blob: 8e586d8134ff5f6dee2bc602a31b4d41cd8069b2 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
|
// Copyright (c) 2012 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/browsing_data_helper.h"
#include "base/command_line.h"
#include "base/utf_string_conversions.h"
#include "chrome/browser/extensions/extension_special_storage_policy.h"
#include "chrome/common/chrome_switches.h"
#include "chrome/common/url_constants.h"
#include "content/public/browser/child_process_security_policy.h"
#include "googleurl/src/gurl.h"
#include "third_party/WebKit/Source/WebKit/chromium/public/platform/WebString.h"
// Static
bool BrowsingDataHelper::IsWebScheme(const std::string& scheme) {
// Special-case `file://` scheme iff cookies and site data are enabled via
// the `--allow-file-cookies` CLI flag.
if (scheme == chrome::kFileScheme) {
return CommandLine::ForCurrentProcess()->HasSwitch(
switches::kEnableFileCookies);
// Otherwise, all "web safe" schemes are valid, except `chrome-extension://`
// and `chrome-devtools://`.
} else {
content::ChildProcessSecurityPolicy* policy =
content::ChildProcessSecurityPolicy::GetInstance();
return (policy->IsWebSafeScheme(scheme) &&
!BrowsingDataHelper::IsExtensionScheme(scheme) &&
scheme != chrome::kChromeDevToolsScheme);
}
}
// Static
bool BrowsingDataHelper::IsWebScheme(const WebKit::WebString& scheme) {
return BrowsingDataHelper::IsWebScheme(UTF16ToUTF8(scheme));
}
// Static
bool BrowsingDataHelper::HasWebScheme(const GURL& origin) {
return BrowsingDataHelper::IsWebScheme(origin.scheme());
}
// Static
bool BrowsingDataHelper::IsExtensionScheme(const std::string& scheme) {
return scheme == chrome::kExtensionScheme;
}
// Static
bool BrowsingDataHelper::IsExtensionScheme(const WebKit::WebString& scheme) {
return BrowsingDataHelper::IsExtensionScheme(UTF16ToUTF8(scheme));
}
// Static
bool BrowsingDataHelper::HasExtensionScheme(const GURL& origin) {
return BrowsingDataHelper::IsExtensionScheme(origin.scheme());
}
// Static
bool BrowsingDataHelper::DoesOriginMatchMask(const GURL& origin,
int origin_set_mask, ExtensionSpecialStoragePolicy* policy) {
// Packaged apps and extensions match iff EXTENSION.
if (BrowsingDataHelper::HasExtensionScheme(origin.GetOrigin()) &&
origin_set_mask & EXTENSION)
return true;
// If a websafe origin is unprotected, it matches iff UNPROTECTED_WEB.
if (!policy->IsStorageProtected(origin.GetOrigin()) &&
BrowsingDataHelper::HasWebScheme(origin.GetOrigin()) &&
origin_set_mask & UNPROTECTED_WEB)
return true;
// Hosted applications (protected and websafe origins) iff PROTECTED_WEB.
if (policy->IsStorageProtected(origin.GetOrigin()) &&
BrowsingDataHelper::HasWebScheme(origin.GetOrigin()) &&
origin_set_mask & PROTECTED_WEB)
return true;
return false;
}
|
