Use [SecureContext] for navigator.storage

third_party/WebKit/Source/modules/quota/StorageManager.cpp

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/quota/StorageManager.h"
 
 #include "bindings/core/v8/ScriptPromiseResolver.h"
 #include "bindings/modules/v8/V8StorageEstimate.h"
 #include "core/dom/DOMException.h"
 #include "core/dom/Document.h"
 #include "core/dom/ExceptionCode.h"
 #include "modules/permissions/PermissionUtils.h"
 #include "modules/quota/StorageEstimate.h"
 #include "platform/StorageQuotaCallbacks.h"
 #include "platform/UserGestureIndicator.h"
 #include "public/platform/Platform.h"
 #include "wtf/Functional.h"
 
 namespace blink {
 
 using mojom::blink::PermissionName;
 using mojom::blink::PermissionService;
 using mojom::blink::PermissionStatus;
 
 namespace {
 
+const char uniqueOriginErrorMessage[] =
+    "The operation is not supported in this context.";
+
 class EstimateCallbacks final : public StorageQuotaCallbacks {
   WTF_MAKE_NONCOPYABLE(EstimateCallbacks);
 
  public:
   explicit EstimateCallbacks(ScriptPromiseResolver* resolver)
       : m_resolver(resolver) {}
 
   ~EstimateCallbacks() override {}
 
   void didQueryStorageUsageAndQuota(unsigned long long usageInBytes,
@@ skipping 16 matching lines @@
  private:
   Member<ScriptPromiseResolver> m_resolver;
 };
 
 }  // namespace
 
 ScriptPromise StorageManager::persist(ScriptState* scriptState) {
   ScriptPromiseResolver* resolver = ScriptPromiseResolver::create(scriptState);
   ScriptPromise promise = resolver->promise();
   ExecutionContext* executionContext = scriptState->getExecutionContext();
+  DCHECK(executionContext->isSecureContext());  // [SecureContext] in IDL
   SecurityOrigin* securityOrigin = executionContext->getSecurityOrigin();
-  // TODO(dgrogan): Is the isUnique() check covered by the later
-  // isSecureContext() check? If so, maybe remove it. Write a test if it
-  // stays.
   if (securityOrigin->isUnique()) {
-    resolver->reject(DOMException::create(NotSupportedError));
+    resolver->reject(V8ThrowException::createTypeError(
+        scriptState->isolate(), uniqueOriginErrorMessage));
     return promise;
   }
-  String errorMessage;
-  if (!executionContext->isSecureContext(errorMessage)) {
-    resolver->reject(DOMException::create(SecurityError, errorMessage));
-    return promise;
-  }
+
   ASSERT(executionContext->isDocument());
   PermissionService* permissionService =
       getPermissionService(scriptState->getExecutionContext());
   if (!permissionService) {
     resolver->reject(DOMException::create(
         InvalidStateError,
         "In its current state, the global scope can't request permissions."));
     return promise;
   }
   permissionService->RequestPermission(
       createPermissionDescriptor(PermissionName::DURABLE_STORAGE),
       scriptState->getExecutionContext()->getSecurityOrigin(),
       UserGestureIndicator::processingUserGesture(),
       convertToBaseCallback(
           WTF::bind(&StorageManager::permissionRequestComplete,
                     wrapPersistent(this), wrapPersistent(resolver))));
 
   return promise;
 }
 
 ScriptPromise StorageManager::persisted(ScriptState* scriptState) {
   ScriptPromiseResolver* resolver = ScriptPromiseResolver::create(scriptState);
   ScriptPromise promise = resolver->promise();
+  ExecutionContext* executionContext = scriptState->getExecutionContext();
+  DCHECK(executionContext->isSecureContext());  // [SecureContext] in IDL
+  SecurityOrigin* securityOrigin = executionContext->getSecurityOrigin();
+  if (securityOrigin->isUnique()) {
+    resolver->reject(V8ThrowException::createTypeError(
+        scriptState->isolate(), uniqueOriginErrorMessage));
+    return promise;
+  }
+
   PermissionService* permissionService =
       getPermissionService(scriptState->getExecutionContext());
   if (!permissionService) {
     resolver->reject(DOMException::create(
         InvalidStateError,
         "In its current state, the global scope can't query permissions."));
     return promise;
   }
   permissionService->HasPermission(
       createPermissionDescriptor(PermissionName::DURABLE_STORAGE),
       scriptState->getExecutionContext()->getSecurityOrigin(),
       convertToBaseCallback(
           WTF::bind(&StorageManager::permissionRequestComplete,
                     wrapPersistent(this), wrapPersistent(resolver))));
   return promise;
 }
 
 ScriptPromise StorageManager::estimate(ScriptState* scriptState) {
   ScriptPromiseResolver* resolver = ScriptPromiseResolver::create(scriptState);
   ScriptPromise promise = resolver->promise();
   ExecutionContext* executionContext = scriptState->getExecutionContext();
+  DCHECK(executionContext->isSecureContext());  // [SecureContext] in IDL
   SecurityOrigin* securityOrigin = executionContext->getSecurityOrigin();
   if (securityOrigin->isUnique()) {
-    resolver->reject(DOMException::create(NotSupportedError));
-    return promise;
-  }
-  // IDL has: [SecureContext]
-  String errorMessage;
-  if (!executionContext->isSecureContext(errorMessage)) {
-    resolver->reject(DOMException::create(SecurityError, errorMessage));
+    resolver->reject(V8ThrowException::createTypeError(
+        scriptState->isolate(), uniqueOriginErrorMessage));
     return promise;
   }
 
   KURL storagePartition = KURL(KURL(), securityOrigin->toString());
   Platform::current()->queryStorageUsageAndQuota(
       storagePartition, WebStorageQuotaTypeTemporary,
       new EstimateCallbacks(resolver));
   return promise;
 }
 
@@ skipping 16 matching lines @@
 
 void StorageManager::permissionRequestComplete(ScriptPromiseResolver* resolver,
                                                PermissionStatus status) {
   if (!resolver->getExecutionContext() ||
       resolver->getExecutionContext()->isContextDestroyed())
     return;
   resolver->resolve(status == PermissionStatus::GRANTED);
 }
 
 }  // namespace blink