Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(95)

Side by Side Diff: third_party/WebKit/Source/core/fetch/CrossOriginAccessControl.h

Issue 1745083002: CORS-RFC1918: Force preflights for external requests in DocumentThreadableLoader. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Test. Created 4 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 /* 1 /*
2 * Copyright (C) 2008 Apple Inc. All Rights Reserved. 2 * Copyright (C) 2008 Apple Inc. All Rights Reserved.
3 * 3 *
4 * Redistribution and use in source and binary forms, with or without 4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that the following conditions 5 * modification, are permitted provided that the following conditions
6 * are met: 6 * are met:
7 * 1. Redistributions of source code must retain the above copyright 7 * 1. Redistributions of source code must retain the above copyright
8 * notice, this list of conditions and the following disclaimer. 8 * notice, this list of conditions and the following disclaimer.
9 * 2. Redistributions in binary form must reproduce the above copyright 9 * 2. Redistributions in binary form must reproduce the above copyright
10 * notice, this list of conditions and the following disclaimer in the 10 * notice, this list of conditions and the following disclaimer in the
(...skipping 43 matching lines...) Expand 10 before | Expand all | Expand 10 after
54 static bool handleRedirect(SecurityOrigin*, ResourceRequest&, const Resource Response&, StoredCredentials, ResourceLoaderOptions&, String&); 54 static bool handleRedirect(SecurityOrigin*, ResourceRequest&, const Resource Response&, StoredCredentials, ResourceLoaderOptions&, String&);
55 }; 55 };
56 56
57 CORE_EXPORT bool isOnAccessControlResponseHeaderWhitelist(const String&); 57 CORE_EXPORT bool isOnAccessControlResponseHeaderWhitelist(const String&);
58 58
59 void updateRequestForAccessControl(ResourceRequest&, SecurityOrigin*, StoredCred entials); 59 void updateRequestForAccessControl(ResourceRequest&, SecurityOrigin*, StoredCred entials);
60 CORE_EXPORT ResourceRequest createAccessControlPreflightRequest(const ResourceRe quest&, SecurityOrigin*); 60 CORE_EXPORT ResourceRequest createAccessControlPreflightRequest(const ResourceRe quest&, SecurityOrigin*);
61 61
62 bool passesAccessControlCheck(const ResourceResponse&, StoredCredentials, Securi tyOrigin*, String& errorDescription, WebURLRequest::RequestContext requestType); 62 bool passesAccessControlCheck(const ResourceResponse&, StoredCredentials, Securi tyOrigin*, String& errorDescription, WebURLRequest::RequestContext requestType);
63 bool passesPreflightStatusCheck(const ResourceResponse&, String& errorDescriptio n); 63 bool passesPreflightStatusCheck(const ResourceResponse&, String& errorDescriptio n);
64 bool passesExternalPreflightCheck(const ResourceResponse&, String& errorDescript ion);
64 CORE_EXPORT void parseAccessControlExposeHeadersAllowList(const String& headerVa lue, HTTPHeaderSet&); 65 CORE_EXPORT void parseAccessControlExposeHeadersAllowList(const String& headerVa lue, HTTPHeaderSet&);
65 66
66 } // namespace blink 67 } // namespace blink
67 68
68 #endif // CrossOriginAccessControl_h 69 #endif // CrossOriginAccessControl_h
OLDNEW
« no previous file with comments | « third_party/WebKit/Source/core/dom/Document.cpp ('k') | third_party/WebKit/Source/core/fetch/CrossOriginAccessControl.cpp » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698