// Copyright 2015 The Chromium Authors. All rights reserved. // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. #include "url/origin.h" #include #include #include "base/logging.h" #include "base/strings/string_number_conversions.h" #include "url/gurl.h" #include "url/url_canon.h" #include "url/url_canon_stdstring.h" #include "url/url_constants.h" #include "url/url_util.h" namespace url { namespace { GURL AddSuboriginToUrl(const GURL& url, const std::string& suborigin) { GURL::Replacements replacements; if (url.scheme() == kHttpScheme) { replacements.SetSchemeStr(kHttpSuboriginScheme); } else { DCHECK(url.scheme() == kHttpsScheme); replacements.SetSchemeStr(kHttpsSuboriginScheme); } std::string new_host = suborigin + "." + url.host(); replacements.SetHostStr(new_host); return url.ReplaceComponents(replacements); } } // namespace Origin::Origin() : unique_(true), suborigin_(std::string()) {} Origin Origin::Create(const GURL& url) { return Origin(url); } Origin::Origin(const GURL& url) : unique_(true), suborigin_(std::string()) { if (!url.is_valid() || (!url.IsStandard() && !url.SchemeIsBlob())) return; if (url.SchemeIsFileSystem()) { tuple_ = SchemeHostPort(*url.inner_url()); } else if (url.SchemeIsBlob()) { // If we're dealing with a 'blob:' URL, https://url.spec.whatwg.org/#origin // defines the origin as the origin of the URL which results from parsing // the "path", which boils down to everything after the scheme. GURL's // 'GetContent()' gives us exactly that. tuple_ = SchemeHostPort(GURL(url.GetContent())); } else if (url.SchemeIsSuborigin()) { GURL::Replacements replacements; if (url.scheme() == kHttpSuboriginScheme) { replacements.SetSchemeStr(kHttpScheme); } else { DCHECK(url.scheme() == kHttpsSuboriginScheme); replacements.SetSchemeStr(kHttpsScheme); } std::string host = url.host(); size_t suborigin_end = host.find("."); bool no_dot = suborigin_end == std::string::npos; std::string new_host( no_dot ? "" : host.substr(suborigin_end + 1, url.host().length() - suborigin_end - 1)); replacements.SetHostStr(new_host); tuple_ = SchemeHostPort(url.ReplaceComponents(replacements)); bool invalid_suborigin = no_dot || suborigin_end == 0; if (invalid_suborigin || tuple_.IsInvalid()) return; suborigin_ = host.substr(0, suborigin_end); } else { tuple_ = SchemeHostPort(url); } unique_ = tuple_.IsInvalid(); } Origin::Origin(base::StringPiece scheme, base::StringPiece host, uint16_t port, base::StringPiece suborigin, SchemeHostPort::ConstructPolicy policy) : tuple_(scheme.as_string(), host.as_string(), port, policy) { unique_ = tuple_.IsInvalid(); suborigin_ = suborigin.as_string(); } Origin::Origin(std::string scheme, std::string host, uint16_t port, std::string suborigin, SchemeHostPort::ConstructPolicy policy) : tuple_(std::move(scheme), std::move(host), port, policy) { unique_ = tuple_.IsInvalid(); suborigin_ = std::move(suborigin); } Origin::~Origin() { } // static Origin Origin::UnsafelyCreateOriginWithoutNormalization( base::StringPiece scheme, base::StringPiece host, uint16_t port, base::StringPiece suborigin) { return Origin(scheme, host, port, suborigin, SchemeHostPort::CHECK_CANONICALIZATION); } Origin Origin::CreateFromNormalizedTupleWithSuborigin( std::string scheme, std::string host, uint16_t port, std::string suborigin) { return Origin(std::move(scheme), std::move(host), port, std::move(suborigin), SchemeHostPort::ALREADY_CANONICALIZED); } std::string Origin::Serialize() const { if (unique()) return "null"; if (scheme() == kFileScheme) return "file://"; if (!suborigin_.empty()) { GURL url_with_suborigin = AddSuboriginToUrl(tuple_.GetURL(), suborigin_); return SchemeHostPort(url_with_suborigin).Serialize(); } return tuple_.Serialize(); } Origin Origin::GetPhysicalOrigin() const { if (suborigin_.empty()) return *this; return Origin(tuple_.GetURL()); } GURL Origin::GetURL() const { if (unique()) return GURL(); if (scheme() == kFileScheme) return GURL("file:///"); GURL tuple_url(tuple_.GetURL()); if (!suborigin_.empty()) return AddSuboriginToUrl(tuple_url, suborigin_); return tuple_url; } bool Origin::IsSameOriginWith(const Origin& other) const { if (unique_ || other.unique_) return false; return tuple_.Equals(other.tuple_) && suborigin_ == other.suborigin_; } bool Origin::IsSamePhysicalOriginWith(const Origin& other) const { return GetPhysicalOrigin().IsSameOriginWith(other.GetPhysicalOrigin()); } bool Origin::DomainIs(base::StringPiece canonical_domain) const { return !unique_ && url::DomainIs(tuple_.host(), canonical_domain); } bool Origin::operator<(const Origin& other) const { return tuple_ < other.tuple_ || (tuple_.Equals(other.tuple_) && suborigin_ < other.suborigin_); } std::ostream& operator<<(std::ostream& out, const url::Origin& origin) { return out << origin.Serialize(); } bool IsSameOriginWith(const GURL& a, const GURL& b) { return Origin(a).IsSameOriginWith(Origin(b)); } bool IsSamePhysicalOriginWith(const GURL& a, const GURL& b) { return Origin(a).IsSamePhysicalOriginWith(Origin(b)); } } // namespace url