FrameHostMsg_OpenURL_Params.resource_request_body needs to be validated.

content/browser/child_process_security_policy_impl.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_
 #define CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_
 
 #include <map>
 #include <memory>
 #include <set>
 #include <string>
 #include <vector>
 
 #include "base/compiler_specific.h"
 #include "base/gtest_prod_util.h"
 #include "base/macros.h"
+#include "base/memory/ref_counted.h"
 #include "base/memory/singleton.h"
 #include "base/synchronization/lock.h"
 #include "content/public/browser/child_process_security_policy.h"
 #include "content/public/common/resource_type.h"
 #include "storage/common/fileapi/file_system_types.h"
 
 class GURL;
 
 namespace base {
 class FilePath;
 }
 
 namespace storage {
+class FileSystemContext;
 class FileSystemURL;
 }
 
 namespace content {
 
+class SiteInstance;
+class ResourceRequestBodyImpl;
+
 class CONTENT_EXPORT ChildProcessSecurityPolicyImpl
     : NON_EXPORTED_BASE(public ChildProcessSecurityPolicy) {
  public:
   // Object can only be created through GetInstance() so the constructor is
   // private.
   ~ChildProcessSecurityPolicyImpl() override;
 
   static ChildProcessSecurityPolicyImpl* GetInstance();
 
   // ChildProcessSecurityPolicy implementation.
@@ skipping 37 matching lines @@
                                const std::string& filesystem_id) override;
   bool HasWebUIBindings(int child_id) override;
   void GrantSendMidiSysExMessage(int child_id) override;
   bool CanAccessDataForOrigin(int child_id, const GURL& url) override;
   bool HasSpecificPermissionForOrigin(int child_id,
                                       const url::Origin& origin) override;
 
   // Returns if |child_id| can read all of the |files|.
   bool CanReadAllFiles(int child_id, const std::vector<base::FilePath>& files);
 
+  // Validate that the renderer process for |site_instance| is allowed to access
+  // data in the POST body specified by |body|.  Has to be called on the UI
+  // thread.
+  // TODO(lukasza): Remove code duplication - the method below should be reused
+  // by RenderFrameHostImpl::OnBeginNavigation and
+  // ResourceDispatcherHostImpl::ShouldServiceRequest.
+  bool CanReadRequestBody(SiteInstance* site_instance,
+                          const scoped_refptr<ResourceRequestBodyImpl>& body);
+
   // Pseudo schemes are treated differently than other schemes because they
   // cannot be requested like normal URLs.  There is no mechanism for revoking
   // pseudo schemes.
   void RegisterPseudoScheme(const std::string& scheme);
 
   // Returns true iff |scheme| has been registered as pseudo scheme.
   bool IsPseudoScheme(const std::string& scheme);
 
   // Upon creation, child processes should register themselves by calling this
   // this method exactly once.
@@ skipping 124 matching lines @@
       const storage::FileSystemURL& filesystem_url,
       int permissions);
 
   // Determines if certain permissions were granted for a file system.
   // |permissions| is an internally defined bit-set.
   bool HasPermissionsForFileSystem(
       int child_id,
       const std::string& filesystem_id,
       int permission);
 
+  // Validate that |child_id| in |file_system_context| is allowed to access
+  // data in the POST body specified by |body|.  Can be called on any thread.
+  bool CanReadRequestBody(int child_id,
+                          const storage::FileSystemContext* file_system_context,
+                          const scoped_refptr<ResourceRequestBodyImpl>& body);
+
   // You must acquire this lock before reading or writing any members of this
   // class.  You must not block while holding this lock.
   base::Lock lock_;
 
   // These schemes are white-listed for all child processes in various contexts.
   // These sets are protected by |lock_|.
   SchemeSet schemes_okay_to_commit_in_any_process_;
   SchemeSet schemes_okay_to_request_in_any_process_;
   SchemeSet schemes_okay_to_appear_as_origin_headers_;
 
@@ skipping 13 matching lines @@
   WorkerToMainProcessMap worker_map_;
 
   FileSystemPermissionPolicyMap file_system_policy_map_;
 
   DISALLOW_COPY_AND_ASSIGN(ChildProcessSecurityPolicyImpl);
 };
 
 }  // namespace content
 
 #endif  // CONTENT_BROWSER_CHILD_PROCESS_SECURITY_POLICY_IMPL_H_