OLD | NEW |
| (Empty) |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #include "net/http/http_vary_data.h" | |
6 | |
7 #include <stdlib.h> | |
8 | |
9 #include "base/pickle.h" | |
10 #include "base/strings/string_util.h" | |
11 #include "net/http/http_request_headers.h" | |
12 #include "net/http/http_request_info.h" | |
13 #include "net/http/http_response_headers.h" | |
14 #include "net/http/http_util.h" | |
15 | |
16 namespace net { | |
17 | |
18 HttpVaryData::HttpVaryData() : is_valid_(false) { | |
19 } | |
20 | |
21 bool HttpVaryData::Init(const HttpRequestInfo& request_info, | |
22 const HttpResponseHeaders& response_headers) { | |
23 base::MD5Context ctx; | |
24 base::MD5Init(&ctx); | |
25 | |
26 is_valid_ = false; | |
27 bool processed_header = false; | |
28 | |
29 // Feed the MD5 context in the order of the Vary header enumeration. If the | |
30 // Vary header repeats a header name, then that's OK. | |
31 // | |
32 // If the Vary header contains '*' then we should not construct any vary data | |
33 // since it is all usurped by a '*'. See section 13.6 of RFC 2616. | |
34 // | |
35 void* iter = NULL; | |
36 std::string name = "vary", request_header; | |
37 while (response_headers.EnumerateHeader(&iter, name, &request_header)) { | |
38 if (request_header == "*") | |
39 return false; | |
40 AddField(request_info, request_header, &ctx); | |
41 processed_header = true; | |
42 } | |
43 | |
44 // Add an implicit 'Vary: cookie' header to any redirect to avoid redirect | |
45 // loops which may result from redirects that are incorrectly marked as | |
46 // cachable by the server. Unfortunately, other browsers do not cache | |
47 // redirects that result from requests containing a cookie header. We are | |
48 // treading on untested waters here, so we want to be extra careful to make | |
49 // sure we do not end up with a redirect loop served from cache. | |
50 // | |
51 // If there is an explicit 'Vary: cookie' header, then we will just end up | |
52 // digesting the cookie header twice. Not a problem. | |
53 // | |
54 std::string location; | |
55 if (response_headers.IsRedirect(&location)) { | |
56 AddField(request_info, "cookie", &ctx); | |
57 processed_header = true; | |
58 } | |
59 | |
60 if (!processed_header) | |
61 return false; | |
62 | |
63 base::MD5Final(&request_digest_, &ctx); | |
64 return is_valid_ = true; | |
65 } | |
66 | |
67 bool HttpVaryData::InitFromPickle(PickleIterator* iter) { | |
68 is_valid_ = false; | |
69 const char* data; | |
70 if (iter->ReadBytes(&data, sizeof(request_digest_))) { | |
71 memcpy(&request_digest_, data, sizeof(request_digest_)); | |
72 return is_valid_ = true; | |
73 } | |
74 return false; | |
75 } | |
76 | |
77 void HttpVaryData::Persist(Pickle* pickle) const { | |
78 DCHECK(is_valid()); | |
79 pickle->WriteBytes(&request_digest_, sizeof(request_digest_)); | |
80 } | |
81 | |
82 bool HttpVaryData::MatchesRequest( | |
83 const HttpRequestInfo& request_info, | |
84 const HttpResponseHeaders& cached_response_headers) const { | |
85 HttpVaryData new_vary_data; | |
86 if (!new_vary_data.Init(request_info, cached_response_headers)) { | |
87 // This shouldn't happen provided the same response headers passed here | |
88 // were also used when initializing |this|. | |
89 NOTREACHED(); | |
90 return false; | |
91 } | |
92 return memcmp(&new_vary_data.request_digest_, &request_digest_, | |
93 sizeof(request_digest_)) == 0; | |
94 } | |
95 | |
96 // static | |
97 std::string HttpVaryData::GetRequestValue( | |
98 const HttpRequestInfo& request_info, | |
99 const std::string& request_header) { | |
100 // Unfortunately, we do not have access to all of the request headers at this | |
101 // point. Most notably, we do not have access to an Authorization header if | |
102 // one will be added to the request. | |
103 | |
104 std::string result; | |
105 if (request_info.extra_headers.GetHeader(request_header, &result)) | |
106 return result; | |
107 | |
108 return std::string(); | |
109 } | |
110 | |
111 // static | |
112 void HttpVaryData::AddField(const HttpRequestInfo& request_info, | |
113 const std::string& request_header, | |
114 base::MD5Context* ctx) { | |
115 std::string request_value = GetRequestValue(request_info, request_header); | |
116 | |
117 // Append a character that cannot appear in the request header line so that we | |
118 // protect against case where the concatenation of two request headers could | |
119 // look the same for a variety of values for the individual request headers. | |
120 // For example, "foo: 12\nbar: 3" looks like "foo: 1\nbar: 23" otherwise. | |
121 request_value.append(1, '\n'); | |
122 | |
123 base::MD5Update(ctx, request_value); | |
124 } | |
125 | |
126 } // namespace net | |
OLD | NEW |