OLD | NEW |
1 /* | 1 /* |
2 * Copyright (C) 2011, Google Inc. All rights reserved. | 2 * Copyright (C) 2011, Google Inc. All rights reserved. |
3 * Copyright (C) 2014, Samsung Electronics. All rights reserved. | 3 * Copyright (C) 2014, Samsung Electronics. All rights reserved. |
4 * | 4 * |
5 * Redistribution and use in source and binary forms, with or without | 5 * Redistribution and use in source and binary forms, with or without |
6 * modification, are permitted provided that the following conditions are met: | 6 * modification, are permitted provided that the following conditions are met: |
7 * | 7 * |
8 * 1. Redistributions of source code must retain the above copyright | 8 * 1. Redistributions of source code must retain the above copyright |
9 * notice, this list of conditions and the following disclaimer. | 9 * notice, this list of conditions and the following disclaimer. |
10 * 2. Redistributions in binary form must reproduce the above copyright | 10 * 2. Redistributions in binary form must reproduce the above copyright |
(...skipping 20 matching lines...) Expand all Loading... |
31 #include "core/dom/Document.h" | 31 #include "core/dom/Document.h" |
32 #include "core/dom/ExceptionCode.h" | 32 #include "core/dom/ExceptionCode.h" |
33 #include "core/frame/LocalFrame.h" | 33 #include "core/frame/LocalFrame.h" |
34 #include "core/frame/Navigator.h" | 34 #include "core/frame/Navigator.h" |
35 #include "core/page/Page.h" | 35 #include "core/page/Page.h" |
36 #include "wtf/HashSet.h" | 36 #include "wtf/HashSet.h" |
37 #include "wtf/text/StringBuilder.h" | 37 #include "wtf/text/StringBuilder.h" |
38 | 38 |
39 namespace blink { | 39 namespace blink { |
40 | 40 |
41 static HashSet<String>* protocolWhitelist; | 41 static HashSet<String>* schemeWhitelist; |
42 | 42 |
43 static void initProtocolHandlerWhitelist() | 43 static void initCustomSchemeHandlerWhitelist() |
44 { | 44 { |
45 protocolWhitelist = new HashSet<String>; | 45 schemeWhitelist = new HashSet<String>; |
46 static const char* const protocols[] = { | 46 static const char* const schemes[] = { |
47 "bitcoin", | 47 "bitcoin", |
48 "geo", | 48 "geo", |
49 "im", | 49 "im", |
50 "irc", | 50 "irc", |
51 "ircs", | 51 "ircs", |
52 "magnet", | 52 "magnet", |
53 "mailto", | 53 "mailto", |
54 "mms", | 54 "mms", |
55 "news", | 55 "news", |
56 "nntp", | 56 "nntp", |
57 "sip", | 57 "sip", |
58 "sms", | 58 "sms", |
59 "smsto", | 59 "smsto", |
60 "ssh", | 60 "ssh", |
61 "tel", | 61 "tel", |
62 "urn", | 62 "urn", |
63 "webcal", | 63 "webcal", |
64 "wtai", | 64 "wtai", |
65 "xmpp", | 65 "xmpp", |
66 }; | 66 }; |
67 for (size_t i = 0; i < WTF_ARRAY_LENGTH(protocols); ++i) | 67 for (size_t i = 0; i < WTF_ARRAY_LENGTH(schemes); ++i) |
68 protocolWhitelist->add(protocols[i]); | 68 schemeWhitelist->add(schemes[i]); |
69 } | 69 } |
70 | 70 |
71 static bool verifyCustomHandlerURL(const KURL& baseURL, const String& url, Excep
tionState& exceptionState) | 71 static bool verifyCustomHandlerURL(const KURL& baseURL, const String& url, Excep
tionState& exceptionState) |
72 { | 72 { |
73 // The specification requires that it is a SyntaxError if the "%s" token is | 73 // The specification requires that it is a SyntaxError if the "%s" token is |
74 // not present. | 74 // not present. |
75 static const char token[] = "%s"; | 75 static const char token[] = "%s"; |
76 int index = url.find(token); | 76 int index = url.find(token); |
77 if (-1 == index) { | 77 if (-1 == index) { |
78 exceptionState.throwDOMException(SyntaxError, "The url provided ('" + ur
l + "') does not contain '%s'."); | 78 exceptionState.throwDOMException(SyntaxError, "The url provided ('" + ur
l + "') does not contain '%s'."); |
79 return false; | 79 return false; |
80 } | 80 } |
81 | 81 |
82 // It is also a SyntaxError if the custom handler URL, as created by removin
g | 82 // It is also a SyntaxError if the custom handler URL, as created by removin
g |
83 // the "%s" token and prepending the base url, does not resolve. | 83 // the "%s" token and prepending the base url, does not resolve. |
84 String newURL = url; | 84 String newURL = url; |
85 newURL.remove(index, WTF_ARRAY_LENGTH(token) - 1); | 85 newURL.remove(index, WTF_ARRAY_LENGTH(token) - 1); |
86 | 86 |
87 KURL kurl(baseURL, newURL); | 87 KURL kurl(baseURL, newURL); |
88 | 88 |
89 if (kurl.isEmpty() || !kurl.isValid()) { | 89 if (kurl.isEmpty() || !kurl.isValid()) { |
90 exceptionState.throwDOMException(SyntaxError, "The custom handler URL cr
eated by removing '%s' and prepending '" + baseURL.string() + "' is invalid."); | 90 exceptionState.throwDOMException(SyntaxError, "The custom handler URL cr
eated by removing '%s' and prepending '" + baseURL.string() + "' is invalid."); |
91 return false; | 91 return false; |
92 } | 92 } |
93 | 93 |
94 return true; | 94 return true; |
95 } | 95 } |
96 | 96 |
97 static bool isProtocolWhitelisted(const String& scheme) | 97 static bool isSchemeWhitelisted(const String& scheme) |
98 { | 98 { |
99 if (!protocolWhitelist) | 99 if (!schemeWhitelist) |
100 initProtocolHandlerWhitelist(); | 100 initCustomSchemeHandlerWhitelist(); |
101 | 101 |
102 StringBuilder builder; | 102 StringBuilder builder; |
103 unsigned length = scheme.length(); | 103 unsigned length = scheme.length(); |
104 for (unsigned i = 0; i < length; ++i) | 104 for (unsigned i = 0; i < length; ++i) |
105 builder.append(toASCIILower(scheme[i])); | 105 builder.append(toASCIILower(scheme[i])); |
106 | 106 |
107 return protocolWhitelist->contains(builder.toString()); | 107 return schemeWhitelist->contains(builder.toString()); |
108 } | 108 } |
109 | 109 |
110 static bool verifyCustomHandlerScheme(const String& scheme, ExceptionState& exce
ptionState) | 110 static bool verifyCustomHandlerScheme(const String& scheme, ExceptionState& exce
ptionState) |
111 { | 111 { |
112 if (!isValidProtocol(scheme)) { | 112 if (!isValidProtocol(scheme)) { |
113 exceptionState.throwSecurityError("The scheme '" + scheme + "' is not va
lid protocol"); | 113 exceptionState.throwSecurityError("The scheme '" + scheme + "' is not va
lid protocol"); |
114 return false; | 114 return false; |
115 } | 115 } |
116 | 116 |
117 if (scheme.startsWith("web+")) { | 117 if (scheme.startsWith("web+")) { |
118 // The specification requires that the length of scheme is at least five
characteres (including 'web+' prefix). | 118 // The specification requires that the length of scheme is at least five
characteres (including 'web+' prefix). |
119 if (scheme.length() >= 5) | 119 if (scheme.length() >= 5) |
120 return true; | 120 return true; |
121 | 121 |
122 exceptionState.throwSecurityError("The scheme '" + scheme + "' is less t
han five characters long."); | 122 exceptionState.throwSecurityError("The scheme '" + scheme + "' is less t
han five characters long."); |
123 return false; | 123 return false; |
124 } | 124 } |
125 | 125 |
126 if (isProtocolWhitelisted(scheme)) | 126 if (isSchemeWhitelisted(scheme)) |
127 return true; | 127 return true; |
128 | 128 |
129 exceptionState.throwSecurityError("The scheme '" + scheme + "' doesn't belon
g to the protocol whitelist. Please prefix non-whitelisted schemes with the stri
ng 'web+'."); | 129 exceptionState.throwSecurityError("The scheme '" + scheme + "' doesn't belon
g to the scheme whitelist. Please prefix non-whitelisted schemes with the string
'web+'."); |
130 return false; | 130 return false; |
131 } | 131 } |
132 | 132 |
133 NavigatorContentUtils* NavigatorContentUtils::from(Page& page) | 133 NavigatorContentUtils* NavigatorContentUtils::from(Page& page) |
134 { | 134 { |
135 return static_cast<NavigatorContentUtils*>(WillBeHeapSupplement<Page>::from(
page, supplementName())); | 135 return static_cast<NavigatorContentUtils*>(WillBeHeapSupplement<Page>::from(
page, supplementName())); |
136 } | 136 } |
137 | 137 |
138 NavigatorContentUtils::~NavigatorContentUtils() | 138 NavigatorContentUtils::~NavigatorContentUtils() |
139 { | 139 { |
(...skipping 87 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
227 { | 227 { |
228 return "NavigatorContentUtils"; | 228 return "NavigatorContentUtils"; |
229 } | 229 } |
230 | 230 |
231 void provideNavigatorContentUtilsTo(Page& page, PassOwnPtr<NavigatorContentUtils
Client> client) | 231 void provideNavigatorContentUtilsTo(Page& page, PassOwnPtr<NavigatorContentUtils
Client> client) |
232 { | 232 { |
233 NavigatorContentUtils::provideTo(page, NavigatorContentUtils::supplementName
(), NavigatorContentUtils::create(client)); | 233 NavigatorContentUtils::provideTo(page, NavigatorContentUtils::supplementName
(), NavigatorContentUtils::create(client)); |
234 } | 234 } |
235 | 235 |
236 } // namespace blink | 236 } // namespace blink |
OLD | NEW |