summaryrefslogtreecommitdiffstats
path: root/chrome/browser/renderer_host/renderer_security_policy.cc
diff options
context:
space:
mode:
Diffstat (limited to 'chrome/browser/renderer_host/renderer_security_policy.cc')
-rw-r--r--chrome/browser/renderer_host/renderer_security_policy.cc20
1 files changed, 10 insertions, 10 deletions
diff --git a/chrome/browser/renderer_host/renderer_security_policy.cc b/chrome/browser/renderer_host/renderer_security_policy.cc
index 71a71ec..e33b0d1 100644
--- a/chrome/browser/renderer_host/renderer_security_policy.cc
+++ b/chrome/browser/renderer_host/renderer_security_policy.cc
@@ -78,10 +78,10 @@ class RendererSecurityPolicy::SecurityState {
RendererSecurityPolicy::RendererSecurityPolicy() {
// We know about these schemes and believe them to be safe.
- RegisterWebSafeScheme("http");
- RegisterWebSafeScheme("https");
- RegisterWebSafeScheme("ftp");
- RegisterWebSafeScheme("data");
+ RegisterWebSafeScheme(chrome::kHttpScheme);
+ RegisterWebSafeScheme(chrome::kHttpsScheme);
+ RegisterWebSafeScheme(chrome::kFtpScheme);
+ RegisterWebSafeScheme(chrome::kDataScheme);
RegisterWebSafeScheme("feed");
RegisterWebSafeScheme("chrome-extension");
@@ -156,7 +156,7 @@ void RendererSecurityPolicy::GrantRequestURL(int renderer_id, const GURL& url) {
if (IsPseudoScheme(url.scheme())) {
// The view-source scheme is a special case of a pseudo URL that eventually
// results in requesting its embedded URL.
- if (url.SchemeIs("view-source")) {
+ if (url.SchemeIs(chrome::kViewSourceScheme)) {
// URLs with the view-source scheme typically look like:
// view-source:http://www.google.com/a
// In order to request these URLs, the renderer needs to be able to request
@@ -199,7 +199,7 @@ void RendererSecurityPolicy::GrantInspectElement(int renderer_id) {
// The inspector is served from a chrome-ui: URL. In order to run the
// inspector, the renderer needs to be able to load chrome-ui URLs.
- state->second->GrantScheme("chrome-ui");
+ state->second->GrantScheme(chrome::kChromeUIScheme);
}
void RendererSecurityPolicy::GrantDOMUIBindings(int renderer_id) {
@@ -212,10 +212,10 @@ void RendererSecurityPolicy::GrantDOMUIBindings(int renderer_id) {
state->second->GrantDOMUIBindings();
// DOM UI bindings need the ability to request chrome-ui URLs.
- state->second->GrantScheme("chrome-ui");
+ state->second->GrantScheme(chrome::kChromeUIScheme);
// DOM UI pages can contain links to file:// URLs.
- state->second->GrantScheme("file");
+ state->second->GrantScheme(chrome::kFileScheme);
}
bool RendererSecurityPolicy::CanRequestURL(int renderer_id, const GURL& url) {
@@ -228,13 +228,13 @@ bool RendererSecurityPolicy::CanRequestURL(int renderer_id, const GURL& url) {
if (IsPseudoScheme(url.scheme())) {
// There are a number of special cases for pseudo schemes.
- if (url.SchemeIs("view-source")) {
+ if (url.SchemeIs(chrome::kViewSourceScheme)) {
// A view-source URL is allowed if the renderer is permitted to request
// the embedded URL.
return CanRequestURL(renderer_id, GURL(url.path()));
}
- if (LowerCaseEqualsASCII(url.spec(), "about:blank"))
+ if (LowerCaseEqualsASCII(url.spec(), chrome::kAboutBlankURL))
return true; // Every renderer can request <about:blank>.
// URLs like <about:memory> and <about:crash> shouldn't be requestable by