Skip to content
  • bbudge@chromium.org's avatar
    Perform HTTP method and header validation in AssociatedURLLoader for · a9719474
    bbudge@chromium.org authored
    requests coming from untrusted code (eg. Native Client in Chrome). Use
    the same code as XMLHttpRequest to reduce code duplication and have
    behavior identical to XHR in Javascript. Add an 'untrustedHTTP' option
    to WebURLLoaderOptions, which AssociatedURLLoader can use to determine
    if it should check the request method and headers.
    https://bugs.webkit.org/show_bug.cgi?id=67655
    
    Reviewed by Darin Fisher.
    
    * public/WebURLLoaderOptions.h:
    (WebKit::WebURLLoaderOptions::WebURLLoaderOptions):
    * src/AssociatedURLLoader.cpp:
    (WebKit::AssociatedURLLoader::ClientAdapter::setDelayedError):
    (WebKit::AssociatedURLLoader::loadAsynchronously):
    * tests/AssociatedURLLoaderTest.cpp:
    (WebKit::AssociatedURLLoaderTest::CheckMethodFails):
    (WebKit::AssociatedURLLoaderTest::CheckHeaderFails):
    (WebKit::AssociatedURLLoaderTest::CheckFails):
    (WebKit::TEST_F):
    
    
    git-svn-id: http://svn.webkit.org/repository/webkit/trunk@95490 268f45cc-cd09-0410-ab3c-d52691b4dbfc
    a9719474