1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
|
// Copyright 2023 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "components/security_interstitials/core/insecure_form_util.h"
#include "base/strings/string_util.h"
#include "services/network/public/cpp/is_potentially_trustworthy.h"
#include "url/gurl.h"
#include "url/origin.h"
#if BUILDFLAG(IS_IOS)
namespace {
// If a <form>'s source URL (the URL that the form is hosted on) has this port,
// it'll be treated as an HTTPS URL in the Insecure Form warning checks.
static int g_form_source_url_port_treated_as_secure_for_insecure_form_testing =
0;
// If a <form>'s action URL (the URL that the form posts to) has this port,
// it'll be treated as an insecure URL in the Insecure Form warning checks.
static int
g_form_action_url_port_treated_as_insecure_for_insecure_form_testing = 0;
} // namespace
#endif
namespace security_interstitials {
#if BUILDFLAG(IS_IOS)
void SetInsecureFormPortsForTesting(int source_url_port_treated_as_secure,
int action_url_port_treated_as_insecure) {
g_form_source_url_port_treated_as_secure_for_insecure_form_testing =
source_url_port_treated_as_secure;
g_form_action_url_port_treated_as_insecure_for_insecure_form_testing =
action_url_port_treated_as_insecure;
}
#endif
bool IsInsecureFormActionOnSecureSource(const url::Origin& source_origin,
const GURL& action_url) {
if (!base::EqualsCaseInsensitiveASCII(source_origin.scheme(),
url::kHttpsScheme)) {
#if BUILDFLAG(IS_IOS)
// On iOS, tests can't use an HTTPS server that serves a valid HTTPS
// response. Check if the URL is treated as secure for testing purposes.
if (g_form_source_url_port_treated_as_secure_for_insecure_form_testing &&
source_origin.port() !=
g_form_source_url_port_treated_as_secure_for_insecure_form_testing) {
return false;
}
#else
// On non-iOS platforms, tests should use a proper HTTPS server.
return false;
#endif
}
return IsInsecureFormAction(action_url);
}
bool IsInsecureFormAction(const GURL& action_url) {
#if BUILDFLAG(IS_IOS)
// On iOS eg tests, test server serves responses at 127.0.0.1 which is
// normally a trustworthy URL.
// Check if the URL is treated as insecure for testing purposes.
if (g_form_action_url_port_treated_as_insecure_for_insecure_form_testing &&
action_url.IntPort() ==
g_form_action_url_port_treated_as_insecure_for_insecure_form_testing) {
return true;
}
#endif
// blob: and filesystem: URLs never hit the network, and access is restricted
// to same-origin contexts, so they are not blocked. Some forms use
// javascript URLs to handle submissions in JS, those don't count as mixed
// content either.
if (action_url.SchemeIs(url::kJavaScriptScheme) ||
action_url.SchemeIs(url::kBlobScheme) ||
action_url.SchemeIs(url::kFileSystemScheme)) {
return false;
}
return !network::IsUrlPotentiallyTrustworthy(action_url);
}
} // namespace security_interstitials
|
