| OLD | NEW |
| 1 /* | 1 /* |
| 2 * Copyright (C) 2008 Apple Inc. All Rights Reserved. | 2 * Copyright (C) 2008 Apple Inc. All Rights Reserved. |
| 3 * | 3 * |
| 4 * Redistribution and use in source and binary forms, with or without | 4 * Redistribution and use in source and binary forms, with or without |
| 5 * modification, are permitted provided that the following conditions | 5 * modification, are permitted provided that the following conditions |
| 6 * are met: | 6 * are met: |
| 7 * 1. Redistributions of source code must retain the above copyright | 7 * 1. Redistributions of source code must retain the above copyright |
| 8 * notice, this list of conditions and the following disclaimer. | 8 * notice, this list of conditions and the following disclaimer. |
| 9 * 2. Redistributions in binary form must reproduce the above copyright | 9 * 2. Redistributions in binary form must reproduce the above copyright |
| 10 * notice, this list of conditions and the following disclaimer in the | 10 * notice, this list of conditions and the following disclaimer in the |
| (...skipping 34 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 45 | 45 |
| 46 enum AccessControlStatus { | 46 enum AccessControlStatus { |
| 47 NotSharableCrossOrigin, | 47 NotSharableCrossOrigin, |
| 48 SharableCrossOrigin | 48 SharableCrossOrigin |
| 49 }; | 49 }; |
| 50 | 50 |
| 51 class CrossOriginAccessControl { | 51 class CrossOriginAccessControl { |
| 52 public: | 52 public: |
| 53 static bool isLegalRedirectLocation(const KURL&, String& errorDescription); | 53 static bool isLegalRedirectLocation(const KURL&, String& errorDescription); |
| 54 static bool handleRedirect(Resource*, SecurityOrigin*, ResourceRequest&, con
st ResourceResponse&, ResourceLoaderOptions&, String&); | 54 static bool handleRedirect(Resource*, SecurityOrigin*, ResourceRequest&, con
st ResourceResponse&, ResourceLoaderOptions&, String&); |
| 55 static bool isSimpleMethod(const String& method); |
| 56 static bool isSimpleHeader(const AtomicString& name, const AtomicString& val
ue); |
| 57 static bool isSimpleRequest(const String& method, const HTTPHeaderMap&); |
| 58 static bool isForbiddenMethod(const String& method); |
| 59 static bool isUsefulMethod(const String& method) { return !isForbiddenMethod
(method); } |
| 60 static bool isForbiddenHeaderName(const String& name); |
| 61 static bool isForbiddenResponseHeaderName(const String& name); |
| 62 static bool isSimpleOrForbiddenRequest(const String& method, const HTTPHeade
rMap&); |
| 55 }; | 63 }; |
| 56 | 64 |
| 57 bool isSimpleCrossOriginAccessRequest(const String& method, const HTTPHeaderMap&
); | |
| 58 bool isOnAccessControlSimpleRequestMethodWhitelist(const String&); | |
| 59 bool isOnAccessControlSimpleRequestHeaderWhitelist(const AtomicString& name, con
st AtomicString& value); | |
| 60 bool isOnAccessControlResponseHeaderWhitelist(const String&); | 65 bool isOnAccessControlResponseHeaderWhitelist(const String&); |
| 61 | 66 |
| 62 void updateRequestForAccessControl(ResourceRequest&, SecurityOrigin*, StoredCred
entials); | 67 void updateRequestForAccessControl(ResourceRequest&, SecurityOrigin*, StoredCred
entials); |
| 63 ResourceRequest createAccessControlPreflightRequest(const ResourceRequest&, Secu
rityOrigin*); | 68 ResourceRequest createAccessControlPreflightRequest(const ResourceRequest&, Secu
rityOrigin*); |
| 64 | 69 |
| 65 bool passesAccessControlCheck(const ResourceResponse&, StoredCredentials, Securi
tyOrigin*, String& errorDescription); | 70 bool passesAccessControlCheck(const ResourceResponse&, StoredCredentials, Securi
tyOrigin*, String& errorDescription); |
| 66 bool passesPreflightStatusCheck(const ResourceResponse&, String& errorDescriptio
n); | 71 bool passesPreflightStatusCheck(const ResourceResponse&, String& errorDescriptio
n); |
| 67 void parseAccessControlExposeHeadersAllowList(const String& headerValue, HTTPHea
derSet&); | 72 void parseAccessControlExposeHeadersAllowList(const String& headerValue, HTTPHea
derSet&); |
| 68 | 73 |
| 69 } // namespace WebCore | 74 } // namespace WebCore |
| 70 | 75 |
| 71 #endif // CrossOriginAccessControl_h | 76 #endif // CrossOriginAccessControl_h |
| OLD | NEW |