CSP: Permit exempting schemes only for certain policy areas.

Source/platform/weborigin/SchemeRegistry.cpp

 /*
  * Copyright (C) 2010 Apple Inc. All Rights Reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions
  * are met:
  * 1. Redistributions of source code must retain the above copyright
  *    notice, this list of conditions and the following disclaimer.
  * 2. Redistributions in binary form must reproduce the above copyright
  *    notice, this list of conditions and the following disclaimer in the
@@ skipping 14 matching lines @@
  */
 
 #include "config.h"
 #include "platform/weborigin/SchemeRegistry.h"
 
 #include "wtf/MainThread.h"
 #include "wtf/text/StringBuilder.h"
 
 namespace blink {
 
-static URLSchemesMap& localURLSchemes()
+static URLSchemesSet& localURLSchemes()
 {
-    DEFINE_STATIC_LOCAL(URLSchemesMap, localSchemes, ());
+    DEFINE_STATIC_LOCAL(URLSchemesSet, localSchemes, ());
 
     if (localSchemes.isEmpty())
         localSchemes.add("file");
 
     return localSchemes;
 }
 
-static URLSchemesMap& displayIsolatedURLSchemes()
+static URLSchemesSet& displayIsolatedURLSchemes()
 {
-    DEFINE_STATIC_LOCAL(URLSchemesMap, displayIsolatedSchemes, ());
+    DEFINE_STATIC_LOCAL(URLSchemesSet, displayIsolatedSchemes, ());
     return displayIsolatedSchemes;
 }
 
-static URLSchemesMap& secureSchemes()
+static URLSchemesSet& secureSchemes()
 {
-    DEFINE_STATIC_LOCAL(URLSchemesMap, secureSchemes, ());
+    DEFINE_STATIC_LOCAL(URLSchemesSet, secureSchemes, ());
 
     if (secureSchemes.isEmpty()) {
         secureSchemes.add("https");
         secureSchemes.add("about");
         secureSchemes.add("data");
         secureSchemes.add("wss");
     }
 
     return secureSchemes;
 }
 
-static URLSchemesMap& schemesWithUniqueOrigins()
+static URLSchemesSet& schemesWithUniqueOrigins()
 {
-    DEFINE_STATIC_LOCAL(URLSchemesMap, schemesWithUniqueOrigins, ());
+    DEFINE_STATIC_LOCAL(URLSchemesSet, schemesWithUniqueOrigins, ());
 
     if (schemesWithUniqueOrigins.isEmpty()) {
         schemesWithUniqueOrigins.add("about");
         schemesWithUniqueOrigins.add("javascript");
         // This is a willful violation of HTML5.
         // See https://bugs.webkit.org/show_bug.cgi?id=11885
         schemesWithUniqueOrigins.add("data");
     }
 
     return schemesWithUniqueOrigins;
 }
 
-static URLSchemesMap& emptyDocumentSchemes()
+static URLSchemesSet& emptyDocumentSchemes()
 {
-    DEFINE_STATIC_LOCAL(URLSchemesMap, emptyDocumentSchemes, ());
+    DEFINE_STATIC_LOCAL(URLSchemesSet, emptyDocumentSchemes, ());
 
     if (emptyDocumentSchemes.isEmpty())
         emptyDocumentSchemes.add("about");
 
     return emptyDocumentSchemes;
 }
 
 static HashSet<String>& schemesForbiddenFromDomainRelaxation()
 {
     DEFINE_STATIC_LOCAL(HashSet<String>, schemes, ());
     return schemes;
 }
 
-static URLSchemesMap& canDisplayOnlyIfCanRequestSchemes()
+static URLSchemesSet& canDisplayOnlyIfCanRequestSchemes()
 {
-    DEFINE_STATIC_LOCAL(URLSchemesMap, canDisplayOnlyIfCanRequestSchemes, ());
+    DEFINE_STATIC_LOCAL(URLSchemesSet, canDisplayOnlyIfCanRequestSchemes, ());
 
     if (canDisplayOnlyIfCanRequestSchemes.isEmpty()) {
         canDisplayOnlyIfCanRequestSchemes.add("blob");
         canDisplayOnlyIfCanRequestSchemes.add("filesystem");
     }
 
     return canDisplayOnlyIfCanRequestSchemes;
 }
 
-static URLSchemesMap& notAllowingJavascriptURLsSchemes()
+static URLSchemesSet& notAllowingJavascriptURLsSchemes()
 {
-    DEFINE_STATIC_LOCAL(URLSchemesMap, notAllowingJavascriptURLsSchemes, ());
+    DEFINE_STATIC_LOCAL(URLSchemesSet, notAllowingJavascriptURLsSchemes, ());
     return notAllowingJavascriptURLsSchemes;
 }
 
 void SchemeRegistry::registerURLSchemeAsLocal(const String& scheme)
 {
     localURLSchemes().add(scheme);
 }
 
 void SchemeRegistry::removeURLSchemeRegisteredAsLocal(const String& scheme)
 {
     if (scheme == "file")
         return;
     localURLSchemes().remove(scheme);
 }
 
-const URLSchemesMap& SchemeRegistry::localSchemes()
+const URLSchemesSet& SchemeRegistry::localSchemes()
 {
     return localURLSchemes();
 }
 
-static URLSchemesMap& CORSEnabledSchemes()
+static URLSchemesSet& CORSEnabledSchemes()
 {
     // FIXME: http://bugs.webkit.org/show_bug.cgi?id=77160
-    DEFINE_STATIC_LOCAL(URLSchemesMap, CORSEnabledSchemes, ());
+    DEFINE_STATIC_LOCAL(URLSchemesSet, CORSEnabledSchemes, ());
 
     if (CORSEnabledSchemes.isEmpty()) {
         CORSEnabledSchemes.add("http");
         CORSEnabledSchemes.add("https");
         CORSEnabledSchemes.add("data");
     }
 
     return CORSEnabledSchemes;
 }
 
-static URLSchemesMap& LegacySchemes()
+static URLSchemesSet& LegacySchemes()
 {
-    DEFINE_STATIC_LOCAL(URLSchemesMap, LegacySchemes, ());
+    DEFINE_STATIC_LOCAL(URLSchemesSet, LegacySchemes, ());
 
     if (LegacySchemes.isEmpty()) {
         LegacySchemes.add("ftp");
         LegacySchemes.add("gopher");
     }
 
     return LegacySchemes;
 }
 
-static URLSchemesMap& ContentSecurityPolicyBypassingSchemes()
+static URLSchemesMap<SchemeRegistry::PolicyAreas>& ContentSecurityPolicyBypassingSchemes()
 {
-    DEFINE_STATIC_LOCAL(URLSchemesMap, schemes, ());
+    DEFINE_STATIC_LOCAL(URLSchemesMap<SchemeRegistry::PolicyAreas>, schemes, ());
     return schemes;
 }
 
 bool SchemeRegistry::shouldTreatURLSchemeAsLocal(const String& scheme)
 {
     if (scheme.isEmpty())
         return false;
     return localURLSchemes().contains(scheme);
 }
 
@@ skipping 95 matching lines @@
 bool SchemeRegistry::shouldTreatURLSchemeAsCORSEnabled(const String& scheme)
 {
     if (scheme.isEmpty())
         return false;
     return CORSEnabledSchemes().contains(scheme);
 }
 
 String SchemeRegistry::listOfCORSEnabledURLSchemes()
 {
     StringBuilder builder;
-    const URLSchemesMap& corsEnabledSchemes = CORSEnabledSchemes();
-
     bool addSeparator = false;
-    for (URLSchemesMap::const_iterator it = corsEnabledSchemes.begin(); it != corsEnabledSchemes.end(); ++it) {
+    for (const auto& scheme : CORSEnabledSchemes()) {
         if (addSeparator)
             builder.appendLiteral(", ");
         else
             addSeparator = true;
 
-        builder.append(*it);
+        builder.append(scheme);
     }
     return builder.toString();
 }
 
 void SchemeRegistry::registerURLSchemeAsLegacy(const String& scheme)
 {
     LegacySchemes().add(scheme);
 }
 
 bool SchemeRegistry::shouldTreatURLSchemeAsLegacy(const String& scheme)
 {
     if (scheme.isEmpty())
         return false;
     return LegacySchemes().contains(scheme);
 }
 
-void SchemeRegistry::registerURLSchemeAsBypassingContentSecurityPolicy(const String& scheme)
+void SchemeRegistry::registerURLSchemeAsBypassingContentSecurityPolicy(const String& scheme, PolicyAreas policyAreas)
 {
-    ContentSecurityPolicyBypassingSchemes().add(scheme);
+    ContentSecurityPolicyBypassingSchemes().add(scheme, policyAreas);
 }
 
 void SchemeRegistry::removeURLSchemeRegisteredAsBypassingContentSecurityPolicy(const String& scheme)
 {
     ContentSecurityPolicyBypassingSchemes().remove(scheme);
 }
 
-bool SchemeRegistry::schemeShouldBypassContentSecurityPolicy(const String& scheme)
+bool SchemeRegistry::schemeShouldBypassContentSecurityPolicy(const String& scheme, PolicyAreas policyAreas)
 {
     if (scheme.isEmpty())

[Tom Sepez, 2014/11/18 19:49:35]

Should we assert policyAreas != 0?

[jbroman, 2014/11/18 20:02:04]

Done.

         return false;
-    return ContentSecurityPolicyBypassingSchemes().contains(scheme);
+
+    // get() returns 0 (PolicyAreaNone) if there is no entry in the map.
+    // Thus by default, schemes do not bypass CSP.
+    return (~ContentSecurityPolicyBypassingSchemes().get(scheme) & policyAreas) == 0;

[Tom Sepez, 2014/11/18 19:35:54]

nit: I thought this would be:

(ContentSecurityPolicyBypassingSchemes().get(scheme) & policyAreas) !=0)

 }
 
 } // namespace blink