[Autofill] Sanitize all data that comes in over IPC.

components/autofill/core/common/autofill_data_validation.h

+// Copyright 2013 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef COMPONENTS_AUTOFILL_CORE_COMMON_AUTOFILL_DATA_VALIDATION_H_
+#define COMPONENTS_AUTOFILL_CORE_COMMON_AUTOFILL_DATA_VALIDATION_H_
+
+#include <string>
+#include <vector>
+
+#include "base/strings/string16.h"
+
+class GURL;
+
+namespace autofill {
+
+struct FormData;
+struct FormFieldData;
+struct PasswordFormFillData;
+
+// Constants to enforce data size caps, so as to avoid sending overly large
+// messages over IPC or trying to act on potentialy corrupted data within the
+// browser process:
+
+// The maximum string size supported by Autofill.
+extern const size_t kMaxDataLength;
+
+// The maximum list size supported by Autofill.
+extern const size_t kMaxListSize;
+
+// Functions to verify whether the objects passed to them satisfy basic sanity
+// checks, including being capped to the maximums defined by the constants
+// above.
+bool IsValidString(const std::string& str);
+bool IsValidString16(const base::string16& str);
+bool IsValidGURL(const GURL& url);
+bool IsValidFormFieldData(const FormFieldData& field);
+bool IsValidFormData(const FormData& form);
+bool IsValidPasswordFormFillData(const PasswordFormFillData& form);
+bool IsValidString16Vector(const std::vector<base::string16>& v);
+bool IsValidFormDataVector(const std::vector<FormData>& v);
+
+}  // namespace autofill
+
+#endif  // COMPONENTS_AUTOFILL_CORE_COMMON_AUTOFILL_DATA_VALIDATION_H_