diff options
author | wolfbeast <mcwerewolf@wolfbeast.com> | 2020-04-26 12:56:46 +0200 |
---|---|---|
committer | wolfbeast <mcwerewolf@wolfbeast.com> | 2020-04-26 12:56:46 +0200 |
commit | 98fe8b0ccbea37c2681ad8c788baa91554871f4d (patch) | |
tree | 0e269a27661fea619ab07a533e0c1fa195c3c671 /dom/security | |
parent | e08a4ad1c8096fc8de64fac4f36cf0c569cb4420 (diff) | |
parent | 519030e688dd7075a7cd9f14dd6fb9e210b5a689 (diff) | |
download | UXP-RELBASE_20200426.tar UXP-RELBASE_20200426.tar.gz UXP-RELBASE_20200426.tar.lz UXP-RELBASE_20200426.tar.xz UXP-RELBASE_20200426.zip |
Merge branch 'redwood' into 28.9-platformRELBASE_20200426
Diffstat (limited to 'dom/security')
-rw-r--r-- | dom/security/SRICheck.h | 1 | ||||
-rw-r--r-- | dom/security/moz.build | 7 | ||||
-rw-r--r-- | dom/security/nsCSPParser.h | 1 | ||||
-rw-r--r-- | dom/security/nsCSPUtils.cpp | 27 | ||||
-rw-r--r-- | dom/security/nsContentSecurityManager.cpp | 10 | ||||
-rw-r--r-- | dom/security/nsMixedContentBlocker.cpp | 4 |
6 files changed, 47 insertions, 3 deletions
diff --git a/dom/security/SRICheck.h b/dom/security/SRICheck.h index 82929fe36..46de0532f 100644 --- a/dom/security/SRICheck.h +++ b/dom/security/SRICheck.h @@ -9,6 +9,7 @@ #include "nsCOMPtr.h" #include "nsICryptoHash.h" +#include "nsString.h" class nsIChannel; class nsIUnicharStreamLoader; diff --git a/dom/security/moz.build b/dom/security/moz.build index 00f7376a8..587e1e898 100644 --- a/dom/security/moz.build +++ b/dom/security/moz.build @@ -24,12 +24,15 @@ EXPORTS += [ ] UNIFIED_SOURCES += [ + 'nsCSPContext.cpp', + 'nsCSPUtils.cpp', +] + +SOURCES += [ 'ContentVerifier.cpp', 'nsContentSecurityManager.cpp', - 'nsCSPContext.cpp', 'nsCSPParser.cpp', 'nsCSPService.cpp', - 'nsCSPUtils.cpp', 'nsMixedContentBlocker.cpp', 'SRICheck.cpp', 'SRIMetadata.cpp', diff --git a/dom/security/nsCSPParser.h b/dom/security/nsCSPParser.h index d500a1c18..59f5d2d6d 100644 --- a/dom/security/nsCSPParser.h +++ b/dom/security/nsCSPParser.h @@ -7,6 +7,7 @@ #ifndef nsCSPParser_h___ #define nsCSPParser_h___ +#include "nsCSPContext.h" #include "nsCSPUtils.h" #include "nsIURI.h" #include "nsString.h" diff --git a/dom/security/nsCSPUtils.cpp b/dom/security/nsCSPUtils.cpp index 6d4f297d6..e9f218c14 100644 --- a/dom/security/nsCSPUtils.cpp +++ b/dom/security/nsCSPUtils.cpp @@ -17,6 +17,10 @@ #include "nsIURL.h" #include "nsReadableUtils.h" #include "nsSandboxFlags.h" +#include "nsString.h" +#include "mozilla/Logging.h" + +using namespace mozilla; #define DEFAULT_PORT -1 @@ -30,6 +34,29 @@ GetCspUtilsLog() #define CSPUTILSLOG(args) MOZ_LOG(GetCspUtilsLog(), mozilla::LogLevel::Debug, args) #define CSPUTILSLOGENABLED() MOZ_LOG_TEST(GetCspUtilsLog(), mozilla::LogLevel::Debug) +static const char16_t PERCENT_SIGN = '%'; + +static bool +isCharacterToken(char16_t aSymbol) +{ + return (aSymbol >= 'a' && aSymbol <= 'z') || + (aSymbol >= 'A' && aSymbol <= 'Z'); +} + +static bool +isNumberToken(char16_t aSymbol) +{ + return (aSymbol >= '0' && aSymbol <= '9'); +} + +static bool +isValidHexDig(char16_t aHexDig) +{ + return (isNumberToken(aHexDig) || + (aHexDig >= 'A' && aHexDig <= 'F') || + (aHexDig >= 'a' && aHexDig <= 'f')); +} + void CSP_PercentDecodeStr(const nsAString& aEncStr, nsAString& outDecStr) { diff --git a/dom/security/nsContentSecurityManager.cpp b/dom/security/nsContentSecurityManager.cpp index 5c6701992..298dc810e 100644 --- a/dom/security/nsContentSecurityManager.cpp +++ b/dom/security/nsContentSecurityManager.cpp @@ -5,16 +5,26 @@ #include "nsIStreamListener.h" #include "nsILoadInfo.h" #include "nsIOService.h" +#include "nsIProtocolHandler.h" #include "nsContentUtils.h" #include "nsCORSListenerProxy.h" #include "nsIStreamListener.h" +#include "nsIScriptError.h" #include "nsCDefaultURIFixup.h" #include "nsIURIFixup.h" #include "nsIImageLoadingContent.h" +#include "nsNetUtil.h" +#include "mozilla/ArrayUtils.h" +#include "nsString.h" +#include "nsMimeTypes.h" +#include "nsContentPolicyUtils.h" +#include "nsCharSeparatedTokenizer.h" #include "mozilla/dom/Element.h" #include "mozilla/dom/TabChild.h" +using namespace mozilla; + NS_IMPL_ISUPPORTS(nsContentSecurityManager, nsIContentSecurityManager, nsIChannelEventSink) diff --git a/dom/security/nsMixedContentBlocker.cpp b/dom/security/nsMixedContentBlocker.cpp index 543429aff..85fb06d8d 100644 --- a/dom/security/nsMixedContentBlocker.cpp +++ b/dom/security/nsMixedContentBlocker.cpp @@ -20,6 +20,8 @@ #include "nsIContentViewer.h" #include "nsIChannel.h" #include "nsIHttpChannel.h" +#include "nsIProtocolHandler.h" +#include "nsIInterfaceRequestorUtils.h" #include "nsIParentChannel.h" #include "mozilla/Preferences.h" #include "nsIScriptObjectPrincipal.h" @@ -33,12 +35,12 @@ #include "nsAsyncRedirectVerifyHelper.h" #include "mozilla/LoadInfo.h" #include "nsISiteSecurityService.h" +#include "nsNetUtil.h" #include "mozilla/Logging.h" #include "mozilla/dom/ContentChild.h" #include "mozilla/ipc/URIUtils.h" - using namespace mozilla; enum nsMixedContentBlockerMessageType { |