[Presentation API / Media Router] Relax PresentationRequest URL check.

chrome/common/media_router/media_source_helper.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/common/media_router/media_source_helper.h"
 
 #include <stdio.h>
 
+#include <algorithm>
+#include <array>
+
 #include "base/strings/string_util.h"
 #include "base/strings/stringprintf.h"
 #include "chrome/common/media_router/media_source.h"
 #include "url/gurl.h"
 
 namespace media_router {
 
 namespace {
 
 // Prefixes used to format and detect various protocols' media source URNs.
 // See: https://www.ietf.org/rfc/rfc3406.txt
 constexpr char kTabMediaUrnFormat[] = "urn:x-org.chromium.media:source:tab:%d";
 constexpr char kDesktopMediaUrn[] = "urn:x-org.chromium.media:source:desktop";
 constexpr char kTabRemotingUrnFormat[] =
     "urn:x-org.chromium.media:source:tab_content_remoting:%d";
 constexpr char kCastPresentationUrlDomain[] = "google.com";
 constexpr char kCastPresentationUrlPath[] = "/cast";
 
 // This value must be the same as |chrome.cast.AUTO_JOIN_PRESENTATION_ID| in the
 // component extension.
 constexpr char kAutoJoinPresentationId[] = "auto-join";
 
+// List of non-http(s) schemes that are allowed in a Presentation URL.
+constexpr std::array<const char* const, 4> kAllowedSchemes{
+    {"cast", "dial", "remote-playback", "test"}};
+
+bool IsSchemeAllowed(const GURL& url) {
+  return url.SchemeIsHTTPOrHTTPS() ||
+         std::any_of(
+             kAllowedSchemes.begin(), kAllowedSchemes.end(),
+             [&url](const char* const scheme) { return url.SchemeIs(scheme); });
+}
+
 }  // namespace
 
 MediaSource MediaSourceForTab(int tab_id) {
   return MediaSource(base::StringPrintf(kTabMediaUrnFormat, tab_id));
 }
 
 MediaSource MediaSourceForTabContentRemoting(int tab_id) {
   return MediaSource(base::StringPrintf(kTabRemotingUrnFormat, tab_id));
 }
 
@@ skipping 39 matching lines @@
     return -1;
 }
 
 bool IsValidMediaSource(const MediaSource& source) {
   return TabIdFromMediaSource(source) > 0 ||
          IsDesktopMirroringMediaSource(source) ||
          IsValidPresentationUrl(GURL(source.id()));
 }
 
 bool IsValidPresentationUrl(const GURL& url) {
-  return url.is_valid() && url.SchemeIsHTTPOrHTTPS();
+  return url.is_valid() && IsSchemeAllowed(url);
 }
 
 bool IsAutoJoinPresentationId(const std::string& presentation_id) {
   return presentation_id == kAutoJoinPresentationId;
 }
 
 }  // namespace media_router