mirror of
https://github.com/klzgrad/naiveproxy.git
synced 2024-12-01 01:36:09 +03:00
77 lines
2.8 KiB
C++
77 lines
2.8 KiB
C++
|
// Copyright 2014 The Chromium Authors. All rights reserved.
|
||
|
|
// Use of this source code is governed by a BSD-style license that can be
|
||
|
|
// found in the LICENSE file.
|
||
|
|
|
||
|
|
#include "net/http/http_log_util.h"
|
||
|
|
|
||
|
|
#include "base/strings/string_util.h"
|
||
|
|
#include "base/strings/stringprintf.h"
|
||
|
|
#include "net/http/http_auth_challenge_tokenizer.h"
|
||
|
|
#include "net/http/http_auth_scheme.h"
|
||
|
|
|
||
|
|
namespace net {
|
||
|
|
|
||
|
|
namespace {
|
||
|
|
|
||
|
|
bool ShouldRedactChallenge(HttpAuthChallengeTokenizer* challenge) {
|
||
|
|
// Ignore lines with commas, as they may contain lists of schemes, and
|
||
|
|
// the information we want to hide is Base64 encoded, so has no commas.
|
||
|
|
if (challenge->challenge_text().find(',') != std::string::npos)
|
||
|
|
return false;
|
||
|
|
|
||
|
|
std::string scheme = base::ToLowerASCII(challenge->scheme());
|
||
|
|
// Invalid input.
|
||
|
|
if (scheme.empty())
|
||
|
|
return false;
|
||
|
|
|
||
|
|
// Ignore Basic and Digest authentication challenges, as they contain
|
||
|
|
// public information.
|
||
|
|
if (scheme == kBasicAuthScheme || scheme == kDigestAuthScheme)
|
||
|
|
return false;
|
||
|
|
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
|
||
|
|
} // namespace
|
||
|
|
|
||
|
|
std::string ElideHeaderValueForNetLog(NetLogCaptureMode capture_mode,
|
||
|
|
const std::string& header,
|
||
|
|
const std::string& value) {
|
||
|
|
std::string::const_iterator redact_begin = value.begin();
|
||
|
|
std::string::const_iterator redact_end = value.begin();
|
||
|
|
|
||
|
|
if (redact_begin == redact_end &&
|
||
|
|
!capture_mode.include_cookies_and_credentials()) {
|
||
|
|
// Note: this logic should be kept in sync with stripCookieOrLoginInfo in
|
||
|
|
// chrome/browser/resources/net_internals/log_view_painter.js.
|
||
|
|
|
||
|
|
if (base::EqualsCaseInsensitiveASCII(header, "set-cookie") ||
|
||
|
|
base::EqualsCaseInsensitiveASCII(header, "set-cookie2") ||
|
||
|
|
base::EqualsCaseInsensitiveASCII(header, "cookie") ||
|
||
|
|
base::EqualsCaseInsensitiveASCII(header, "authorization") ||
|
||
|
|
base::EqualsCaseInsensitiveASCII(header, "proxy-authorization")) {
|
||
|
|
redact_begin = value.begin();
|
||
|
|
redact_end = value.end();
|
||
|
|
} else if (base::EqualsCaseInsensitiveASCII(header, "www-authenticate") ||
|
||
|
|
base::EqualsCaseInsensitiveASCII(header, "proxy-authenticate")) {
|
||
|
|
// Look for authentication information from data received from the server
|
||
|
|
// in multi-round Negotiate authentication.
|
||
|
|
HttpAuthChallengeTokenizer challenge(value.begin(), value.end());
|
||
|
|
if (ShouldRedactChallenge(&challenge)) {
|
||
|
|
redact_begin = challenge.params_begin();
|
||
|
|
redact_end = challenge.params_end();
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
if (redact_begin == redact_end)
|
||
|
|
return value;
|
||
|
|
|
||
|
|
return std::string(value.begin(), redact_begin) +
|
||
|
|
base::StringPrintf("[%ld bytes were stripped]",
|
||
|
|
static_cast<long>(redact_end - redact_begin)) +
|
||
|
|
std::string(redact_end, value.end());
|
||
|
|
}
|
||
|
|
|
||
|
|
} // namespace net
|