Basic Mojo message header validation for JavaScript.

mojo/public/js/bindings/router.js

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 define("mojo/public/js/bindings/router", [
   "mojo/public/js/bindings/codec",
   "mojo/public/js/bindings/connector",
-], function(codec, connector) {
+  "mojo/public/js/bindings/validator",
+], function(codec, connector, validator) {
 
   function Router(handle) {
     this.connector_ = new connector.Connector(handle);
     this.incomingReceiver_ = null;
     this.nextRequestID_ = 0;
     this.responders_ = {};
 
     this.connector_.setIncomingReceiver({
         accept: this.handleIncomingMessage_.bind(this),
     });
@@ skipping 34 matching lines @@
 
   Router.prototype.setIncomingReceiver = function(receiver) {
     this.incomingReceiver_ = receiver;
   };
 
   Router.prototype.encounteredError = function() {
     return this.connector_.encounteredError();
   };
 
   Router.prototype.handleIncomingMessage_ = function(message) {
-    var flags = message.getFlags();
-    if (flags & codec.kMessageExpectsResponse) {
+    var v = new validator.Validator(message);
+    if (v.validateMessage() !== validator.validationError.NONE)
+      this.close();
+
+    if (message.expectsResponse()) {
       if (this.incomingReceiver_) {
         this.incomingReceiver_.acceptWithResponder(message, this);
       } else {
         // If we receive a request expecting a response when the client is not
         // listening, then we have no choice but to tear down the pipe.
         this.close();
       }
-    } else if (flags & codec.kMessageIsResponse) {
+    } else if (message.isResponse()) {
       var reader = new codec.MessageReader(message);
       var requestID = reader.requestID;
       var responder = this.responders_[requestID];
       delete this.responders_[requestID];
       responder.accept(message);
     } else {
       if (this.incomingReceiver_)
         this.incomingReceiver_.accept(message);
     }
   };
 
   Router.prototype.handleConnectionError_ = function(result) {
     for (var each in this.responders_)
       this.responders_[each].reject(result);
     this.close();
   };
 
   var exports = {};
   exports.Router = Router;
   return exports;
 });