1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
|
// Copyright 2020 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "components/js_injection/common/origin_matcher_internal.h"
#include <algorithm>
#include "base/strings/pattern.h"
#include "base/strings/string_util.h"
#include "base/strings/stringprintf.h"
#include "net/base/scheme_host_port_matcher_rule.h"
#include "net/base/url_util.h"
#include "url/gurl.h"
#include "url/url_constants.h"
namespace js_injection {
namespace {
// Returns false if |host| has too many wildcards.
inline bool HostWildcardSanityCheck(const std::string& host) {
size_t wildcard_count = std::ranges::count(host, '*');
if (wildcard_count == 0)
return true;
// We only allow one wildcard.
if (wildcard_count > 1)
return false;
// Start with "*." for subdomain matching.
if (base::StartsWith(host, "*.", base::CompareCase::SENSITIVE))
return true;
return false;
}
} // namespace
OriginMatcherRule::OriginMatcherRule(OriginMatcherRuleType type)
: type_(type) {}
OriginMatcherRule::~OriginMatcherRule() = default;
MatchAllOriginsRule::MatchAllOriginsRule()
: OriginMatcherRule(OriginMatcherRuleType::kAny) {}
MatchAllOriginsRule::~MatchAllOriginsRule() = default;
net::SchemeHostPortMatcherResult MatchAllOriginsRule::Evaluate(
const GURL& url) const {
return net::SchemeHostPortMatcherResult::kInclude;
}
std::string MatchAllOriginsRule::ToString() const {
return "*";
}
SubdomainMatchingRule::SubdomainMatchingRule(const std::string& scheme,
const std::string& optional_host,
int optional_port)
: OriginMatcherRule(OriginMatcherRuleType::kSubdomain),
scheme_(base::ToLowerASCII(scheme)),
optional_host_(base::ToLowerASCII(optional_host)),
optional_port_(optional_port) {
DCHECK(IsValidScheme(scheme));
DCHECK(IsValidSchemeAndHost(scheme_, optional_host_));
}
SubdomainMatchingRule::~SubdomainMatchingRule() = default;
// static
bool SubdomainMatchingRule::IsValidScheme(const std::string& scheme) {
// Wild cards are not allowed in the scheme.
return !scheme.empty() && scheme.find('*') == std::string::npos;
}
// static
bool SubdomainMatchingRule::CanSchemeHaveHost(const std::string& scheme) {
return scheme == url::kHttpScheme || scheme == url::kHttpsScheme;
}
// static
bool SubdomainMatchingRule::IsValidSchemeAndHost(const std::string& scheme,
const std::string& host) {
if (host.empty()) {
if (CanSchemeHaveHost(scheme))
return false;
return true;
}
if (!CanSchemeHaveHost(scheme))
return false;
// |scheme| is either https or http.
// URL like rule is invalid.
if (host.find('/') != std::string::npos)
return false;
return HostWildcardSanityCheck(host);
}
net::SchemeHostPortMatcherResult SubdomainMatchingRule::Evaluate(
const GURL& url) const {
if (optional_port_ != -1 && url.EffectiveIntPort() != optional_port_) {
// Didn't match port expectation.
return net::SchemeHostPortMatcherResult::kNoMatch;
}
if (url.scheme() != scheme_) {
// Didn't match scheme expectation.
return net::SchemeHostPortMatcherResult::kNoMatch;
}
return base::MatchPattern(url.host(), optional_host_)
? net::SchemeHostPortMatcherResult::kInclude
: net::SchemeHostPortMatcherResult::kNoMatch;
}
std::string SubdomainMatchingRule::ToString() const {
std::string str;
base::StringAppendF(&str, "%s://%s", scheme_.c_str(), optional_host_.c_str());
if (optional_port_ != -1)
base::StringAppendF(&str, ":%d", optional_port_);
return str;
}
} // namespace js_injection
|
