[NoStatePrefetch] Support only GET and HEAD

chrome/browser/prerender/prerender_contents.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/prerender/prerender_contents.h"
 
 #include <stddef.h>
 
 #include <algorithm>
 #include <functional>
@@ skipping 40 matching lines @@
 using content::RenderViewHost;
 using content::ResourceRedirectDetails;
 using content::ResourceType;
 using content::SessionStorageNamespace;
 using content::WebContents;
 
 namespace prerender {
 
 namespace {
 
+// Valid HTTP methods for both prefetch and prerendering.
+const char* const kValidHttpMethods[] = {
+    "GET", "HEAD",
+};
+
+// Additional valid HTTP methods for prerendering.
+const char* const kValidHttpMethodsForPrerendering[] = {
+    "OPTIONS", "POST", "TRACE",
+};
+
 void ResumeThrottles(
     std::vector<base::WeakPtr<PrerenderResourceThrottle> > throttles) {
   for (size_t i = 0; i < throttles.size(); i++) {
     if (throttles[i])
       throttles[i]->Resume();
   }
 }
 
 }  // namespace
 
@@ skipping 145 matching lines @@
 
 bool PrerenderContents::Init() {
   return AddAliasURL(prerender_url_);
 }
 
 void PrerenderContents::SetPrerenderMode(PrerenderMode mode) {
   DCHECK(!prerendering_has_started_);
   prerender_mode_ = mode;
 }
 
+bool PrerenderContents::IsValidHttpMethod(const std::string& method) {
+  DCHECK_NE(prerender_mode(), NO_PRERENDER);
+  // method has been canonicalized to upper case at this point so we can just

[pasko, 2016/09/21 17:59:53]

nit: s/method/|method|/

[droger, 2016/09/22 08:42:01]

Done.

+  // compare them.
+  DCHECK_EQ(method, base::ToUpperASCII(method));
+  for (const char* const valid_method : kValidHttpMethods) {
+    if (method == valid_method)
+      return true;
+  }
+
+  if (prerender_mode() == PREFETCH_ONLY)
+    return false;
+
+  for (const char* const valid_method : kValidHttpMethodsForPrerendering) {

[pasko, 2016/09/21 17:59:53]

nit: do we really need to be so explicit here about const?

perhaps auto* valid_method?

[droger, 2016/09/22 08:42:01]

Done.

+    if (method == valid_method)
+      return true;
+  }
+
+  return false;
+}
+
 // static
 PrerenderContents::Factory* PrerenderContents::CreateFactory() {
   return new PrerenderContentsFactoryImpl();
 }
 
 // static
 PrerenderContents* PrerenderContents::FromWebContents(
     content::WebContents* web_contents) {
   if (!web_contents)
     return NULL;
@@ skipping 488 matching lines @@
 void PrerenderContents::AddResourceThrottle(
     const base::WeakPtr<PrerenderResourceThrottle>& throttle) {
   resource_throttles_.push_back(throttle);
 }
 
 void PrerenderContents::AddNetworkBytes(int64_t bytes) {
   network_bytes_ += bytes;
 }
 
 }  // namespace prerender