components/autofill/core/common/autofill_data_validation.cc

   1 // Copyright 2014 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #include "components/autofill/core/common/autofill_data_validation.h"
   6
   7 #include "components/autofill/core/common/form_data.h"
   8 #include "components/autofill/core/common/form_field_data.h"
   9 #include "components/autofill/core/common/password_form_fill_data.h"
  10 #include "url/gurl.h"
  11
  12 namespace autofill {
  13
  14 const size_t kMaxDataLength = 1024;
  15
  16 // Allow enough space for all countries (roughly 300 distinct values) and all
  17 // timezones (roughly 400 distinct values), plus some extra wiggle room.
  18 const size_t kMaxListSize = 512;
  19
  20 bool IsValidString(const std::string& str) {
  21   return str.size() <= kMaxDataLength;
  22 }
  23
  24 bool IsValidString16(const base::string16& str) {
  25   return str.size() <= kMaxDataLength;
  26 }
  27
  28 bool IsValidGURL(const GURL& url) {
  29   return url.is_empty() || url.is_valid();
  30 }
  31
  32 bool IsValidFormFieldData(const FormFieldData& field) {
  33   return
  34       IsValidString16(field.label) &&
  35       IsValidString16(field.name) &&
  36       IsValidString16(field.value) &&
  37       IsValidString(field.form_control_type) &&
  38       IsValidString(field.autocomplete_attribute) &&
  39       IsValidString16Vector(field.option_values) &&
  40       IsValidString16Vector(field.option_contents);
  41 }
  42
  43 bool IsValidFormData(const FormData& form) {
  44   if (!IsValidString16(form.name) ||
  45       !IsValidGURL(form.origin) ||
  46       !IsValidGURL(form.action))
  47     return false;
  48
  49   if (form.fields.size() > kMaxListSize)
  50     return false;
  51
  52   for (std::vector<FormFieldData>::const_iterator it = form.fields.begin();
  53        it != form.fields.end(); ++it) {
  54     if (!IsValidFormFieldData(*it))
  55       return false;
  56   }
  57
  58   return true;
  59 }
  60
  61 bool IsValidPasswordFormFillData(const PasswordFormFillData& form) {
  62   if (!IsValidString16(form.name) || !IsValidGURL(form.origin) ||
  63       !IsValidGURL(form.action) || !IsValidFormFieldData(form.username_field) ||
  64       !IsValidFormFieldData(form.password_field) ||
  65       !IsValidString(form.preferred_realm)) {
  66     return false;
  67   }
  68
  69   for (PasswordFormFillData::LoginCollection::const_iterator it =
  70            form.additional_logins.begin();
  71        it != form.additional_logins.end(); ++it) {
  72     if (!IsValidString16(it->first) ||
  73         !IsValidString16(it->second.password) ||
  74         !IsValidString(it->second.realm))
  75       return false;
  76   }
  77
  78   for (PasswordFormFillData::UsernamesCollection::const_iterator it =
  79            form.other_possible_usernames.begin();
  80        it != form.other_possible_usernames.end(); ++it) {
  81     if (!IsValidString16(it->first.username) ||
  82         !IsValidString16(it->first.password) ||
  83         !IsValidString(it->first.realm) ||
  84         !IsValidString16Vector(it->second))
  85       return false;
  86   }
  87
  88   return true;
  89 }
  90
  91 bool IsValidString16Vector(const std::vector<base::string16>& v) {
  92   if (v.size() > kMaxListSize)
  93     return false;
  94
  95   for (std::vector<base::string16>::const_iterator it = v.begin();
  96        it != v.end(); ++it) {
  97     if (!IsValidString16(*it))
  98       return false;
  99   }
 100
 101   return true;
 102 }
 103
 104 bool IsValidFormDataVector(const std::vector<FormData>& v) {
 105   if (v.size() > kMaxListSize)
 106     return false;
 107
 108   for (std::vector<FormData>::const_iterator it = v.begin(); it != v.end();
 109        ++it) {
 110     if (!IsValidFormData(*it))
 111       return false;
 112   }
 113
 114   return true;
 115 }
 116
 117 }  // namespace autofill