PlzNavigate: Move navigation-level mixed content checks to the browser.

content/common/origin_util.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/public/common/origin_util.h"
 
 #include "base/lazy_instance.h"
 #include "base/macros.h"
 #include "base/stl_util.h"
 #include "content/common/url_schemes.h"
 #include "net/base/url_util.h"
 #include "url/gurl.h"
 #include "url/url_util.h"
 
+namespace {
+
+// This function partially reflects the result from SecurityOrigin::isUnique,
+// not its actual implementation. It takes into account how
+// SecurityOrigin::create might return unique origins for URLs whose schemes are
+// included in SchemeRegistry::shouldTreatURLSchemeAsNoAccess.
+bool IsOriginUnique(const url::Origin& origin) {
+  return origin.unique() ||
+         base::ContainsValue(url::GetNoAccessSchemes(), origin.scheme());
+}
+
+}  // namespace
+
 namespace content {
 
 bool IsOriginSecure(const GURL& url) {
   if (url.SchemeIsCryptographic() || url.SchemeIsFile())
     return true;
 
   if (url.SchemeIsFileSystem() && url.inner_url() &&
       IsOriginSecure(*url.inner_url())) {
     return true;
   }
 
   std::string hostname = url.HostNoBrackets();
   if (net::IsLocalhost(hostname))
     return true;
 
   if (base::ContainsValue(url::GetSecureSchemes(), url.scheme()))
     return true;
 
-  if (base::ContainsValue(GetSecureOrigins(), url.GetOrigin())) {
+  if (base::ContainsValue(GetSecureOrigins(), url.GetOrigin()))
     return true;
-  }
 
   return false;
 }
 
 bool OriginCanAccessServiceWorkers(const GURL& url) {
   if (url.SchemeIsHTTPOrHTTPS() && IsOriginSecure(url))
     return true;
 
   if (base::ContainsValue(GetServiceWorkerSchemes(), url.scheme())) {
     return true;
   }
 
   return false;
 }
 
+bool IsOriginWhiteListedTrustworthy(const url::Origin& origin) {
+  if (IsOriginUnique(origin))
+    return false;
+
+  return base::ContainsValue(GetSecureOrigins(),
+                             origin.GetURL().HostNoBrackets());
+}
+
+bool IsPotentiallyTrustworthyOrigin(const url::Origin& origin) {
+  // Note: Considering this mirrors SecurityOrigin::isPotentiallyTrustworthy, it
+  // assumes m_isUniqueOriginPotentiallyTrustworthy is set to false. This
+  // implementation follows Blink's default behavior but in the renderer it can
+  // be changed per instance by calls to
+  // SecurityOrigin::setUniqueOriginIsPotentiallyTrustworthy.
+  if (IsOriginUnique(origin))
+    return false;
+
+  if (base::ContainsValue(url::GetSecureSchemes(), origin.scheme()) ||
+      base::ContainsValue(url::GetLocalSchemes(), origin.scheme()) ||
+      net::IsLocalhost(origin.GetURL().HostNoBrackets())) {
+    return true;
+  }
+
+  if (IsOriginWhiteListedTrustworthy(origin))
+    return true;
+
+  return false;
+}
+
 }  // namespace content