OLD | NEW |
1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "content/public/common/origin_util.h" | 5 #include "content/public/common/origin_util.h" |
6 | 6 |
7 #include "base/lazy_instance.h" | 7 #include "base/lazy_instance.h" |
8 #include "base/macros.h" | 8 #include "base/macros.h" |
9 #include "base/stl_util.h" | 9 #include "base/stl_util.h" |
10 #include "content/public/common/content_client.h" | 10 #include "content/common/url_schemes.h" |
11 #include "net/base/url_util.h" | 11 #include "net/base/url_util.h" |
12 #include "url/gurl.h" | 12 #include "url/gurl.h" |
13 | 13 |
14 namespace content { | 14 namespace content { |
15 | 15 |
16 namespace { | |
17 | |
18 class SchemeAndOriginWhitelist { | |
19 public: | |
20 SchemeAndOriginWhitelist() { Reset(); } | |
21 ~SchemeAndOriginWhitelist() {} | |
22 | |
23 void Reset() { | |
24 secure_schemes_.clear(); | |
25 secure_origins_.clear(); | |
26 service_worker_schemes_.clear(); | |
27 GetContentClient()->AddSecureSchemesAndOrigins(&secure_schemes_, | |
28 &secure_origins_); | |
29 GetContentClient()->AddServiceWorkerSchemes(&service_worker_schemes_); | |
30 } | |
31 | |
32 const std::set<std::string>& secure_schemes() const { | |
33 return secure_schemes_; | |
34 } | |
35 const std::set<GURL>& secure_origins() const { return secure_origins_; } | |
36 const std::set<std::string>& service_worker_schemes() const { | |
37 return service_worker_schemes_; | |
38 } | |
39 | |
40 private: | |
41 std::set<std::string> secure_schemes_; | |
42 std::set<GURL> secure_origins_; | |
43 std::set<std::string> service_worker_schemes_; | |
44 DISALLOW_COPY_AND_ASSIGN(SchemeAndOriginWhitelist); | |
45 }; | |
46 | |
47 base::LazyInstance<SchemeAndOriginWhitelist>::Leaky g_trustworthy_whitelist = | |
48 LAZY_INSTANCE_INITIALIZER; | |
49 | |
50 } // namespace | |
51 | |
52 bool IsOriginSecure(const GURL& url) { | 16 bool IsOriginSecure(const GURL& url) { |
53 if (url.SchemeIsCryptographic() || url.SchemeIsFile()) | 17 if (url.SchemeIsCryptographic() || url.SchemeIsFile()) |
54 return true; | 18 return true; |
55 | 19 |
56 if (url.SchemeIsFileSystem() && url.inner_url() && | 20 if (url.SchemeIsFileSystem() && url.inner_url() && |
57 IsOriginSecure(*url.inner_url())) { | 21 IsOriginSecure(*url.inner_url())) { |
58 return true; | 22 return true; |
59 } | 23 } |
60 | 24 |
61 std::string hostname = url.HostNoBrackets(); | 25 std::string hostname = url.HostNoBrackets(); |
62 if (net::IsLocalhost(hostname)) | 26 if (net::IsLocalhost(hostname)) |
63 return true; | 27 return true; |
64 | 28 |
65 if (base::ContainsKey(g_trustworthy_whitelist.Get().secure_schemes(), | 29 if (base::ContainsValue(GetSecureSchemes(), url.scheme())) |
66 url.scheme())) | |
67 return true; | 30 return true; |
68 | 31 |
69 if (base::ContainsKey(g_trustworthy_whitelist.Get().secure_origins(), | 32 if (base::ContainsValue(GetSecureOrigins(), url.GetOrigin())) { |
70 url.GetOrigin())) { | |
71 return true; | 33 return true; |
72 } | 34 } |
73 | 35 |
74 return false; | 36 return false; |
75 } | 37 } |
76 | 38 |
77 bool OriginCanAccessServiceWorkers(const GURL& url) { | 39 bool OriginCanAccessServiceWorkers(const GURL& url) { |
78 if (url.SchemeIsHTTPOrHTTPS() && IsOriginSecure(url)) | 40 if (url.SchemeIsHTTPOrHTTPS() && IsOriginSecure(url)) |
79 return true; | 41 return true; |
80 | 42 |
81 if (base::ContainsKey(g_trustworthy_whitelist.Get().service_worker_schemes(), | 43 if (base::ContainsValue(GetServiceWorkerSchemes(), url.scheme())) { |
82 url.scheme())) { | |
83 return true; | 44 return true; |
84 } | 45 } |
85 | 46 |
86 return false; | 47 return false; |
87 } | 48 } |
88 | 49 |
89 void ResetSchemesAndOriginsWhitelistForTesting() { | 50 void ResetSchemesAndOriginsWhitelistForTesting() { |
90 g_trustworthy_whitelist.Get().Reset(); | 51 RefreshSecuritySchemesForTesting(); |
91 } | 52 } |
92 | 53 |
93 } // namespace content | 54 } // namespace content |
OLD | NEW |