Require username and credential for turn/turns

third_party/WebKit/Source/modules/peerconnection/RTCPeerConnection.cpp

 /*
  * Copyright (C) 2012 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  *
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
@@ skipping 297 matching lines @@
         KURL url(KURL(), urlString);
         if (!url.isValid() ||
             !(url.protocolIs("turn") || url.protocolIs("turns") ||
               url.protocolIs("stun"))) {
           exceptionState.throwDOMException(
               SyntaxError,
               "Unsupported URL \"" + urlString +
                   "\". URL scheme must be \"stun\", \"turn\" or \"turns\".");
           return WebRTCConfiguration();
         }
+        if ((url.protocolIs("turn") || url.protocolIs("turns")) &&
+            (username.isNull() || credential.isNull())) {
+          exceptionState.throwDOMException(InvalidAccessError,
+                                           "Both username and credential are "
+                                           "required when the URL scheme is "
+                                           "\"turn\" or \"turns\".");
+        }
         iceServers.append(WebRTCIceServer{url, username, credential});
       }
     }
     webConfiguration.iceServers = iceServers;
   }
 
   if (configuration.hasCertificates()) {
     const HeapVector<Member<RTCCertificate>>& certificates =
         configuration.certificates();
     WebVector<std::unique_ptr<WebRTCCertificate>> certificatesCopy(
@@ skipping 1140 matching lines @@
 DEFINE_TRACE(RTCPeerConnection) {
   visitor->trace(m_localStreams);
   visitor->trace(m_remoteStreams);
   visitor->trace(m_dispatchScheduledEventRunner);
   visitor->trace(m_scheduledEvents);
   EventTargetWithInlineData::trace(visitor);
   ActiveDOMObject::trace(visitor);
 }
 
 }  // namespace blink