| OLD | NEW |
| 1 /* | 1 /* |
| 2 * Copyright (C) 2010, 2011, 2012 Google Inc. All rights reserved. | 2 * Copyright (C) 2010, 2011, 2012 Google Inc. All rights reserved. |
| 3 * | 3 * |
| 4 * Redistribution and use in source and binary forms, with or without | 4 * Redistribution and use in source and binary forms, with or without |
| 5 * modification, are permitted provided that the following conditions are | 5 * modification, are permitted provided that the following conditions are |
| 6 * met: | 6 * met: |
| 7 * | 7 * |
| 8 * * Redistributions of source code must retain the above copyright | 8 * * Redistributions of source code must retain the above copyright |
| 9 * notice, this list of conditions and the following disclaimer. | 9 * notice, this list of conditions and the following disclaimer. |
| 10 * * Redistributions in binary form must reproduce the above | 10 * * Redistributions in binary form must reproduce the above |
| (...skipping 75 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 86 bool m_usingAccessControl; | 86 bool m_usingAccessControl; |
| 87 }; | 87 }; |
| 88 | 88 |
| 89 void HTTPResponseHeaderValidator::visitHeader(const WebString& name, const WebSt
ring& value) | 89 void HTTPResponseHeaderValidator::visitHeader(const WebString& name, const WebSt
ring& value) |
| 90 { | 90 { |
| 91 String headerName(name); | 91 String headerName(name); |
| 92 if (m_usingAccessControl) { | 92 if (m_usingAccessControl) { |
| 93 if (equalIgnoringCase(headerName, "access-control-expose-headers")) | 93 if (equalIgnoringCase(headerName, "access-control-expose-headers")) |
| 94 parseAccessControlExposeHeadersAllowList(value, m_exposedHeaders); | 94 parseAccessControlExposeHeadersAllowList(value, m_exposedHeaders); |
| 95 else if (!isOnAccessControlResponseHeaderWhitelist(headerName)) | 95 else if (!isOnAccessControlResponseHeaderWhitelist(headerName)) |
| 96 m_blockedHeaders.add(name); | 96 m_blockedHeaders.add(static_cast<String>(name)); |
| 97 } | 97 } |
| 98 } | 98 } |
| 99 | 99 |
| 100 const HTTPHeaderSet& HTTPResponseHeaderValidator::blockedHeaders() | 100 const HTTPHeaderSet& HTTPResponseHeaderValidator::blockedHeaders() |
| 101 { | 101 { |
| 102 // Remove exposed headers from the blocked set. | 102 // Remove exposed headers from the blocked set. |
| 103 if (!m_exposedHeaders.isEmpty()) { | 103 if (!m_exposedHeaders.isEmpty()) { |
| 104 // Don't allow Set-Cookie headers to be exposed. | 104 // Don't allow Set-Cookie headers to be exposed. |
| 105 m_exposedHeaders.remove("set-cookie"); | 105 m_exposedHeaders.remove("set-cookie"); |
| 106 m_exposedHeaders.remove("set-cookie2"); | 106 m_exposedHeaders.remove("set-cookie2"); |
| (...skipping 276 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 383 if (m_loader) | 383 if (m_loader) |
| 384 m_loader->setDefersLoading(defersLoading); | 384 m_loader->setDefersLoading(defersLoading); |
| 385 } | 385 } |
| 386 | 386 |
| 387 void AssociatedURLLoader::setLoadingTaskRunner(blink::WebTaskRunner*) | 387 void AssociatedURLLoader::setLoadingTaskRunner(blink::WebTaskRunner*) |
| 388 { | 388 { |
| 389 // TODO(alexclarke): Maybe support this one day if it proves worthwhile. | 389 // TODO(alexclarke): Maybe support this one day if it proves worthwhile. |
| 390 } | 390 } |
| 391 | 391 |
| 392 } // namespace blink | 392 } // namespace blink |
| OLD | NEW |