content/common/origin_util.cc

   1 // Copyright 2015 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #include "content/public/common/origin_util.h"
   6
   7 #include "base/lazy_instance.h"
   8 #include "base/stl_util.h"
   9 #include "content/public/common/content_client.h"
  10 #include "net/base/net_util.h"
  11 #include "url/gurl.h"
  12
  13 namespace content {
  14
  15 namespace {
  16
  17 class SchemeAndOriginWhitelist {
  18  public:
  19   SchemeAndOriginWhitelist() { Reset(); }
  20   ~SchemeAndOriginWhitelist() {}
  21
  22   void Reset() {
  23     GetContentClient()->AddSecureSchemesAndOrigins(&secure_schemes_,
  24                                                    &secure_origins_);
  25     GetContentClient()->AddServiceWorkerSchemes(&service_worker_schemes_);
  26   }
  27
  28   const std::set<std::string>& secure_schemes() const {
  29     return secure_schemes_;
  30   }
  31   const std::set<GURL>& secure_origins() const { return secure_origins_; }
  32   const std::set<std::string>& service_worker_schemes() const {
  33     return service_worker_schemes_;
  34   }
  35
  36  private:
  37   std::set<std::string> secure_schemes_;
  38   std::set<GURL> secure_origins_;
  39   std::set<std::string> service_worker_schemes_;
  40   DISALLOW_COPY_AND_ASSIGN(SchemeAndOriginWhitelist);
  41 };
  42
  43 base::LazyInstance<SchemeAndOriginWhitelist>::Leaky g_trustworthy_whitelist =
  44     LAZY_INSTANCE_INITIALIZER;
  45
  46 }  // namespace
  47
  48 bool IsOriginSecure(const GURL& url) {
  49   if (url.SchemeIsCryptographic() || url.SchemeIsFile())
  50     return true;
  51
  52   if (url.SchemeIsFileSystem() && url.inner_url() &&
  53       IsOriginSecure(*url.inner_url())) {
  54     return true;
  55   }
  56
  57   std::string hostname = url.HostNoBrackets();
  58   if (net::IsLocalhost(hostname))
  59     return true;
  60
  61   if (ContainsKey(g_trustworthy_whitelist.Get().secure_schemes(), url.scheme()))
  62     return true;
  63
  64   if (ContainsKey(g_trustworthy_whitelist.Get().secure_origins(),
  65                   url.GetOrigin())) {
  66     return true;
  67   }
  68
  69   return false;
  70 }
  71
  72 bool OriginCanAccessServiceWorkers(const GURL& url) {
  73   if (url.SchemeIsHTTPOrHTTPS() && IsOriginSecure(url))
  74     return true;
  75
  76   if (ContainsKey(g_trustworthy_whitelist.Get().service_worker_schemes(),
  77                   url.scheme())) {
  78     return true;
  79   }
  80
  81   return false;
  82 }
  83
  84 void ResetSchemesAndOriginsWhitelistForTesting() {
  85   g_trustworthy_whitelist.Get().Reset();
  86 }
  87
  88 }  // namespace content