File: internals_protected_audience.cc

package info (click to toggle)
chromium 138.0.7204.183-1
  • links: PTS, VCS
  • area: main
  • in suites: trixie
  • size: 6,071,908 kB
  • sloc: cpp: 34,937,088; ansic: 7,176,967; javascript: 4,110,704; python: 1,419,953; asm: 946,768; xml: 739,971; pascal: 187,324; sh: 89,623; perl: 88,663; objc: 79,944; sql: 50,304; cs: 41,786; fortran: 24,137; makefile: 21,806; php: 13,980; tcl: 13,166; yacc: 8,925; ruby: 7,485; awk: 3,720; lisp: 3,096; lex: 1,327; ada: 727; jsp: 228; sed: 36
file content (63 lines) | stat: -rw-r--r-- 2,550 bytes parent folder | download | duplicates (2)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
// Copyright 2025 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "third_party/blink/renderer/modules/ad_auction/testing/internals_protected_audience.h"

#include "mojo/public/cpp/bindings/remote.h"
#include "third_party/blink/public/platform/browser_interface_broker_proxy.h"
#include "third_party/blink/public/test/mojom/privacy_sandbox/web_privacy_sandbox_automation.test-mojom-blink.h"
#include "third_party/blink/renderer/bindings/core/v8/script_promise.h"
#include "third_party/blink/renderer/bindings/core/v8/script_promise_resolver.h"
#include "third_party/blink/renderer/core/execution_context/execution_context.h"
#include "third_party/blink/renderer/platform/weborigin/security_origin.h"
#include "third_party/blink/renderer/platform/wtf/text/base64.h"

namespace blink {

// static
ScriptPromise<IDLUndefined>
InternalsProtectedAudience::setProtectedAudienceKAnonymity(
    ScriptState* script_state,
    Internals&,
    const String& owner_origin_str,
    const String& name,
    const Vector<String>& hashes_base64) {
  const ExecutionContext* context = ExecutionContext::From(script_state);
  auto* resolver =
      MakeGarbageCollected<ScriptPromiseResolver<IDLUndefined>>(script_state);
  auto promise = resolver->Promise();

  scoped_refptr<const SecurityOrigin> owner_origin =
      SecurityOrigin::CreateFromString(owner_origin_str);
  if (!owner_origin->Host().EndsWith(".test")) {
    resolver->Reject("owner origin must be on a .test domain");
    return promise;
  }

  for (const auto& in_hash_b64 : hashes_base64) {
    Vector<uint8_t> hash;
    if (!WTF::Base64Decode(in_hash_b64, hash, Base64DecodePolicy::kForgiving)) {
      resolver->Reject("hash not base64 encoded");
      return promise;
    }
  }

  mojo::Remote<test::mojom::blink::WebPrivacySandboxAutomation>
      sandbox_automation;
  context->GetBrowserInterfaceBroker().GetInterface(
      sandbox_automation.BindNewPipeAndPassReceiver());
  auto* raw_sandbox_automation = sandbox_automation.get();
  raw_sandbox_automation->SetProtectedAudienceKAnonymity(
      owner_origin, name, hashes_base64,
      WTF::BindOnce(
          // The remote is taken to take its ownership.
          [](ScriptPromiseResolver<IDLUndefined>* resolver,
             mojo::Remote<test::mojom::blink::WebPrivacySandboxAutomation>) {
            resolver->Resolve();
          },
          WrapPersistent(resolver), std::move(sandbox_automation)));
  return promise;
}

}  // namespace blink