1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
|
/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
#include "CookiePrefixes.h"
namespace mozilla::net {
namespace {
struct CookiePrefix {
CookiePrefixes::Prefix mPrefix;
nsCString mPrefixCString;
nsString mPrefixString;
std::function<bool(const CookieStruct&, bool)> mCallback;
};
MOZ_RUNINIT CookiePrefix gCookiePrefixes[] = {
{CookiePrefixes::eSecure, "__Secure-"_ns, u"__Secure-"_ns,
[](const CookieStruct& aCookieData, bool aSecureRequest) -> bool {
// If a cookie's name begins with a case-sensitive match for the string
// __Secure-, then the cookie will have been set with a Secure attribute.
return aSecureRequest && aCookieData.isSecure();
}},
{CookiePrefixes::eHost, "__Host-"_ns, u"__Host-"_ns,
[](const CookieStruct& aCookieData, bool aSecureRequest) -> bool {
// If a cookie's name begins with a case-sensitive match for the string
// __Host-, then the cookie will have been set with a Secure attribute, a
// Path attribute with a value of /, and no Domain attribute.
return aSecureRequest && aCookieData.isSecure() &&
aCookieData.host()[0] != '.' &&
aCookieData.path().EqualsLiteral("/");
}},
{CookiePrefixes::eHttp, "__Http-"_ns, u"__Http-"_ns,
[](const CookieStruct& aCookieData, bool aSecureRequest) -> bool {
// If a cookie's name begins with a case-sensitive match for the string
// __Http-, then the cookie will have been set with a Secure attribute,
// and an HttpOnly attribute.
return aSecureRequest && aCookieData.isSecure() &&
aCookieData.isHttpOnly();
}},
{CookiePrefixes::eHostHttp, "__Host-Http-"_ns, u"__Host-Http-"_ns,
[](const CookieStruct& aCookieData, bool aSecureRequest) -> bool {
// If a cookie's name begins with a case-sensitive match for the string
// __Host-Http-, then the cookie will have been set with a Secure
// attribute, an HttpOnly attribute, a Path attribute with a value of /,
// and no Domain attribute.
return aSecureRequest && aCookieData.isSecure() &&
aCookieData.isHttpOnly() && aCookieData.host()[0] != '.' &&
aCookieData.path().EqualsLiteral("/");
}},
};
} // namespace
// static
bool CookiePrefixes::Has(Prefix aPrefix, const nsAString& aString) {
for (CookiePrefix& prefix : gCookiePrefixes) {
if (prefix.mPrefix == aPrefix) {
return StringBeginsWith(aString, prefix.mPrefixString,
nsCaseInsensitiveStringComparator);
}
}
return false;
}
// static
bool CookiePrefixes::Has(const nsACString& aString) {
for (CookiePrefix& prefix : gCookiePrefixes) {
if (StringBeginsWith(aString, prefix.mPrefixCString,
nsCaseInsensitiveCStringComparator)) {
return true;
}
}
return false;
}
// static
bool CookiePrefixes::Check(const CookieStruct& aCookieData,
bool aSecureRequest) {
for (CookiePrefix& prefix : gCookiePrefixes) {
if (StringBeginsWith(aCookieData.name(), prefix.mPrefixCString,
nsCaseInsensitiveCStringComparator)) {
return prefix.mCallback(aCookieData, aSecureRequest);
}
}
// not one of the magic prefixes: carry on
return true;
}
} // namespace mozilla::net
|
