1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
|
// Copyright 2020 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "components/web_package/web_bundle_utils.h"
#include <optional>
#include <string_view>
#include "base/strings/strcat.h"
#include "base/strings/string_number_conversions.h"
#include "base/strings/string_util.h"
#include "base/uuid.h"
#include "components/web_package/mojom/web_bundle_parser.mojom.h"
#include "net/http/http_response_headers.h"
#include "net/http/http_status_code.h"
#include "net/http/http_util.h"
#include "services/network/public/mojom/url_response_head.mojom.h"
namespace web_package {
namespace {
constexpr char kContentTypeOptionsHeaderName[] = "x-content-type-options";
constexpr char kCrLf[] = "\r\n";
constexpr char kNoSniffHeaderValue[] = "nosniff";
} // namespace
network::mojom::URLResponseHeadPtr CreateResourceResponse(
const web_package::mojom::BundleResponsePtr& response) {
return CreateResourceResponseFromHeaderString(CreateHeaderString(response));
}
std::string CreateHeaderString(
const web_package::mojom::BundleResponsePtr& response) {
std::vector<std::string_view> header_strings;
header_strings.reserve(6 + 4 * response->response_headers.size());
header_strings.push_back("HTTP/1.1 ");
std::string response_code_as_string =
base::NumberToString(response->response_code);
header_strings.push_back(response_code_as_string);
header_strings.push_back(" ");
header_strings.push_back(net::GetHttpReasonPhrase(response->response_code));
header_strings.push_back(kCrLf);
for (const auto& it : response->response_headers) {
header_strings.push_back(it.first);
header_strings.push_back(": ");
header_strings.push_back(it.second);
header_strings.push_back(kCrLf);
}
header_strings.push_back(kCrLf);
return net::HttpUtil::AssembleRawHeaders(base::StrCat(header_strings));
}
network::mojom::URLResponseHeadPtr CreateResourceResponseFromHeaderString(
const std::string& header_string) {
auto response_head = network::mojom::URLResponseHead::New();
response_head->headers =
base::MakeRefCounted<net::HttpResponseHeaders>(header_string);
response_head->headers->GetMimeTypeAndCharset(&response_head->mime_type,
&response_head->charset);
return response_head;
}
bool HasNoSniffHeader(const network::mojom::URLResponseHead& response) {
std::optional<std::string_view> content_type_options =
response.headers->EnumerateHeader(nullptr, kContentTypeOptionsHeaderName);
return content_type_options &&
base::EqualsCaseInsensitiveASCII(*content_type_options,
kNoSniffHeaderValue);
}
bool IsValidUuidInPackageURL(const GURL& url) {
std::string spec = url.spec();
return base::StartsWith(
spec, "uuid-in-package:", base::CompareCase::INSENSITIVE_ASCII) &&
base::Uuid::ParseCaseInsensitive(std::string_view(spec).substr(16))
.is_valid();
}
} // namespace web_package
|
