserThread::UI); |
+ |
+ if (handle->IsInMainFrame()) |
+ return nullptr; |
+ |
+ return scoped_ptr<NavigationThrottle>(new XFOThrottle(handle)); |
+} |
+ |
+XFOThrottle::XFOThrottle(NavigationHandle* handle) |
+ : NavigationThrottle(handle) {} |
+ |
+XFOThrottle::~XFOThrottle() {} |
+ |
+NavigationThrottle::ThrottleCheckResult XFOThrottle::WillProcessResponse() { |
+ DCHECK(!navigation_handle()->IsInMainFrame()); |
+ |
+ NavigationHandleImpl* handle = |
+ static_cast<NavigationHandleImpl*>(navigation_handle()); |
+ |
+ std::string header_value; |
+ HeaderDisposition disposition = |
+ ParseHeader(handle->GetResponseHeaders(), &header_value); |
+ switch (disposition) { |
+ case CONFLICT: |
+ ParseError(header_value, disposition); |
+ return NavigationThrottle::BLOCK; |
+ |
+ case INVALID: |
+ ParseError(header_value, disposition); |
+ // TODO(mkwst): Consider failing here. |
+ return NavigationThrottle::PROCEED; |
+ |
+ case DENY: |
+ ConsoleError(disposition); |
+ return NavigationThrottle::BLOCK; |
+ |
+ case SAMEORIGIN: { |
+ url::Origin current_origin(navigation_handle()->GetURL()); |
nasko
2016/01/20 23:15:07
Shouldn't we be using the GetOrigin() from the cur
Mike West
2016/01/21 14:51:24
XFO looks at the origin of the URL, not the origin
|
+ url::Origin top_origin = |
+ handle->frame_tree_node()->frame_tree()->root()->current_origin(); |
+ if (top_origin.IsSameOriginWith(current_origin)) |
+ return NavigationThrottle::PROCEED; |
+ ConsoleError(disposition); |
+ return NavigationThrottle::BLOCK; |
+ } |
+ |
+ case NOT_PRESENT: |
+ case ALLOWALL: |
+ return NavigationThrottle::PROCEED; |
+ } |
+ NOTREACHED(); |
+ return NavigationThrottle::PROCEED; |
+} |
+ |
+void XFOThrottle::ParseError(const std::string& value, |
+ HeaderDisposition disposition) { |
+ DCHECK(disposition == CONFLICT || disposition == INVALID); |
+ |
+ std::string message; |
+ if (disposition == CONFLICT) { |
+ message = base::StringPrintf( |
+ "Refused to display '%s' in a frame because it set multiple " |
+ "'X-Frame-Options' headers with conflicting values " |
+ "('%s'). Falling back to 'deny'.", |
+ navigation_handle()->GetURL().spec().c_str(), value.c_str()); |
+ } else { |
+ message = base::StringPrintf( |
+ "Invalid 'X-Frame-Options' header encountered when loading '%s': " |
+ "'%s' is not a recognized directive. The header will be ignored.", |
+ navigation_handle()->GetURL().spec().c_str(), value.c_str()); |
+ } |
+ |
+ NavigationHandleImpl* handle = |
+ static_cast<NavigationHandleImpl*>(navigation_handle()); |
+ // Log a console error in the parent of the current RenderFrameHost (as |
+ // the current RenderFrameHost itself doesn't yet have a document). |
+ handle->GetRenderFrameHost()->GetParent()->AddMessageToConsole( |
+ CONSOLE_MESSAGE_LEVEL_ERROR, message); |
+} |
+ |
+void XFOThrottle::ConsoleError(HeaderDisposition disposition) { |
+ DCHECK(disposition == DENY || disposition == SAMEORIGIN); |
+ std::string message = base::StringPrintf( |
+ "Refused to display '%s' in a frame because it set 'X-Frame-Options' " |
+ "to '%s'.", |
+ navigation_handle()->GetURL().spec().c_str(), |
+ disposition == DENY ? "deny" : "sameorigin"); |
+ |
+ NavigationHandleImpl* handle = |
+ static_cast<NavigationHandleImpl*>(navigation_handle()); |
+ // Log a console error in the parent of the current RenderFrameHost (as |
+ // the current RenderFrameHost itself doesn't yet have a document). |
+ handle->GetRenderFrameHost()->GetParent()->AddMessageToConsole( |
+ CONSOLE_MESSAGE_LEVEL_ERROR, message); |
+} |
+ |
+// static |
+XFOThrottle::HeaderDisposition XFOThrottle::ParseHeader( |
+ const net::HttpResponseHeaders* headers, |
+ std::string* header_value) { |
+ DCHECK(header_value); |
+ if (!headers) |
+ return NOT_PRESENT; |
+ |
+ void* iter = nullptr; |
+ std::string value; |
+ HeaderDisposition result = NOT_PRESENT; |
+ while (headers->EnumerateHeader(&iter, "x-frame-options", &value)) { |
+ HeaderDisposition current = INVALID; |
+ |
+ base::StringPiece trimmed = |
+ base::TrimWhitespaceASCII(value, base::TRIM_ALL); |
+ if (!header_value->empty()) |
+ header_value->append(", "); |
+ header_value->append(trimmed.as_string()); |
+ |
+ if (base::LowerCaseEqualsASCII(trimmed, "deny")) |
+ current = DENY; |
+ else if (base::LowerCaseEqualsASCII(trimmed, "allowall")) |
+ current = ALLOWALL; |
+ else if (base::LowerCaseEqualsASCII(trimmed, "sameorigin")) |
+ current = SAMEORIGIN; |
+ else |
+ current = INVALID; |
+ |
+ if (result == NOT_PRESENT) |
+ result = current; |
+ else if (result != current) |
+ result = CONFLICT; |
+ } |
+ return result; |
+} |
+ |
+} // namespace content |