Source/core/fetch/CrossOriginAccessControl.h - Issue 732323004: Add use counter for credentialed CORS access from null origins.

Side by Side Diff: Source/core/fetch/CrossOriginAccessControl.h

Issue 732323004: Add use counter for credentialed CORS access from null origins. (Closed) Base URL: https://chromium.googlesource.com/chromium/blink.git@master

Patch Set: Created 6 years ago

Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.

Jump to:

View unified diff | Download patch

OLD	NEW
1 /*	1 /*

2 * Copyright (C) 2008 Apple Inc. All Rights Reserved.	2 * Copyright (C) 2008 Apple Inc. All Rights Reserved.

3 *	3 *

4 * Redistribution and use in source and binary forms, with or without	4 * Redistribution and use in source and binary forms, with or without

5 * modification, are permitted provided that the following conditions	5 * modification, are permitted provided that the following conditions

6 * are met:	6 * are met:

7 * 1. Redistributions of source code must retain the above copyright	7 * 1. Redistributions of source code must retain the above copyright

8 * notice, this list of conditions and the following disclaimer.	8 * notice, this list of conditions and the following disclaimer.

9 * 2. Redistributions in binary form must reproduce the above copyright	9 * 2. Redistributions in binary form must reproduce the above copyright

10 * notice, this list of conditions and the following disclaimer in the	10 * notice, this list of conditions and the following disclaimer in the

(...skipping 18 matching lines...) Expand all Loading...
29	29

30 #include "core/fetch/ResourceLoaderOptions.h"	30 #include "core/fetch/ResourceLoaderOptions.h"

31 #include "platform/network/ResourceRequest.h"	31 #include "platform/network/ResourceRequest.h"

32 #include "wtf/Forward.h"	32 #include "wtf/Forward.h"

33 #include "wtf/HashSet.h"	33 #include "wtf/HashSet.h"

34	34

35 namespace blink {	35 namespace blink {

36	36

37 typedef HashSet<String, CaseFoldingHash> HTTPHeaderSet;	37 typedef HashSet<String, CaseFoldingHash> HTTPHeaderSet;

38	38

	39 class ExecutionContext;

39 class Resource;	40 class Resource;

40 struct ResourceLoaderOptions;	41 struct ResourceLoaderOptions;

41 class ResourceRequest;	42 class ResourceRequest;

42 class ResourceResponse;	43 class ResourceResponse;

43 class SecurityOrigin;	44 class SecurityOrigin;

44	45

45 enum AccessControlStatus {	46 enum AccessControlStatus {

46 NotSharableCrossOrigin,	47 NotSharableCrossOrigin,

47 SharableCrossOrigin	48 SharableCrossOrigin

48 };	49 };

49	50

50 class CrossOriginAccessControl {	51 class CrossOriginAccessControl {

51 public:	52 public:

52 static bool isLegalRedirectLocation(const KURL&, String& errorDescription);	53 static bool isLegalRedirectLocation(const KURL&, String& errorDescription);

53 static bool handleRedirect(Resource, SecurityOrigin, ResourceRequest&, con st ResourceResponse&, ResourceLoaderOptions&, String&);	54 static bool handleRedirect(ExecutionContext, Resource, SecurityOrigin*, Re sourceRequest&, const ResourceResponse&, ResourceLoaderOptions&, String&);

54 };	55 };

55	56

56 bool isOnAccessControlResponseHeaderWhitelist(const String&);	57 bool isOnAccessControlResponseHeaderWhitelist(const String&);

57	58

58 void updateRequestForAccessControl(ResourceRequest&, SecurityOrigin*, StoredCred entials);	59 void updateRequestForAccessControl(ResourceRequest&, SecurityOrigin*, StoredCred entials);

59 ResourceRequest createAccessControlPreflightRequest(const ResourceRequest&, Secu rityOrigin*);	60 ResourceRequest createAccessControlPreflightRequest(const ResourceRequest&, Secu rityOrigin*);

60	61

61 bool passesAccessControlCheck(const ResourceResponse&, StoredCredentials, Securi tyOrigin*, String& errorDescription);	62 bool passesAccessControlCheck(ExecutionContext, const ResourceResponse&, Stored Credentials, SecurityOrigin, String& errorDescription);

62 bool passesPreflightStatusCheck(const ResourceResponse&, String& errorDescriptio n);	63 bool passesPreflightStatusCheck(const ResourceResponse&, String& errorDescriptio n);

63 void parseAccessControlExposeHeadersAllowList(const String& headerValue, HTTPHea derSet&);	64 void parseAccessControlExposeHeadersAllowList(const String& headerValue, HTTPHea derSet&);

64	65

65 } // namespace blink	66 } // namespace blink

66	67

67 #endif // CrossOriginAccessControl_h	68 #endif // CrossOriginAccessControl_h

OLD	NEW

« no previous file with comments | « Source/core/dom/ScriptLoader.cpp ('k') | Source/core/fetch/CrossOriginAccessControl.cpp » ('j') | Source/core/frame/UseCounter.h » ('J')