Set response headers for data URL.

net/base/data_url.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // NOTE: based loosely on mozilla's nsDataChannel.cpp
 
 #include <algorithm>
 
 #include "net/base/data_url.h"
 
 #include "base/base64.h"
 #include "base/basictypes.h"
 #include "base/strings/string_split.h"
 #include "base/strings/string_util.h"
 #include "net/base/escape.h"
 #include "net/base/mime_util.h"
+#include "net/http/http_util.h"
 #include "url/gurl.h"
 
 namespace net {
 
 // static
 bool DataURL::Parse(const GURL& url, std::string* mime_type,
                     std::string* charset, std::string* data) {
   DCHECK(mime_type->empty());
   DCHECK(charset->empty());
   std::string::const_iterator begin = url.spec().begin();
@@ skipping 23 matching lines @@
   static const char kCharsetTag[] = "charset=";
   const size_t kCharsetTagLength = arraysize(kCharsetTag) - 1;
 
   bool base64_encoded = false;
   for (; iter != meta_data.end(); ++iter) {
     if (!base64_encoded && *iter == kBase64Tag) {
       base64_encoded = true;
     } else if (charset->empty() &&
                iter->compare(0, kCharsetTagLength, kCharsetTag) == 0) {
       charset->assign(iter->substr(kCharsetTagLength));
+      // The grammar for charset is not specially defined in RFC2045 and
+      // RFC2397. It just needs to be a token.
+      if (!net::HttpUtil::IsToken(*charset))
+        return false;
     }
   }
 
   if (mime_type->empty()) {
     // fallback to defaults if nothing specified in the URL:
     mime_type->assign("text/plain");
   } else if (!ParseMimeTypeWithoutParameter(*mime_type, NULL, NULL)) {
     return false;
   }
   if (charset->empty())
@@ skipping 48 matching lines @@
       temp_data.resize(length + padding_needed, '=');
     }
     return base::Base64Decode(temp_data, data);
   }
 
   temp_data.swap(*data);
   return true;
 }
 
 }  // namespace net