Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(212)

Side by Side Diff: content/browser/child_process_security_policy_impl.cc

Issue 2686853004: Move IsAboutBlank from url_utils to GURL (Closed)
Patch Set: Addressed nit Created 3 years, 10 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « no previous file | content/common/navigation_params.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "content/browser/child_process_security_policy_impl.h" 5 #include "content/browser/child_process_security_policy_impl.h"
6 6
7 #include <algorithm> 7 #include <algorithm>
8 #include <utility> 8 #include <utility>
9 9
10 #include "base/command_line.h" 10 #include "base/command_line.h"
(...skipping 12 matching lines...) Expand all
23 #include "content/public/browser/render_process_host.h" 23 #include "content/public/browser/render_process_host.h"
24 #include "content/public/common/bindings_policy.h" 24 #include "content/public/common/bindings_policy.h"
25 #include "content/public/common/url_constants.h" 25 #include "content/public/common/url_constants.h"
26 #include "net/base/filename_util.h" 26 #include "net/base/filename_util.h"
27 #include "net/url_request/url_request.h" 27 #include "net/url_request/url_request.h"
28 #include "storage/browser/fileapi/file_permission_policy.h" 28 #include "storage/browser/fileapi/file_permission_policy.h"
29 #include "storage/browser/fileapi/file_system_url.h" 29 #include "storage/browser/fileapi/file_system_url.h"
30 #include "storage/browser/fileapi/isolated_context.h" 30 #include "storage/browser/fileapi/isolated_context.h"
31 #include "storage/common/fileapi/file_system_util.h" 31 #include "storage/common/fileapi/file_system_util.h"
32 #include "url/gurl.h" 32 #include "url/gurl.h"
33 #include "url/url_util.h"
34 33
35 namespace content { 34 namespace content {
36 35
37 namespace { 36 namespace {
38 37
39 // Used internally only. These bit positions have no relationship to any 38 // Used internally only. These bit positions have no relationship to any
40 // underlying OS and can be changed to accommodate finer-grained permissions. 39 // underlying OS and can be changed to accommodate finer-grained permissions.
41 enum ChildProcessSecurityPermissions { 40 enum ChildProcessSecurityPermissions {
42 READ_FILE_PERMISSION = 1 << 0, 41 READ_FILE_PERMISSION = 1 << 0,
43 WRITE_FILE_PERMISSION = 1 << 1, 42 WRITE_FILE_PERMISSION = 1 << 1,
(...skipping 578 matching lines...) Expand 10 before | Expand all | Expand 10 after
622 } 621 }
623 622
624 bool ChildProcessSecurityPolicyImpl::CanRequestURL( 623 bool ChildProcessSecurityPolicyImpl::CanRequestURL(
625 int child_id, const GURL& url) { 624 int child_id, const GURL& url) {
626 if (!url.is_valid()) 625 if (!url.is_valid())
627 return false; // Can't request invalid URLs. 626 return false; // Can't request invalid URLs.
628 627
629 if (IsPseudoScheme(url.scheme())) { 628 if (IsPseudoScheme(url.scheme())) {
630 // Every child process can request <about:blank>, <about:blank?foo>, 629 // Every child process can request <about:blank>, <about:blank?foo>,
631 // <about:blank/#foo> and <about:srcdoc>. 630 // <about:blank/#foo> and <about:srcdoc>.
632 if (url::IsAboutBlank(url) || url == kAboutSrcDocURL) 631 if (url.IsAboutBlank() || url == kAboutSrcDocURL)
633 return true; 632 return true;
634 // URLs like <about:version>, <about:crash>, <view-source:...> shouldn't be 633 // URLs like <about:version>, <about:crash>, <view-source:...> shouldn't be
635 // requestable by any child process. Also, this case covers 634 // requestable by any child process. Also, this case covers
636 // <javascript:...>, which should be handled internally by the process and 635 // <javascript:...>, which should be handled internally by the process and
637 // not kicked up to the browser. 636 // not kicked up to the browser.
638 return false; 637 return false;
639 } 638 }
640 639
641 // Blob and filesystem URLs require special treatment, since they embed an 640 // Blob and filesystem URLs require special treatment, since they embed an
642 // inner origin. 641 // inner origin.
(...skipping 357 matching lines...) Expand 10 before | Expand all | Expand 10 after
1000 base::AutoLock lock(lock_); 999 base::AutoLock lock(lock_);
1001 1000
1002 SecurityStateMap::iterator state = security_state_.find(child_id); 1001 SecurityStateMap::iterator state = security_state_.find(child_id);
1003 if (state == security_state_.end()) 1002 if (state == security_state_.end())
1004 return false; 1003 return false;
1005 1004
1006 return state->second->can_send_midi_sysex(); 1005 return state->second->can_send_midi_sysex();
1007 } 1006 }
1008 1007
1009 } // namespace content 1008 } // namespace content
OLDNEW
« no previous file with comments | « no previous file | content/common/navigation_params.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698