1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
|
// Copyright 2023 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "components/privacy_sandbox/privacy_sandbox_attestations/privacy_sandbox_attestations_parser.h"
#include <string>
#include "base/containers/enum_set.h"
#include "base/containers/flat_map.h"
#include "base/feature_list.h"
#include "components/privacy_sandbox/privacy_sandbox_attestations/proto/privacy_sandbox_attestations.pb.h"
#include "net/base/schemeful_site.h"
#include "third_party/blink/public/common/features.h"
#include "url/gurl.h"
namespace {
void InsertAPI(
privacy_sandbox::PrivacySandboxAttestationsGatedAPISet& allowed_api_set,
privacy_sandbox::PrivacySandboxAttestationsGatedAPIProto proto_api) {
// If the proto enum matches one understood by the client, add it to the
// allowed API set. Otherwise, ignore it.
switch (proto_api) {
case privacy_sandbox::TOPICS: {
allowed_api_set.Put(
privacy_sandbox::PrivacySandboxAttestationsGatedAPI::kTopics);
return;
}
case privacy_sandbox::PROTECTED_AUDIENCE: {
allowed_api_set.Put(privacy_sandbox::PrivacySandboxAttestationsGatedAPI::
kProtectedAudience);
return;
}
case privacy_sandbox::PRIVATE_AGGREGATION: {
allowed_api_set.Put(privacy_sandbox::PrivacySandboxAttestationsGatedAPI::
kPrivateAggregation);
return;
}
case privacy_sandbox::ATTRIBUTION_REPORTING: {
allowed_api_set.Put(privacy_sandbox::PrivacySandboxAttestationsGatedAPI::
kAttributionReporting);
return;
}
case privacy_sandbox::SHARED_STORAGE: {
allowed_api_set.Put(
privacy_sandbox::PrivacySandboxAttestationsGatedAPI::kSharedStorage);
return;
}
case privacy_sandbox::FENCED_STORAGE_READ: {
if (base::FeatureList::IsEnabled(
blink::features::kFencedFramesLocalUnpartitionedDataAccess)) {
allowed_api_set.Put(
privacy_sandbox::PrivacySandboxAttestationsGatedAPI::
kFencedStorageRead);
}
return;
}
case privacy_sandbox::UNKNOWN: {
return;
}
default: {
return;
}
}
}
} // namespace
namespace privacy_sandbox {
std::optional<PrivacySandboxAttestationsMap> ParseAttestationsFromString(
const std::string& input) {
PrivacySandboxAttestationsProto proto;
// Parse the istream into a proto for the attestations message format.
if (!proto.ParseFromString(input)) {
// Parsing failed. This should never happen in real use, because the input
// comes from Chrome servers.
return std::nullopt;
}
// Convert the parsed proto into a C++ attestations map.
// Parse the set of "all APIs".
PrivacySandboxAttestationsGatedAPISet all_api_set;
for (int i = 0; i < proto.all_apis_size(); ++i) {
InsertAPI(all_api_set, proto.all_apis(i));
}
// Allocate a vector to store the site attestation pairs from the proto.
std::vector<
std::pair<net::SchemefulSite, PrivacySandboxAttestationsGatedAPISet>>
site_attestations_vector;
site_attestations_vector.reserve(proto.sites_attested_for_all_apis_size() +
proto.site_attestations_size());
// Store the sites that are attested for all APIs.
for (int i = 0; i < proto.sites_attested_for_all_apis_size(); ++i) {
site_attestations_vector.emplace_back(
net::SchemefulSite(GURL(proto.sites_attested_for_all_apis(i))),
all_api_set);
}
// Store the sites that are attested for only some APIs.
const auto& site_attestations_map = proto.site_attestations();
for (const auto& site_attestation_pair : site_attestations_map) {
// Get the site key.
auto site = net::SchemefulSite(GURL(site_attestation_pair.first));
// Collect all of the allowed apis for that site.
const auto& attestation = site_attestation_pair.second;
PrivacySandboxAttestationsGatedAPISet allowed_api_set;
for (int i = 0; i < attestation.attested_apis_size(); ++i) {
InsertAPI(allowed_api_set, attestation.attested_apis(i));
}
// Append the site,apis pair to the C++ formatted vector.
site_attestations_vector.emplace_back(site, allowed_api_set);
}
// Convert the vector into a flat map (which prefers initialization with the
// entire data structure, not incremental inserts) and return.
return PrivacySandboxAttestationsMap(std::move(site_attestations_vector));
}
} // namespace privacy_sandbox
|
