1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
|
// Copyright 2014 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "components/autofill/core/common/autofill_data_validation.h"
#include "components/autofill/core/common/form_data.h"
#include "components/autofill/core/common/form_field_data.h"
#include "components/autofill/core/common/password_form_fill_data.h"
#include "url/gurl.h"
namespace autofill {
const size_t kMaxDataLength = 1024;
// Allow enough space for all countries (roughly 300 distinct values) and all
// timezones (roughly 400 distinct values), plus some extra wiggle room.
const size_t kMaxListSize = 512;
bool IsValidString(const std::string& str) {
return str.size() <= kMaxDataLength;
}
bool IsValidString16(const base::string16& str) {
return str.size() <= kMaxDataLength;
}
bool IsValidGURL(const GURL& url) {
return url.is_empty() || url.is_valid();
}
bool IsValidFormFieldData(const FormFieldData& field) {
return IsValidString16(field.label) &&
IsValidString16(field.name) &&
IsValidString16(field.value) &&
IsValidString(field.form_control_type) &&
IsValidString(field.autocomplete_attribute) &&
IsValidString16Vector(field.option_values) &&
IsValidString16Vector(field.option_contents);
}
bool IsValidFormData(const FormData& form) {
if (!IsValidString16(form.name) ||
!IsValidGURL(form.origin) ||
!IsValidGURL(form.action))
return false;
if (form.fields.size() > kMaxListSize)
return false;
for (const FormFieldData& field : form.fields) {
if (!IsValidFormFieldData(field))
return false;
}
return true;
}
bool IsValidPasswordFormFillData(const PasswordFormFillData& form) {
if (!IsValidString16(form.name) || !IsValidGURL(form.origin) ||
!IsValidGURL(form.action) || !IsValidFormFieldData(form.username_field) ||
!IsValidFormFieldData(form.password_field) ||
!IsValidString(form.preferred_realm)) {
return false;
}
for (const auto& it : form.additional_logins) {
if (!IsValidString16(it.first) ||
!IsValidString16(it.second.password) ||
!IsValidString(it.second.realm))
return false;
}
for (const auto& it : form.other_possible_usernames) {
if (!IsValidString16(it.first.username) ||
!IsValidString16(it.first.password) ||
!IsValidString(it.first.realm) ||
!IsValidString16Vector(it.second))
return false;
}
return true;
}
bool IsValidString16Vector(const std::vector<base::string16>& v) {
if (v.size() > kMaxListSize)
return false;
for (const base::string16& str : v) {
if (!IsValidString16(str))
return false;
}
return true;
}
bool IsValidFormDataVector(const std::vector<FormData>& v) {
if (v.size() > kMaxListSize)
return false;
for (const FormData& form : v) {
if (!IsValidFormData(form))
return false;
}
return true;
}
} // namespace autofill
|
