#include "config.h"
#include "PingLoader.h"
#include "ContentSecurityPolicy.h"
#include "Document.h"
#include "FormData.h"
#include "Frame.h"
#include "FrameLoader.h"
#include "FrameLoaderClient.h"
#include "HTTPHeaderNames.h"
#include "InspectorInstrumentation.h"
#include "LoaderStrategy.h"
#include "Page.h"
#include "PlatformStrategies.h"
#include "ProgressTracker.h"
#include "ResourceHandle.h"
#include "ResourceLoadInfo.h"
#include "ResourceRequest.h"
#include "ResourceResponse.h"
#include "SecurityOrigin.h"
#include "SecurityPolicy.h"
#include "UserContentController.h"
#include <wtf/text/CString.h>
namespace WebCore {
#if ENABLE(CONTENT_EXTENSIONS)
static ContentExtensions::BlockedStatus processContentExtensionRulesForLoad(const Frame& frame, const URL& url, ResourceType resourceType)
{
if (DocumentLoader* documentLoader = frame.loader().documentLoader()) {
if (Page* page = frame.page())
return page->userContentProvider().processContentExtensionRulesForLoad(url, resourceType, *documentLoader);
}
return { };
}
#endif
void PingLoader::loadImage(Frame& frame, const URL& url)
{
if (!frame.document()->securityOrigin()->canDisplay(url)) {
FrameLoader::reportLocalLoadFailed(&frame, url);
return;
}
ResourceRequest request(url);
#if ENABLE(CONTENT_EXTENSIONS)
auto blockedStatus = processContentExtensionRulesForLoad(frame, url, ResourceType::Image);
applyBlockedStatusToRequest(blockedStatus, request);
if (blockedStatus.blockedLoad)
return;
#endif
if (Document* document = frame.document())
document->contentSecurityPolicy()->upgradeInsecureRequestIfNeeded(request, ContentSecurityPolicy::InsecureRequestType::Load);
request.setHTTPHeaderField(HTTPHeaderName::CacheControl, "max-age=0");
String referrer = SecurityPolicy::generateReferrerHeader(frame.document()->referrerPolicy(), request.url(), frame.loader().outgoingReferrer());
if (!referrer.isEmpty())
request.setHTTPReferrer(referrer);
frame.loader().addExtraFieldsToSubresourceRequest(request);
startPingLoad(frame, request, ShouldFollowRedirects::Yes);
}
void PingLoader::sendPing(Frame& frame, const URL& pingURL, const URL& destinationURL)
{
if (!pingURL.protocolIsInHTTPFamily())
return;
ResourceRequest request(pingURL);
#if ENABLE(CONTENT_EXTENSIONS)
auto blockedStatus = processContentExtensionRulesForLoad(frame, pingURL, ResourceType::Raw);
applyBlockedStatusToRequest(blockedStatus, request);
if (blockedStatus.blockedLoad)
return;
#endif
frame.document()->contentSecurityPolicy()->upgradeInsecureRequestIfNeeded(request, ContentSecurityPolicy::InsecureRequestType::Load);
request.setHTTPMethod("POST");
request.setHTTPContentType("text/ping");
request.setHTTPBody(FormData::create("PING"));
request.setHTTPHeaderField(HTTPHeaderName::CacheControl, "max-age=0");
frame.loader().addExtraFieldsToSubresourceRequest(request);
SecurityOrigin* sourceOrigin = frame.document()->securityOrigin();
Ref<SecurityOrigin> pingOrigin(SecurityOrigin::create(pingURL));
FrameLoader::addHTTPOriginIfNeeded(request, sourceOrigin->toString());
request.setHTTPHeaderField(HTTPHeaderName::PingTo, destinationURL);
if (!SecurityPolicy::shouldHideReferrer(pingURL, frame.loader().outgoingReferrer())) {
request.setHTTPHeaderField(HTTPHeaderName::PingFrom, frame.document()->url());
if (!sourceOrigin->isSameSchemeHostPort(&pingOrigin.get())) {
String referrer = SecurityPolicy::generateReferrerHeader(frame.document()->referrerPolicy(), pingURL, frame.loader().outgoingReferrer());
if (!referrer.isEmpty())
request.setHTTPReferrer(referrer);
}
}
startPingLoad(frame, request, ShouldFollowRedirects::Yes);
}
void PingLoader::sendViolationReport(Frame& frame, const URL& reportURL, RefPtr<FormData>&& report, ViolationReportType reportType)
{
ResourceRequest request(reportURL);
#if ENABLE(CONTENT_EXTENSIONS)
auto blockedStatus = processContentExtensionRulesForLoad(frame, reportURL, ResourceType::Raw);
applyBlockedStatusToRequest(blockedStatus, request);
if (blockedStatus.blockedLoad)
return;
#endif
if (Document* document = frame.document())
document->contentSecurityPolicy()->upgradeInsecureRequestIfNeeded(request, ContentSecurityPolicy::InsecureRequestType::Load);
request.setHTTPMethod(ASCIILiteral("POST"));
request.setHTTPBody(WTFMove(report));
switch (reportType) {
case ViolationReportType::ContentSecurityPolicy:
request.setHTTPContentType(ASCIILiteral("application/csp-report"));
break;
case ViolationReportType::XSSAuditor:
request.setHTTPContentType(ASCIILiteral("application/json"));
break;
}
bool removeCookies = true;
if (Document* document = frame.document()) {
if (SecurityOrigin* securityOrigin = document->securityOrigin()) {
if (securityOrigin->isSameSchemeHostPort(SecurityOrigin::create(reportURL).ptr()))
removeCookies = false;
}
}
if (removeCookies)
request.setAllowCookies(false);
frame.loader().addExtraFieldsToSubresourceRequest(request);
String referrer = SecurityPolicy::generateReferrerHeader(frame.document()->referrerPolicy(), reportURL, frame.loader().outgoingReferrer());
if (!referrer.isEmpty())
request.setHTTPReferrer(referrer);
startPingLoad(frame, request, ShouldFollowRedirects::No);
}
void PingLoader::startPingLoad(Frame& frame, ResourceRequest& request, ShouldFollowRedirects shouldFollowRedirects)
{
unsigned long identifier = frame.page()->progress().createUniqueIdentifier();
bool shouldUseCredentialStorage = frame.loader().client().shouldUseCredentialStorage(frame.loader().activeDocumentLoader(), identifier);
InspectorInstrumentation::continueAfterPingLoader(frame, identifier, frame.loader().activeDocumentLoader(), request, ResourceResponse());
platformStrategies()->loaderStrategy()->createPingHandle(frame.loader().networkingContext(), request, shouldUseCredentialStorage, shouldFollowRedirects == ShouldFollowRedirects::Yes);
}
}