1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
|
/*
* Copyright (C) 1999 Lars Knoll (knoll@kde.org)
* (C) 1999 Antti Koivisto (koivisto@kde.org)
* (C) 2001 Dirk Mueller (mueller@kde.org)
* (C) 2006 Alexey Proskuryakov (ap@webkit.org)
* Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009, 2010, 2012 Apple Inc. All
* rights reserved.
* Copyright (C) 2008, 2009 Torch Mobile Inc. All rights reserved.
* (http://www.torchmobile.com/)
* Copyright (C) 2010 Nokia Corporation and/or its subsidiary(-ies)
* Copyright (C) 2013 Google Inc. All rights reserved.
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Library General Public
* License as published by the Free Software Foundation; either
* version 2 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Library General Public License for more details.
*
* You should have received a copy of the GNU Library General Public License
* along with this library; see the file COPYING.LIB. If not, write to
* the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
* Boston, MA 02110-1301, USA.
*
*/
#include "core/dom/DocumentInit.h"
#include "core/dom/Document.h"
#include "core/dom/custom/V0CustomElementRegistrationContext.h"
#include "core/frame/LocalFrame.h"
#include "core/html/HTMLFrameOwnerElement.h"
#include "core/html/imports/HTMLImportsController.h"
#include "core/loader/DocumentLoader.h"
#include "platform/RuntimeEnabledFeatures.h"
#include "platform/network/NetworkUtils.h"
namespace blink {
// FIXME: Broken with OOPI.
static Document* parentDocument(LocalFrame* frame) {
if (!frame)
return 0;
Element* ownerElement = frame->deprecatedLocalOwner();
if (!ownerElement)
return 0;
return &ownerElement->document();
}
DocumentInit::DocumentInit(const KURL& url,
LocalFrame* frame,
Document* contextDocument,
HTMLImportsController* importsController)
: DocumentInit(nullptr, url, frame, contextDocument, importsController) {}
DocumentInit::DocumentInit(Document* ownerDocument,
const KURL& url,
LocalFrame* frame,
Document* contextDocument,
HTMLImportsController* importsController)
: m_url(url),
m_frame(frame),
m_parent(parentDocument(frame)),
m_owner(ownerDocument),
m_contextDocument(contextDocument),
m_importsController(importsController),
m_createNewRegistrationContext(false),
m_shouldReuseDefaultView(frame && frame->shouldReuseDefaultView(url)) {}
DocumentInit::DocumentInit(const DocumentInit&) = default;
DocumentInit::~DocumentInit() {}
bool DocumentInit::shouldSetURL() const {
LocalFrame* frame = frameForSecurityContext();
return (frame && frame->owner()) || !m_url.isEmpty();
}
bool DocumentInit::shouldTreatURLAsSrcdocDocument() const {
return m_parent && m_frame->loader().shouldTreatURLAsSrcdocDocument(m_url);
}
LocalFrame* DocumentInit::frameForSecurityContext() const {
if (m_frame)
return m_frame;
if (m_importsController)
return m_importsController->master()->frame();
return 0;
}
SandboxFlags DocumentInit::getSandboxFlags() const {
DCHECK(frameForSecurityContext());
FrameLoader* loader = &frameForSecurityContext()->loader();
SandboxFlags flags = loader->effectiveSandboxFlags();
// If the load was blocked by CSP, force the Document's origin to be unique,
// so that the blocked document appears to be a normal cross-origin document's
// load per CSP spec: https://www.w3.org/TR/CSP3/#directive-frame-ancestors.
if (loader->documentLoader() &&
loader->documentLoader()->wasBlockedAfterCSP()) {
flags |= SandboxOrigin;
}
return flags;
}
WebInsecureRequestPolicy DocumentInit::getInsecureRequestPolicy() const {
DCHECK(frameForSecurityContext());
return frameForSecurityContext()->loader().getInsecureRequestPolicy();
}
SecurityContext::InsecureNavigationsSet*
DocumentInit::insecureNavigationsToUpgrade() const {
DCHECK(frameForSecurityContext());
return frameForSecurityContext()->loader().insecureNavigationsToUpgrade();
}
bool DocumentInit::isHostedInReservedIPRange() const {
if (LocalFrame* frame = frameForSecurityContext()) {
if (DocumentLoader* loader =
frame->loader().provisionalDocumentLoader()
? frame->loader().provisionalDocumentLoader()
: frame->loader().documentLoader()) {
if (!loader->response().remoteIPAddress().isEmpty())
return NetworkUtils::isReservedIPAddress(
loader->response().remoteIPAddress());
}
}
return false;
}
Settings* DocumentInit::settings() const {
DCHECK(frameForSecurityContext());
return frameForSecurityContext()->settings();
}
KURL DocumentInit::parentBaseURL() const {
return m_parent->baseURL();
}
DocumentInit& DocumentInit::withRegistrationContext(
V0CustomElementRegistrationContext* registrationContext) {
DCHECK(!m_createNewRegistrationContext);
DCHECK(!m_registrationContext);
m_registrationContext = registrationContext;
return *this;
}
DocumentInit& DocumentInit::withNewRegistrationContext() {
DCHECK(!m_createNewRegistrationContext);
DCHECK(!m_registrationContext);
m_createNewRegistrationContext = true;
return *this;
}
V0CustomElementRegistrationContext* DocumentInit::registrationContext(
Document* document) const {
if (!document->isHTMLDocument() && !document->isXHTMLDocument())
return nullptr;
if (m_createNewRegistrationContext)
return V0CustomElementRegistrationContext::create();
return m_registrationContext.get();
}
Document* DocumentInit::contextDocument() const {
return m_contextDocument;
}
DocumentInit DocumentInit::fromContext(Document* contextDocument,
const KURL& url) {
return DocumentInit(url, 0, contextDocument, 0);
}
} // namespace blink
|
