mirror of
https://github.com/LadybirdBrowser/ladybird.git
synced 2025-10-27 10:29:23 +00:00
107 lines
4 KiB
C++
107 lines
4 KiB
C++
/*
|
|
* Copyright (c) 2024, Andrew Kaster <akaster@serenityos.org>
|
|
* Copyright (c) 2025, Luke Wilde <luke@ladybird.org>
|
|
*
|
|
* SPDX-License-Identifier: BSD-2-Clause
|
|
*/
|
|
|
|
#include <LibJS/Runtime/Realm.h>
|
|
#include <LibURL/URL.h>
|
|
#include <LibWeb/ContentSecurityPolicy/Policy.h>
|
|
#include <LibWeb/ContentSecurityPolicy/PolicyList.h>
|
|
#include <LibWeb/Fetch/Infrastructure/HTTP/Responses.h>
|
|
#include <LibWeb/Fetch/Infrastructure/URL.h>
|
|
#include <LibWeb/HTML/PolicyContainers.h>
|
|
#include <LibWeb/HTML/SerializedPolicyContainer.h>
|
|
|
|
namespace Web::HTML {
|
|
|
|
GC_DEFINE_ALLOCATOR(PolicyContainer);
|
|
|
|
PolicyContainer::PolicyContainer(GC::Heap& heap)
|
|
: csp_list(heap.allocate<ContentSecurityPolicy::PolicyList>())
|
|
{
|
|
}
|
|
|
|
// https://html.spec.whatwg.org/multipage/browsers.html#requires-storing-the-policy-container-in-history
|
|
bool url_requires_storing_the_policy_container_in_history(URL::URL const& url)
|
|
{
|
|
// 1. If url's scheme is "blob", then return false.
|
|
if (url.scheme() == "blob"sv)
|
|
return false;
|
|
|
|
// 2. If url is local, then return true.
|
|
// 3. Return false.
|
|
return Fetch::Infrastructure::is_local_url(url);
|
|
}
|
|
|
|
// https://html.spec.whatwg.org/multipage/browsers.html#creating-a-policy-container-from-a-fetch-response
|
|
GC::Ref<PolicyContainer> create_a_policy_container_from_a_fetch_response(GC::Heap& heap, GC::Ref<Fetch::Infrastructure::Response const> response, GC::Ptr<Environment>)
|
|
{
|
|
// FIXME: 1. If response's URL's scheme is "blob", then return a clone of response's URL's blob URL entry's
|
|
// environment's policy container.
|
|
|
|
// 2. Let result be a new policy container.
|
|
GC::Ref<PolicyContainer> result = heap.allocate<PolicyContainer>(heap);
|
|
|
|
// 3. Set result's CSP list to the result of parsing a response's Content Security Policies given response.
|
|
result->csp_list = ContentSecurityPolicy::Policy::parse_a_responses_content_security_policies(heap, response);
|
|
|
|
// FIXME: 4. If environment is non-null, then set result's embedder policy to the result of obtaining an embedder
|
|
// policy given response and environment. Otherwise, set it to "unsafe-none".
|
|
|
|
// FIXME: 5. Set result's referrer policy to the result of parsing the `Referrer-Policy` header given response.
|
|
// [REFERRERPOLICY]
|
|
// Doing this currently makes Fetch fail the policy != ReferrerPolicy::EmptyString verification.
|
|
|
|
// FIXME: 6. Parse Integrity-Policy headers with response and result.
|
|
|
|
// 7. Return result.
|
|
return result;
|
|
}
|
|
|
|
GC::Ref<PolicyContainer> create_a_policy_container_from_serialized_policy_container(GC::Heap& heap, SerializedPolicyContainer const& serialized_policy_container)
|
|
{
|
|
GC::Ref<PolicyContainer> result = heap.allocate<PolicyContainer>(heap);
|
|
result->csp_list = ContentSecurityPolicy::PolicyList::create(heap, serialized_policy_container.csp_list);
|
|
result->embedder_policy = serialized_policy_container.embedder_policy;
|
|
result->referrer_policy = serialized_policy_container.referrer_policy;
|
|
return result;
|
|
}
|
|
|
|
// https://html.spec.whatwg.org/multipage/browsers.html#clone-a-policy-container
|
|
GC::Ref<PolicyContainer> PolicyContainer::clone(GC::Heap& heap) const
|
|
{
|
|
// 1. Let clone be a new policy container.
|
|
auto clone = heap.allocate<PolicyContainer>(heap);
|
|
|
|
// 2. For each policy in policyContainer's CSP list, append a copy of policy into clone's CSP list.
|
|
clone->csp_list = csp_list->clone(heap);
|
|
|
|
// 3. Set clone's embedder policy to a copy of policyContainer's embedder policy.
|
|
// NOTE: This is a C++ copy.
|
|
clone->embedder_policy = embedder_policy;
|
|
|
|
// 4. Set clone's referrer policy to policyContainer's referrer policy.
|
|
clone->referrer_policy = referrer_policy;
|
|
|
|
// 5. Return clone.
|
|
return clone;
|
|
}
|
|
|
|
SerializedPolicyContainer PolicyContainer::serialize() const
|
|
{
|
|
return SerializedPolicyContainer {
|
|
.csp_list = csp_list->serialize(),
|
|
.embedder_policy = embedder_policy,
|
|
.referrer_policy = referrer_policy,
|
|
};
|
|
}
|
|
|
|
void PolicyContainer::visit_edges(Cell::Visitor& visitor)
|
|
{
|
|
Base::visit_edges(visitor);
|
|
visitor.visit(csp_list);
|
|
}
|
|
|
|
}
|