1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
// Copyright 2014 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CSPSource_h
#define CSPSource_h
#include "core/CoreExport.h"
#include "core/frame/csp/ContentSecurityPolicy.h"
#include "platform/heap/Handle.h"
#include "platform/network/ResourceRequest.h"
#include "wtf/Allocator.h"
#include "wtf/text/WTFString.h"
namespace blink {
class ContentSecurityPolicy;
class KURL;
class CORE_EXPORT CSPSource : public GarbageCollectedFinalized<CSPSource> {
public:
enum WildcardDisposition { HasWildcard, NoWildcard };
CSPSource(ContentSecurityPolicy*,
const String& scheme,
const String& host,
int port,
const String& path,
WildcardDisposition hostWildcard,
WildcardDisposition portWildcard);
bool isSchemeOnly() const;
const String& getScheme() { return m_scheme; };
bool matches(const KURL&,
ResourceRequest::RedirectStatus =
ResourceRequest::RedirectStatus::NoRedirect) const;
// Returns true if this CSPSource subsumes the other, as defined by the
// algorithm at https://w3c.github.io/webappsec-csp/embedded/#subsume-policy
bool subsumes(CSPSource*) const;
// Retrieve the most restrictive information from the two CSPSources if
// isSimilar is true for the two. Otherwise, return nullptr.
CSPSource* intersect(CSPSource*) const;
// Returns true if the first list subsumes the second, as defined by the
// algorithm at
// https://w3c.github.io/webappsec-csp/embedded/#subsume-source-list
static bool firstSubsumesSecond(const HeapVector<Member<CSPSource>>&,
const HeapVector<Member<CSPSource>>&);
DECLARE_TRACE();
private:
FRIEND_TEST_ALL_PREFIXES(CSPSourceTest, IsSimilar);
FRIEND_TEST_ALL_PREFIXES(CSPSourceTest, Intersect);
FRIEND_TEST_ALL_PREFIXES(CSPSourceTest, IntersectSchemesOnly);
FRIEND_TEST_ALL_PREFIXES(SourceListDirectiveTest, GetIntersectCSPSources);
FRIEND_TEST_ALL_PREFIXES(SourceListDirectiveTest,
GetIntersectCSPSourcesSchemes);
FRIEND_TEST_ALL_PREFIXES(CSPDirectiveListTest, GetSourceVector);
FRIEND_TEST_ALL_PREFIXES(CSPDirectiveListTest, OperativeDirectiveGivenType);
FRIEND_TEST_ALL_PREFIXES(SourceListDirectiveTest, SubsumesWithSelf);
FRIEND_TEST_ALL_PREFIXES(SourceListDirectiveTest, GetSources);
bool schemeMatches(const String&) const;
bool hostMatches(const String&) const;
bool pathMatches(const String&) const;
// Protocol is necessary to determine default port if it is zero.
bool portMatches(int port, const String& protocol) const;
bool isSimilar(CSPSource* other) const;
Member<ContentSecurityPolicy> m_policy;
String m_scheme;
String m_host;
int m_port;
String m_path;
WildcardDisposition m_hostWildcard;
WildcardDisposition m_portWildcard;
};
} // namespace blink
#endif
|
