Always report access control failure if accessing unsupported URL.

Source/platform/weborigin/SchemeRegistry.cpp

 /*
  * Copyright (C) 2010 Apple Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 10 matching lines @@
  * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  *
  */
 
 #include "config.h"
 #include "platform/weborigin/SchemeRegistry.h"
 
 #include "wtf/MainThread.h"
+#include "wtf/text/StringBuilder.h"
 
 namespace WebCore {
 
 static URLSchemesMap& localURLSchemes()
 {
     DEFINE_STATIC_LOCAL(URLSchemesMap, localSchemes, ());
 
     if (localSchemes.isEmpty())
         localSchemes.add("file");
 
@@ skipping 208 matching lines @@
     CORSEnabledSchemes().add(scheme);
 }
 
 bool SchemeRegistry::shouldTreatURLSchemeAsCORSEnabled(const String& scheme)
 {
     if (scheme.isEmpty())
         return false;
     return CORSEnabledSchemes().contains(scheme);
 }
 
+String SchemeRegistry::listOfCORSEnabledURLSchemes()
+{
+    StringBuilder builder;
+    const URLSchemesMap& corsEnabledSchemes = CORSEnabledSchemes();
+
+    bool addSeparator = false;
+    for (URLSchemesMap::const_iterator it = corsEnabledSchemes.begin(); it != corsEnabledSchemes.end(); ++it) {
+        if (addSeparator)
+            builder.append(", ");
+        else
+            addSeparator = true;
+
+        builder.append(*it);
+    }
+    return builder.toString();
+}
+
 void SchemeRegistry::registerURLSchemeAsBypassingContentSecurityPolicy(const String& scheme)
 {
     ContentSecurityPolicyBypassingSchemes().add(scheme);
 }
 
 void SchemeRegistry::removeURLSchemeRegisteredAsBypassingContentSecurityPolicy(const String& scheme)
 {
     ContentSecurityPolicyBypassingSchemes().remove(scheme);
 }
 
 bool SchemeRegistry::schemeShouldBypassContentSecurityPolicy(const String& scheme)
 {
     if (scheme.isEmpty())
         return false;
     return ContentSecurityPolicyBypassingSchemes().contains(scheme);
 }
 
 } // namespace WebCore