CORS-RFC1918: Pipe creator address space through SharedWorker creation.

third_party/WebKit/Source/platform/network/ResourceRequest.cpp

 /*
  * Copyright (C) 2003, 2006 Apple Computer, Inc.  All rights reserved.
  * Copyright (C) 2009, 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
@@ skipping 12 matching lines @@
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 
 #include "platform/network/ResourceRequest.h"
 
 #include "platform/HTTPNames.h"
 #include "platform/RuntimeEnabledFeatures.h"
 #include "platform/weborigin/SecurityOrigin.h"
 #include "public/platform/Platform.h"
+#include "public/platform/WebAddressSpace.h"
 #include "public/platform/WebURLRequest.h"
 
 namespace blink {
 
 double ResourceRequest::s_defaultTimeoutInterval = INT_MAX;
 
 ResourceRequest::ResourceRequest(CrossThreadResourceRequestData* data)
     : ResourceRequest()
 {
     setURL(data->m_url);
@@ skipping 323 matching lines @@
 {
     if (!equalIgnoringHeaderFields(a, b))
         return false;
 
     if (a.httpHeaderFields() != b.httpHeaderFields())
         return false;
 
     return true;
 }
 
-void ResourceRequest::setExternalRequestStateFromRequestorAddressSpace(WebURLRequest::AddressSpace requestorSpace)
+void ResourceRequest::setExternalRequestStateFromRequestorAddressSpace(WebAddressSpace requestorSpace)
 {
-    static_assert(WebURLRequest::AddressSpaceLocal < WebURLRequest::AddressSpacePrivate, "Local is inside Private");
-    static_assert(WebURLRequest::AddressSpaceLocal < WebURLRequest::AddressSpacePublic, "Local is inside Public");
-    static_assert(WebURLRequest::AddressSpacePrivate < WebURLRequest::AddressSpacePublic, "Private is inside Public");
+    static_assert(WebAddressSpaceLocal < WebAddressSpacePrivate, "Local is inside Private");
+    static_assert(WebAddressSpaceLocal < WebAddressSpacePublic, "Local is inside Public");
+    static_assert(WebAddressSpacePrivate < WebAddressSpacePublic, "Private is inside Public");
 
     // TODO(mkwst): This only checks explicit IP addresses. We'll have to move all this up to //net and //content in
     // order to have any real impact on gateway attacks. That turns out to be a TON of work. https://crbug.com/378566
     if (!RuntimeEnabledFeatures::corsRFC1918Enabled()) {
         m_isExternalRequest = false;
         return;
     }
 
-    WebURLRequest::AddressSpace targetSpace = WebURLRequest::AddressSpacePublic;
+    WebAddressSpace targetSpace = WebAddressSpacePublic;
     if (Platform::current()->isReservedIPAddress(m_url.host()))
-        targetSpace = WebURLRequest::AddressSpacePrivate;
+        targetSpace = WebAddressSpacePrivate;
     if (SecurityOrigin::create(m_url)->isLocalhost())
-        targetSpace = WebURLRequest::AddressSpaceLocal;
+        targetSpace = WebAddressSpaceLocal;
 
     m_isExternalRequest = requestorSpace > targetSpace;
 }
 
 bool ResourceRequest::isConditional() const
 {
     return (m_httpHeaderFields.contains(HTTPNames::If_Match)
         || m_httpHeaderFields.contains(HTTPNames::If_Modified_Since)
         || m_httpHeaderFields.contains(HTTPNames::If_None_Match)
         || m_httpHeaderFields.contains(HTTPNames::If_Range)
@@ skipping 56 matching lines @@
     m_didSetHTTPReferrer = false;
     m_checkForBrowserSideNavigation = true;
     m_uiStartTime = 0;
     m_isExternalRequest = false;
     m_inputPerfMetricReportPolicy = InputToLoadPerfMetricReportPolicy::NoReport;
     m_followedRedirect = false;
     m_requestorOrigin = SecurityOrigin::createUnique();
 }
 
 } // namespace blink