mirror of
https://github.com/LadybirdBrowser/ladybird.git
synced 2025-04-26 06:18:59 +00:00
1f820f8840
Used by Google seemingly almost all around account sign in and management. The modern sign in page has this near the beginning: ```html <base href="https://accounts.google.com"> ``` All of the XHRs performed by sign in are relative URLs to this base URL. Previously we ignored this and did it relative to the current URL, causing the XHRs to 404 and sign in to fall apart. I presume they do this because you can access the sign in page from multiple endpoints, such as `/ServiceLogin` and `/o/oauth2/auth/identifier`
66 lines
2.6 KiB
C++
66 lines
2.6 KiB
C++
/*
|
|
* Copyright (c) 2020, the SerenityOS developers.
|
|
*
|
|
* SPDX-License-Identifier: BSD-2-Clause
|
|
*/
|
|
|
|
#include <LibWeb/DOM/Document.h>
|
|
#include <LibWeb/HTML/HTMLBaseElement.h>
|
|
|
|
namespace Web::HTML {
|
|
|
|
HTMLBaseElement::HTMLBaseElement(DOM::Document& document, DOM::QualifiedName qualified_name)
|
|
: HTMLElement(document, move(qualified_name))
|
|
{
|
|
}
|
|
|
|
HTMLBaseElement::~HTMLBaseElement() = default;
|
|
|
|
void HTMLBaseElement::inserted()
|
|
{
|
|
HTMLElement::inserted();
|
|
|
|
// The frozen base URL must be immediately set for an element whenever any of the following situations occur:
|
|
// - The base element becomes the first base element in tree order with an href content attribute in its Document.
|
|
|
|
// NOTE: inserted() is called after this element has been inserted into the document.
|
|
auto first_base_element_with_href_in_document = document().first_base_element_with_href_in_tree_order();
|
|
if (first_base_element_with_href_in_document == this)
|
|
set_the_frozen_base_url();
|
|
}
|
|
|
|
void HTMLBaseElement::parse_attribute(FlyString const& name, String const& value)
|
|
{
|
|
HTMLElement::parse_attribute(name, value);
|
|
|
|
// The frozen base URL must be immediately set for an element whenever any of the following situations occur:
|
|
// - The base element is the first base element in tree order with an href content attribute in its Document, and its href content attribute is changed.
|
|
if (name != AttributeNames::href)
|
|
return;
|
|
|
|
auto first_base_element_with_href_in_document = document().first_base_element_with_href_in_tree_order();
|
|
if (first_base_element_with_href_in_document == this)
|
|
set_the_frozen_base_url();
|
|
}
|
|
|
|
// https://html.spec.whatwg.org/multipage/semantics.html#set-the-frozen-base-url
|
|
void HTMLBaseElement::set_the_frozen_base_url()
|
|
{
|
|
// 1. Let document be element's node document.
|
|
auto& document = this->document();
|
|
|
|
// 2. Let urlRecord be the result of parsing the value of element's href content attribute with document's fallback base URL, and document's character encoding. (Thus, the base element isn't affected by itself.)
|
|
auto href = attribute(AttributeNames::href);
|
|
auto url_record = document.fallback_base_url().complete_url(href);
|
|
|
|
// 3. Set element's frozen base URL to document's fallback base URL, if urlRecord is failure or running Is base allowed for Document? on the resulting URL record and document returns "Blocked", and to urlRecord otherwise.
|
|
// FIXME: Apply "Is base allowed for Document?" CSP
|
|
if (!url_record.is_valid()) {
|
|
m_frozen_base_url = document.fallback_base_url();
|
|
return;
|
|
}
|
|
|
|
m_frozen_base_url = move(url_record);
|
|
}
|
|
|
|
}
|