| OLD | NEW |
| 1 /* | 1 /* |
| 2 * Copyright (C) 2011 Google Inc. All rights reserved. | 2 * Copyright (C) 2011 Google Inc. All rights reserved. |
| 3 * | 3 * |
| 4 * Redistribution and use in source and binary forms, with or without | 4 * Redistribution and use in source and binary forms, with or without |
| 5 * modification, are permitted provided that the following conditions | 5 * modification, are permitted provided that the following conditions |
| 6 * are met: | 6 * are met: |
| 7 * | 7 * |
| 8 * 1. Redistributions of source code must retain the above copyright | 8 * 1. Redistributions of source code must retain the above copyright |
| 9 * notice, this list of conditions and the following disclaimer. | 9 * notice, this list of conditions and the following disclaimer. |
| 10 * 2. Redistributions in binary form must reproduce the above copyright | 10 * 2. Redistributions in binary form must reproduce the above copyright |
| (...skipping 47 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 58 return true; | 58 return true; |
| 59 | 59 |
| 60 if (!referrerIsSecureURL) | 60 if (!referrerIsSecureURL) |
| 61 return false; | 61 return false; |
| 62 | 62 |
| 63 bool URLIsSecureURL = url.protocolIs("https"); | 63 bool URLIsSecureURL = url.protocolIs("https"); |
| 64 | 64 |
| 65 return !URLIsSecureURL; | 65 return !URLIsSecureURL; |
| 66 } | 66 } |
| 67 | 67 |
| 68 String SecurityPolicy::generateReferrerHeader(ReferrerPolicy referrerPolicy, con
st KURL& url, const String& referrer) | 68 Referrer SecurityPolicy::generateReferrerHeader(ReferrerPolicy referrerPolicy, c
onst KURL& url, const String& referrer) |
| 69 { | 69 { |
| 70 if (referrer.isEmpty()) | 70 if (referrer.isEmpty()) |
| 71 return String(); | 71 return Referrer(String(), referrerPolicy); |
| 72 | 72 |
| 73 if (!(protocolIs(referrer, "https") || protocolIs(referrer, "http"))) | 73 if (!(protocolIs(referrer, "https") || protocolIs(referrer, "http"))) |
| 74 return String(); | 74 return Referrer(String(), referrerPolicy); |
| 75 | 75 |
| 76 switch (referrerPolicy) { | 76 switch (referrerPolicy) { |
| 77 case ReferrerPolicyNever: | 77 case ReferrerPolicyNever: |
| 78 return String(); | 78 return Referrer(String(), referrerPolicy); |
| 79 case ReferrerPolicyAlways: | 79 case ReferrerPolicyAlways: |
| 80 return referrer; | 80 return Referrer(referrer, referrerPolicy); |
| 81 case ReferrerPolicyOrigin: { | 81 case ReferrerPolicyOrigin: { |
| 82 String origin = SecurityOrigin::createFromString(referrer)->toString(); | 82 String origin = SecurityOrigin::createFromString(referrer)->toString(); |
| 83 if (origin == "null") | 83 if (origin == "null") |
| 84 return String(); | 84 return Referrer(String(), referrerPolicy); |
| 85 // A security origin is not a canonical URL as it lacks a path. Add / | 85 // A security origin is not a canonical URL as it lacks a path. Add / |
| 86 // to turn it into a canonical URL we can use as referrer. | 86 // to turn it into a canonical URL we can use as referrer. |
| 87 return origin + "/"; | 87 return Referrer(origin + "/", referrerPolicy); |
| 88 } | 88 } |
| 89 case ReferrerPolicyDefault: | 89 case ReferrerPolicyDefault: |
| 90 break; | 90 break; |
| 91 } | 91 } |
| 92 | 92 |
| 93 return shouldHideReferrer(url, referrer) ? String() : referrer; | 93 return Referrer(shouldHideReferrer(url, referrer) ? String() : referrer, ref
errerPolicy); |
| 94 } | 94 } |
| 95 | 95 |
| 96 bool SecurityPolicy::isAccessWhiteListed(const SecurityOrigin* activeOrigin, con
st SecurityOrigin* targetOrigin) | 96 bool SecurityPolicy::isAccessWhiteListed(const SecurityOrigin* activeOrigin, con
st SecurityOrigin* targetOrigin) |
| 97 { | 97 { |
| 98 if (OriginAccessWhiteList* list = originAccessMap().get(activeOrigin->toStri
ng())) { | 98 if (OriginAccessWhiteList* list = originAccessMap().get(activeOrigin->toStri
ng())) { |
| 99 for (size_t i = 0; i < list->size(); ++i) { | 99 for (size_t i = 0; i < list->size(); ++i) { |
| 100 if (list->at(i).matchesOrigin(*targetOrigin) != OriginAccessEntry::D
oesNotMatchOrigin) | 100 if (list->at(i).matchesOrigin(*targetOrigin) != OriginAccessEntry::D
oesNotMatchOrigin) |
| 101 return true; | 101 return true; |
| 102 } | 102 } |
| 103 } | 103 } |
| (...skipping 46 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 150 map.remove(it); | 150 map.remove(it); |
| 151 } | 151 } |
| 152 | 152 |
| 153 void SecurityPolicy::resetOriginAccessWhitelists() | 153 void SecurityPolicy::resetOriginAccessWhitelists() |
| 154 { | 154 { |
| 155 ASSERT(isMainThread()); | 155 ASSERT(isMainThread()); |
| 156 originAccessMap().clear(); | 156 originAccessMap().clear(); |
| 157 } | 157 } |
| 158 | 158 |
| 159 } // namespace blink | 159 } // namespace blink |
| OLD | NEW |