| OLD | NEW |
| (Empty) |
| 1 /* | |
| 2 * Copyright (C) 2004, 2007, 2008, 2011, 2012 Apple Inc. All rights reserved. | |
| 3 * Copyright (C) 2012 Research In Motion Limited. All rights reserved. | |
| 4 * | |
| 5 * Redistribution and use in source and binary forms, with or without | |
| 6 * modification, are permitted provided that the following conditions | |
| 7 * are met: | |
| 8 * 1. Redistributions of source code must retain the above copyright | |
| 9 * notice, this list of conditions and the following disclaimer. | |
| 10 * 2. Redistributions in binary form must reproduce the above copyright | |
| 11 * notice, this list of conditions and the following disclaimer in the | |
| 12 * documentation and/or other materials provided with the distribution. | |
| 13 * | |
| 14 * THIS SOFTWARE IS PROVIDED BY APPLE INC. ``AS IS'' AND ANY | |
| 15 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
| 16 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | |
| 17 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE COMPUTER, INC. OR | |
| 18 * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, | |
| 19 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, | |
| 20 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR | |
| 21 * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY | |
| 22 * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | |
| 23 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE | |
| 24 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | |
| 25 */ | |
| 26 | |
| 27 #include "config.h" | |
| 28 #include "weborigin/KnownPorts.h" | |
| 29 | |
| 30 #include "weborigin/KURL.h" | |
| 31 #include "wtf/HashMap.h" | |
| 32 #include "wtf/StdLibExtras.h" | |
| 33 #include "wtf/text/StringHash.h" | |
| 34 | |
| 35 namespace WebCore { | |
| 36 | |
| 37 bool isDefaultPortForProtocol(unsigned short port, const String& protocol) | |
| 38 { | |
| 39 if (protocol.isEmpty()) | |
| 40 return false; | |
| 41 | |
| 42 typedef HashMap<String, unsigned, CaseFoldingHash> DefaultPortsMap; | |
| 43 DEFINE_STATIC_LOCAL(DefaultPortsMap, defaultPorts, ()); | |
| 44 if (defaultPorts.isEmpty()) { | |
| 45 defaultPorts.set("http", 80); | |
| 46 defaultPorts.set("https", 443); | |
| 47 defaultPorts.set("ftp", 21); | |
| 48 defaultPorts.set("ftps", 990); | |
| 49 } | |
| 50 return defaultPorts.get(protocol) == port; | |
| 51 } | |
| 52 | |
| 53 bool portAllowed(const KURL& url) | |
| 54 { | |
| 55 unsigned short port = url.port(); | |
| 56 | |
| 57 // Since most URLs don't have a port, return early for the "no port" case. | |
| 58 if (!port) | |
| 59 return true; | |
| 60 | |
| 61 // This blocked port list matches the port blocking that Mozilla implements. | |
| 62 // See http://www.mozilla.org/projects/netlib/PortBanning.html for more info
rmation. | |
| 63 static const unsigned short blockedPortList[] = { | |
| 64 1, // tcpmux | |
| 65 7, // echo | |
| 66 9, // discard | |
| 67 11, // systat | |
| 68 13, // daytime | |
| 69 15, // netstat | |
| 70 17, // qotd | |
| 71 19, // chargen | |
| 72 20, // FTP-data | |
| 73 21, // FTP-control | |
| 74 22, // SSH | |
| 75 23, // telnet | |
| 76 25, // SMTP | |
| 77 37, // time | |
| 78 42, // name | |
| 79 43, // nicname | |
| 80 53, // domain | |
| 81 77, // priv-rjs | |
| 82 79, // finger | |
| 83 87, // ttylink | |
| 84 95, // supdup | |
| 85 101, // hostriame | |
| 86 102, // iso-tsap | |
| 87 103, // gppitnp | |
| 88 104, // acr-nema | |
| 89 109, // POP2 | |
| 90 110, // POP3 | |
| 91 111, // sunrpc | |
| 92 113, // auth | |
| 93 115, // SFTP | |
| 94 117, // uucp-path | |
| 95 119, // nntp | |
| 96 123, // NTP | |
| 97 135, // loc-srv / epmap | |
| 98 139, // netbios | |
| 99 143, // IMAP2 | |
| 100 179, // BGP | |
| 101 389, // LDAP | |
| 102 465, // SMTP+SSL | |
| 103 512, // print / exec | |
| 104 513, // login | |
| 105 514, // shell | |
| 106 515, // printer | |
| 107 526, // tempo | |
| 108 530, // courier | |
| 109 531, // Chat | |
| 110 532, // netnews | |
| 111 540, // UUCP | |
| 112 556, // remotefs | |
| 113 563, // NNTP+SSL | |
| 114 587, // ESMTP | |
| 115 601, // syslog-conn | |
| 116 636, // LDAP+SSL | |
| 117 993, // IMAP+SSL | |
| 118 995, // POP3+SSL | |
| 119 2049, // NFS | |
| 120 3659, // apple-sasl / PasswordServer [Apple addition] | |
| 121 4045, // lockd | |
| 122 6000, // X11 | |
| 123 6665, // Alternate IRC [Apple addition] | |
| 124 6666, // Alternate IRC [Apple addition] | |
| 125 6667, // Standard IRC [Apple addition] | |
| 126 6668, // Alternate IRC [Apple addition] | |
| 127 6669, // Alternate IRC [Apple addition] | |
| 128 0xFFFF, // Used to block all invalid port numbers | |
| 129 }; | |
| 130 const unsigned short* const blockedPortListEnd = blockedPortList + WTF_ARRAY
_LENGTH(blockedPortList); | |
| 131 | |
| 132 #ifndef NDEBUG | |
| 133 // The port list must be sorted for binary_search to work. | |
| 134 static bool checkedPortList = false; | |
| 135 if (!checkedPortList) { | |
| 136 for (const unsigned short* p = blockedPortList; p != blockedPortListEnd
- 1; ++p) | |
| 137 ASSERT(*p < *(p + 1)); | |
| 138 checkedPortList = true; | |
| 139 } | |
| 140 #endif | |
| 141 | |
| 142 // If the port is not in the blocked port list, allow it. | |
| 143 if (!std::binary_search(blockedPortList, blockedPortListEnd, port)) | |
| 144 return true; | |
| 145 | |
| 146 // Allow ports 21 and 22 for FTP URLs, as Mozilla does. | |
| 147 if ((port == 21 || port == 22) && url.protocolIs("ftp")) | |
| 148 return true; | |
| 149 | |
| 150 // Allow any port number in a file URL, since the port number is ignored. | |
| 151 if (url.protocolIs("file")) | |
| 152 return true; | |
| 153 | |
| 154 return false; | |
| 155 } | |
| 156 | |
| 157 } | |
| OLD | NEW |