Add UMA to count the usage of sendBeacon with non-simple Content-Type

third_party/WebKit/Source/modules/beacon/NavigatorBeacon.cpp

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/beacon/NavigatorBeacon.h"
 
 #include "bindings/core/v8/ExceptionState.h"
 #include "bindings/modules/v8/ArrayBufferViewOrBlobOrStringOrFormData.h"
 #include "core/dom/DOMArrayBufferView.h"
 #include "core/dom/ExceptionCode.h"
 #include "core/dom/ExecutionContext.h"
+#include "core/fetch/FetchUtils.h"
 #include "core/fileapi/Blob.h"
 #include "core/frame/LocalFrame.h"
 #include "core/frame/Settings.h"
 #include "core/frame/UseCounter.h"
 #include "core/frame/csp/ContentSecurityPolicy.h"
 #include "core/html/FormData.h"
 #include "core/loader/BeaconLoader.h"
 
 namespace blink {
 
@@ skipping 82 matching lines @@
     NavigatorBeacon& impl = NavigatorBeacon::from(navigator);
 
     KURL url = context->completeURL(urlstring);
     if (!impl.canSendBeacon(context, url, exceptionState))
         return false;
 
     int allowance = impl.maxAllowance();
     int bytes = 0;
     bool allowed;
 
-    if (data.isArrayBufferView())
+    if (data.isArrayBufferView()) {
         allowed = BeaconLoader::sendBeacon(impl.frame(), allowance, url, data.getAsArrayBufferView(), bytes);
-    else if (data.isBlob())
-        allowed = BeaconLoader::sendBeacon(impl.frame(), allowance, url, data.getAsBlob(), bytes);
-    else if (data.isString())
+    } else if (data.isBlob()) {
+        Blob* blob = data.getAsBlob();
+        if (!FetchUtils::isSimpleContentType(AtomicString(blob->type()))) {
+            UseCounter::count(context, UseCounter::SendBeaconWithNonSimpleContentType);
+            if (RuntimeEnabledFeatures::sendBeaconThrowForBlobWithNonSimpleTypeEnabled()) {
+                exceptionState.throwSecurityError("sendBeacon() with a Blob whose type is not CORS-safelisted MIME type is disallowed experimentally. See http://crbug.com/490015 for details.");
+                return false;
+            }
+        }
+        allowed = BeaconLoader::sendBeacon(impl.frame(), allowance, url, blob, bytes);
+    } else if (data.isString()) {
         allowed = BeaconLoader::sendBeacon(impl.frame(), allowance, url, data.getAsString(), bytes);
-    else if (data.isFormData())
+    } else if (data.isFormData()) {
         allowed = BeaconLoader::sendBeacon(impl.frame(), allowance, url, data.getAsFormData(), bytes);
-    else
+    } else {
         allowed = BeaconLoader::sendBeacon(impl.frame(), allowance, url, String(), bytes);
+    }
 
     return impl.beaconResult(context, allowed, bytes);
 }
 
 } // namespace blink