third_party/WebKit/Source/core/fetch/CrossOriginAccessControl.h - Issue 2264503002: Clean up SecurityOrigin handling around CrossOriginAccessControl::handleRedirect()

Side by Side Diff: third_party/WebKit/Source/core/fetch/CrossOriginAccessControl.h

Issue 2264503002: Clean up SecurityOrigin handling around CrossOriginAccessControl::handleRedirect() (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master

Patch Set: Rebase Created 4 years, 3 months ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

« no previous file with comments | « no previous file | third_party/WebKit/Source/core/fetch/CrossOriginAccessControl.cpp » ('j') | no next file with comments »

OLD	NEW
1 /*	1 /*

2 * Copyright (C) 2008 Apple Inc. All Rights Reserved.	2 * Copyright (C) 2008 Apple Inc. All Rights Reserved.

3 *	3 *

4 * Redistribution and use in source and binary forms, with or without	4 * Redistribution and use in source and binary forms, with or without

5 * modification, are permitted provided that the following conditions	5 * modification, are permitted provided that the following conditions

6 * are met:	6 * are met:

7 * 1. Redistributions of source code must retain the above copyright	7 * 1. Redistributions of source code must retain the above copyright

8 * notice, this list of conditions and the following disclaimer.	8 * notice, this list of conditions and the following disclaimer.

9 * 2. Redistributions in binary form must reproduce the above copyright	9 * 2. Redistributions in binary form must reproduce the above copyright

10 * notice, this list of conditions and the following disclaimer in the	10 * notice, this list of conditions and the following disclaimer in the

(...skipping 33 matching lines...) Expand 10 before \| Expand all \| Expand 10 after Loading...
44 class ResourceResponse;	44 class ResourceResponse;

45 class SecurityOrigin;	45 class SecurityOrigin;

46	46

47 class CrossOriginAccessControl {	47 class CrossOriginAccessControl {

48 STATIC_ONLY(CrossOriginAccessControl);	48 STATIC_ONLY(CrossOriginAccessControl);

49 public:	49 public:

50 // Given the new request URL, returns true if	50 // Given the new request URL, returns true if

51 // - the URL has a CORS supported scheme and	51 // - the URL has a CORS supported scheme and

52 // - the URL does not contain the userinfo production.	52 // - the URL does not contain the userinfo production.

53 static bool isLegalRedirectLocation(const KURL&, String& errorDescription);	53 static bool isLegalRedirectLocation(const KURL&, String& errorDescription);

54 static bool handleRedirect(SecurityOrigin*, ResourceRequest&, const Resource Response&, StoredCredentials, ResourceLoaderOptions&, String&);	54 static bool handleRedirect(const SecurityOrigin*, ResourceRequest&, const Re sourceResponse&, StoredCredentials, ResourceLoaderOptions&, String&);

55 };	55 };

56	56

57 CORE_EXPORT bool isOnAccessControlResponseHeaderWhitelist(const String&);	57 CORE_EXPORT bool isOnAccessControlResponseHeaderWhitelist(const String&);

58	58

59 void updateRequestForAccessControl(ResourceRequest&, SecurityOrigin*, StoredCred entials);	59 void updateRequestForAccessControl(ResourceRequest&, const SecurityOrigin*, Stor edCredentials);

60 CORE_EXPORT ResourceRequest createAccessControlPreflightRequest(const ResourceRe quest&, SecurityOrigin*);	60 CORE_EXPORT ResourceRequest createAccessControlPreflightRequest(const ResourceRe quest&, const SecurityOrigin*);

61	61

62 bool passesAccessControlCheck(const ResourceResponse&, StoredCredentials, Securi tyOrigin*, String& errorDescription, WebURLRequest::RequestContext requestType);	62 bool passesAccessControlCheck(const ResourceResponse&, StoredCredentials, const SecurityOrigin*, String& errorDescription, WebURLRequest::RequestContext request Type);

63 bool passesPreflightStatusCheck(const ResourceResponse&, String& errorDescriptio n);	63 bool passesPreflightStatusCheck(const ResourceResponse&, String& errorDescriptio n);

64 bool passesExternalPreflightCheck(const ResourceResponse&, String& errorDescript ion);	64 bool passesExternalPreflightCheck(const ResourceResponse&, String& errorDescript ion);

65 CORE_EXPORT void parseAccessControlExposeHeadersAllowList(const String& headerVa lue, HTTPHeaderSet&);	65 CORE_EXPORT void parseAccessControlExposeHeadersAllowList(const String& headerVa lue, HTTPHeaderSet&);

66 CORE_EXPORT void extractCorsExposedHeaderNamesList(const ResourceResponse&, HTTP HeaderSet&);	66 CORE_EXPORT void extractCorsExposedHeaderNamesList(const ResourceResponse&, HTTP HeaderSet&);

67	67

68 } // namespace blink	68 } // namespace blink

69	69

70 #endif // CrossOriginAccessControl_h	70 #endif // CrossOriginAccessControl_h

OLD	NEW