Support redirectUrl at onHeadersReceived in WebRequest / DWR API

net/http/http_response_headers.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_HTTP_HTTP_RESPONSE_HEADERS_H_
 #define NET_HTTP_HTTP_RESPONSE_HEADERS_H_
 
 #include <string>
 #include <vector>
 
 #include "base/basictypes.h"
 #include "base/containers/hash_tables.h"
 #include "base/memory/ref_counted.h"
 #include "base/strings/string_piece.h"
 #include "net/base/net_export.h"
 #include "net/base/net_log.h"
 #include "net/http/http_version.h"
+#include "url/gurl.h"
 
 class Pickle;
 class PickleIterator;
 
 namespace base {
 class Time;
 class TimeDelta;
 }
 
 namespace net {
@@ skipping 155 matching lines @@
   bool GetCharset(std::string* charset) const;
 
   // Returns true if this response corresponds to a redirect.  The target
   // location of the redirect is optionally returned if location is non-null.
   bool IsRedirect(std::string* location) const;
 
   // Returns true if the HTTP response code passed in corresponds to a
   // redirect.
   static bool IsRedirectResponseCode(int response_code);
 
+  // Replace the Location header and HTTP status line, then mark the redirect
+  // URL as safe, i.e. assume that the redirect is always allowed.
+  void SetSafeRedirect(GURL new_url);
+
+  // Whether |location| matches a redirect target that has been marked as safe.
+  bool IsSafeRedirect(const GURL& location) const;
+
+  // Whether a safe redirection target has been set.
+  bool HasSafeRedirect() const;
+
   // Returns true if the response cannot be reused without validation.  The
   // result is relative to the current_time parameter, which is a parameter to
   // support unit testing.  The request_time parameter indicates the time at
   // which the request was made that resulted in this response, which was
   // received at response_time.
   bool RequiresValidation(const base::Time& request_time,
                           const base::Time& response_time,
                           const base::Time& current_time) const;
 
   // Returns the amount of time the server claims the response is fresh from
@@ skipping 187 matching lines @@
   // null byte) and then followed by the raw null-terminated headers from the
   // input that was passed to our constructor.  We preserve the input [*] to
   // maintain as much ancillary fidelity as possible (since it is sometimes
   // hard to tell what may matter down-stream to a consumer of XMLHttpRequest).
   // [*] The status line may be modified.
   std::string raw_headers_;
 
   // This is the parsed HTTP response code.
   int response_code_;
 
+  // A redirect target that has explicitly been marked as safe.
+  GURL allowed_unsafe_redirect_url_;
+
   // The normalized http version (consistent with what GetStatusLine() returns).
   HttpVersion http_version_;
 
   // The parsed http version number (not normalized).
   HttpVersion parsed_http_version_;
 
   DISALLOW_COPY_AND_ASSIGN(HttpResponseHeaders);
 };
 
 }  // namespace net
 
 #endif  // NET_HTTP_HTTP_RESPONSE_HEADERS_H_