OLD | NEW |
1 /* | 1 /* |
2 * Copyright (C) 2008 Apple Inc. All Rights Reserved. | 2 * Copyright (C) 2008 Apple Inc. All Rights Reserved. |
3 * | 3 * |
4 * Redistribution and use in source and binary forms, with or without | 4 * Redistribution and use in source and binary forms, with or without |
5 * modification, are permitted provided that the following conditions | 5 * modification, are permitted provided that the following conditions |
6 * are met: | 6 * are met: |
7 * 1. Redistributions of source code must retain the above copyright | 7 * 1. Redistributions of source code must retain the above copyright |
8 * notice, this list of conditions and the following disclaimer. | 8 * notice, this list of conditions and the following disclaimer. |
9 * 2. Redistributions in binary form must reproduce the above copyright | 9 * 2. Redistributions in binary form must reproduce the above copyright |
10 * notice, this list of conditions and the following disclaimer in the | 10 * notice, this list of conditions and the following disclaimer in the |
(...skipping 18 matching lines...) Expand all Loading... |
29 | 29 |
30 #include "core/fetch/ResourceLoaderOptions.h" | 30 #include "core/fetch/ResourceLoaderOptions.h" |
31 #include "platform/network/ResourceRequest.h" | 31 #include "platform/network/ResourceRequest.h" |
32 #include "wtf/Forward.h" | 32 #include "wtf/Forward.h" |
33 #include "wtf/HashSet.h" | 33 #include "wtf/HashSet.h" |
34 | 34 |
35 namespace blink { | 35 namespace blink { |
36 | 36 |
37 typedef HashSet<String, CaseFoldingHash> HTTPHeaderSet; | 37 typedef HashSet<String, CaseFoldingHash> HTTPHeaderSet; |
38 | 38 |
| 39 class ExecutionContext; |
39 class Resource; | 40 class Resource; |
40 struct ResourceLoaderOptions; | 41 struct ResourceLoaderOptions; |
41 class ResourceRequest; | 42 class ResourceRequest; |
42 class ResourceResponse; | 43 class ResourceResponse; |
43 class SecurityOrigin; | 44 class SecurityOrigin; |
44 | 45 |
45 enum AccessControlStatus { | 46 enum AccessControlStatus { |
46 NotSharableCrossOrigin, | 47 NotSharableCrossOrigin, |
47 SharableCrossOrigin | 48 SharableCrossOrigin |
48 }; | 49 }; |
49 | 50 |
50 class CrossOriginAccessControl { | 51 class CrossOriginAccessControl { |
51 public: | 52 public: |
52 static bool isLegalRedirectLocation(const KURL&, String& errorDescription); | 53 static bool isLegalRedirectLocation(const KURL&, String& errorDescription); |
53 static bool handleRedirect(Resource*, SecurityOrigin*, ResourceRequest&, con
st ResourceResponse&, ResourceLoaderOptions&, String&); | 54 static bool handleRedirect(ExecutionContext*, Resource*, SecurityOrigin*, Re
sourceRequest&, const ResourceResponse&, ResourceLoaderOptions&, String&); |
54 }; | 55 }; |
55 | 56 |
56 bool isOnAccessControlResponseHeaderWhitelist(const String&); | 57 bool isOnAccessControlResponseHeaderWhitelist(const String&); |
57 | 58 |
58 void updateRequestForAccessControl(ResourceRequest&, SecurityOrigin*, StoredCred
entials); | 59 void updateRequestForAccessControl(ResourceRequest&, SecurityOrigin*, StoredCred
entials); |
59 ResourceRequest createAccessControlPreflightRequest(const ResourceRequest&, Secu
rityOrigin*); | 60 ResourceRequest createAccessControlPreflightRequest(const ResourceRequest&, Secu
rityOrigin*); |
60 | 61 |
61 bool passesAccessControlCheck(const ResourceResponse&, StoredCredentials, Securi
tyOrigin*, String& errorDescription); | 62 bool passesAccessControlCheck(ExecutionContext*, const ResourceResponse&, Stored
Credentials, SecurityOrigin*, String& errorDescription); |
62 bool passesPreflightStatusCheck(const ResourceResponse&, String& errorDescriptio
n); | 63 bool passesPreflightStatusCheck(const ResourceResponse&, String& errorDescriptio
n); |
63 void parseAccessControlExposeHeadersAllowList(const String& headerValue, HTTPHea
derSet&); | 64 void parseAccessControlExposeHeadersAllowList(const String& headerValue, HTTPHea
derSet&); |
64 | 65 |
65 } // namespace blink | 66 } // namespace blink |
66 | 67 |
67 #endif // CrossOriginAccessControl_h | 68 #endif // CrossOriginAccessControl_h |
OLD | NEW |