OLD | NEW |
| (Empty) |
1 // Copyright 2014 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #include "net/http/http_log_util.h" | |
6 | |
7 #include "base/strings/string_util.h" | |
8 #include "base/strings/stringprintf.h" | |
9 #include "net/http/http_auth_challenge_tokenizer.h" | |
10 #include "net/http/http_util.h" | |
11 | |
12 namespace net { | |
13 | |
14 namespace { | |
15 | |
16 bool ShouldRedactChallenge(HttpAuthChallengeTokenizer* challenge) { | |
17 // Ignore lines with commas, as they may contain lists of schemes, and | |
18 // the information we want to hide is Base64 encoded, so has no commas. | |
19 if (challenge->challenge_text().find(',') != std::string::npos) | |
20 return false; | |
21 | |
22 std::string scheme = base::StringToLowerASCII(challenge->scheme()); | |
23 // Invalid input. | |
24 if (scheme.empty()) | |
25 return false; | |
26 | |
27 // Ignore Basic and Digest authentication challenges, as they contain | |
28 // public information. | |
29 if (scheme == "basic" || scheme == "digest") | |
30 return false; | |
31 | |
32 return true; | |
33 } | |
34 | |
35 } // namespace | |
36 | |
37 std::string ElideHeaderValueForNetLog(NetLog::LogLevel log_level, | |
38 const std::string& header, | |
39 const std::string& value) { | |
40 std::string::const_iterator redact_begin = value.begin(); | |
41 std::string::const_iterator redact_end = value.begin(); | |
42 | |
43 if (redact_begin == redact_end && | |
44 log_level >= NetLog::LOG_STRIP_PRIVATE_DATA) { | |
45 | |
46 // Note: this logic should be kept in sync with stripCookiesAndLoginInfo in | |
47 // chrome/browser/resources/net_internals/log_view_painter.js. | |
48 | |
49 if (!base::strcasecmp(header.c_str(), "set-cookie") || | |
50 !base::strcasecmp(header.c_str(), "set-cookie2") || | |
51 !base::strcasecmp(header.c_str(), "cookie") || | |
52 !base::strcasecmp(header.c_str(), "authorization") || | |
53 !base::strcasecmp(header.c_str(), "proxy-authorization")) { | |
54 redact_begin = value.begin(); | |
55 redact_end = value.end(); | |
56 } else if (!base::strcasecmp(header.c_str(), "www-authenticate") || | |
57 !base::strcasecmp(header.c_str(), "proxy-authenticate")) { | |
58 // Look for authentication information from data received from the server | |
59 // in multi-round Negotiate authentication. | |
60 HttpAuthChallengeTokenizer challenge(value.begin(), value.end()); | |
61 if (ShouldRedactChallenge(&challenge)) { | |
62 redact_begin = challenge.params_begin(); | |
63 redact_end = challenge.params_end(); | |
64 } | |
65 } | |
66 } | |
67 | |
68 if (redact_begin == redact_end) | |
69 return value; | |
70 | |
71 return std::string(value.begin(), redact_begin) + | |
72 base::StringPrintf("[%ld bytes were stripped]", | |
73 static_cast<long>(redact_end - redact_begin)) + | |
74 std::string(redact_end, value.end()); | |
75 } | |
76 | |
77 } // namespace net | |
OLD | NEW |