Stowage/ladybird
2
0
Fork 0
mirror of https://github.com/LadybirdBrowser/ladybird.git synced 2025-10-20 08:03:21 +00:00
Code Issues Projects Releases Packages Wiki Activity
ladybird/Libraries/LibWeb/HTML/PolicyContainers.cpp

70 lines
2.2 KiB
C++
Raw Normal View History

LibWeb: Add facilities to serialize EnvironmentSettingsObjects This will be used to transfer information about the parent context to DedicatedWorkers and future out-of-process Worker/Worklet implementations for fetching purposes. In order to properly check same-origin and other policies, we need to know more about the outside settings than we were previously passing to the WebWorker process.
2024-03-05 09:29:14 -07:00
/*
* Copyright (c) 2024, Andrew Kaster <akaster@serenityos.org>
LibWeb: Make PolicyContainer GC allocated This is required to store Content Security Policies, as their Directives are implemented as subclasses with overridden virtual functions. Thus, they cannot be stored as generic Directive classes, as it'll lose the ability to call overridden functions when they are copied.
2024-11-25 14:30:12 +00:00
* Copyright (c) 2025, Luke Wilde <luke@ladybird.org>
LibWeb: Add facilities to serialize EnvironmentSettingsObjects This will be used to transfer information about the parent context to DedicatedWorkers and future out-of-process Worker/Worklet implementations for fetching purposes. In order to properly check same-origin and other policies, we need to know more about the outside settings than we were previously passing to the WebWorker process.
2024-03-05 09:29:14 -07:00
*
* SPDX-License-Identifier: BSD-2-Clause
*/
LibWeb: Make PolicyContainer GC allocated This is required to store Content Security Policies, as their Directives are implemented as subclasses with overridden virtual functions. Thus, they cannot be stored as generic Directive classes, as it'll lose the ability to call overridden functions when they are copied.
2024-11-25 14:30:12 +00:00
#include <LibJS/Runtime/Realm.h>
#include <LibURL/URL.h>
#include <LibWeb/Fetch/Infrastructure/URL.h>
LibWeb: Add facilities to serialize EnvironmentSettingsObjects This will be used to transfer information about the parent context to DedicatedWorkers and future out-of-process Worker/Worklet implementations for fetching purposes. In order to properly check same-origin and other policies, we need to know more about the outside settings than we were previously passing to the WebWorker process.
2024-03-05 09:29:14 -07:00
#include <LibWeb/HTML/PolicyContainers.h>
LibWeb: Make PolicyContainer GC allocated This is required to store Content Security Policies, as their Directives are implemented as subclasses with overridden virtual functions. Thus, they cannot be stored as generic Directive classes, as it'll lose the ability to call overridden functions when they are copied.
2024-11-25 14:30:12 +00:00
#include <LibWeb/HTML/SerializedPolicyContainer.h>
LibWeb: Add facilities to serialize EnvironmentSettingsObjects This will be used to transfer information about the parent context to DedicatedWorkers and future out-of-process Worker/Worklet implementations for fetching purposes. In order to properly check same-origin and other policies, we need to know more about the outside settings than we were previously passing to the WebWorker process.
2024-03-05 09:29:14 -07:00
LibWeb: Make PolicyContainer GC allocated This is required to store Content Security Policies, as their Directives are implemented as subclasses with overridden virtual functions. Thus, they cannot be stored as generic Directive classes, as it'll lose the ability to call overridden functions when they are copied.
2024-11-25 14:30:12 +00:00
namespace Web::HTML {
LibWeb: Add facilities to serialize EnvironmentSettingsObjects This will be used to transfer information about the parent context to DedicatedWorkers and future out-of-process Worker/Worklet implementations for fetching purposes. In order to properly check same-origin and other policies, we need to know more about the outside settings than we were previously passing to the WebWorker process.
2024-03-05 09:29:14 -07:00
LibWeb: Make PolicyContainer GC allocated This is required to store Content Security Policies, as their Directives are implemented as subclasses with overridden virtual functions. Thus, they cannot be stored as generic Directive classes, as it'll lose the ability to call overridden functions when they are copied.
2024-11-25 14:30:12 +00:00
GC_DEFINE_ALLOCATOR(PolicyContainer);
PolicyContainer::PolicyContainer(JS::Realm&)
{
}
// https://html.spec.whatwg.org/multipage/browsers.html#requires-storing-the-policy-container-in-history
bool url_requires_storing_the_policy_container_in_history(URL::URL const& url)
LibWeb: Add facilities to serialize EnvironmentSettingsObjects This will be used to transfer information about the parent context to DedicatedWorkers and future out-of-process Worker/Worklet implementations for fetching purposes. In order to properly check same-origin and other policies, we need to know more about the outside settings than we were previously passing to the WebWorker process.
2024-03-05 09:29:14 -07:00
{
LibWeb: Make PolicyContainer GC allocated This is required to store Content Security Policies, as their Directives are implemented as subclasses with overridden virtual functions. Thus, they cannot be stored as generic Directive classes, as it'll lose the ability to call overridden functions when they are copied.
2024-11-25 14:30:12 +00:00
// 1. If url's scheme is "blob", then return false.
if (url.scheme() == "blob"sv)
return false;
LibWeb: Add facilities to serialize EnvironmentSettingsObjects This will be used to transfer information about the parent context to DedicatedWorkers and future out-of-process Worker/Worklet implementations for fetching purposes. In order to properly check same-origin and other policies, we need to know more about the outside settings than we were previously passing to the WebWorker process.
2024-03-05 09:29:14 -07:00
LibWeb: Make PolicyContainer GC allocated This is required to store Content Security Policies, as their Directives are implemented as subclasses with overridden virtual functions. Thus, they cannot be stored as generic Directive classes, as it'll lose the ability to call overridden functions when they are copied.
2024-11-25 14:30:12 +00:00
// 2. If url is local, then return true.
// 3. Return false.
return Fetch::Infrastructure::is_local_url(url);
}
GC::Ref<PolicyContainer> create_a_policy_container_from_serialized_policy_container(JS::Realm& realm, SerializedPolicyContainer const& serialized_policy_container)
{
GC::Ref<PolicyContainer> result = realm.create<PolicyContainer>(realm);
result->embedder_policy = serialized_policy_container.embedder_policy;
result->referrer_policy = serialized_policy_container.referrer_policy;
return result;
LibWeb: Add facilities to serialize EnvironmentSettingsObjects This will be used to transfer information about the parent context to DedicatedWorkers and future out-of-process Worker/Worklet implementations for fetching purposes. In order to properly check same-origin and other policies, we need to know more about the outside settings than we were previously passing to the WebWorker process.
2024-03-05 09:29:14 -07:00
}
LibWeb: Make PolicyContainer GC allocated This is required to store Content Security Policies, as their Directives are implemented as subclasses with overridden virtual functions. Thus, they cannot be stored as generic Directive classes, as it'll lose the ability to call overridden functions when they are copied.
2024-11-25 14:30:12 +00:00
// https://html.spec.whatwg.org/multipage/browsers.html#clone-a-policy-container
GC::Ref<PolicyContainer> PolicyContainer::clone(JS::Realm& realm) const
LibWeb: Add facilities to serialize EnvironmentSettingsObjects This will be used to transfer information about the parent context to DedicatedWorkers and future out-of-process Worker/Worklet implementations for fetching purposes. In order to properly check same-origin and other policies, we need to know more about the outside settings than we were previously passing to the WebWorker process.
2024-03-05 09:29:14 -07:00
{
LibWeb: Make PolicyContainer GC allocated This is required to store Content Security Policies, as their Directives are implemented as subclasses with overridden virtual functions. Thus, they cannot be stored as generic Directive classes, as it'll lose the ability to call overridden functions when they are copied.
2024-11-25 14:30:12 +00:00
// 1. Let clone be a new policy container.
auto clone = realm.create<PolicyContainer>(realm);
LibWeb: Add facilities to serialize EnvironmentSettingsObjects This will be used to transfer information about the parent context to DedicatedWorkers and future out-of-process Worker/Worklet implementations for fetching purposes. In order to properly check same-origin and other policies, we need to know more about the outside settings than we were previously passing to the WebWorker process.
2024-03-05 09:29:14 -07:00
LibWeb: Make PolicyContainer GC allocated This is required to store Content Security Policies, as their Directives are implemented as subclasses with overridden virtual functions. Thus, they cannot be stored as generic Directive classes, as it'll lose the ability to call overridden functions when they are copied.
2024-11-25 14:30:12 +00:00
// FIXME: 2. For each policy in policyContainer's CSP list, append a copy of policy into clone's CSP list.
// 3. Set clone's embedder policy to a copy of policyContainer's embedder policy.
// NOTE: This is a C++ copy.
clone->embedder_policy = embedder_policy;
// 4. Set clone's referrer policy to policyContainer's referrer policy.
clone->referrer_policy = referrer_policy;
// 5. Return clone.
return clone;
}
SerializedPolicyContainer PolicyContainer::serialize() const
{
return SerializedPolicyContainer {
.embedder_policy = embedder_policy,
.referrer_policy = referrer_policy,
};
LibWeb: Add facilities to serialize EnvironmentSettingsObjects This will be used to transfer information about the parent context to DedicatedWorkers and future out-of-process Worker/Worklet implementations for fetching purposes. In order to properly check same-origin and other policies, we need to know more about the outside settings than we were previously passing to the WebWorker process.
2024-03-05 09:29:14 -07:00
}
}
Reference in a new issue Copy permalink