| ap@webkit.org | 213b4b0 | 2009-03-10 08:11:04 +0000 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2008 Apple Inc. All Rights Reserved. |
| 3 | * |
| 4 | * Redistribution and use in source and binary forms, with or without |
| 5 | * modification, are permitted provided that the following conditions |
| 6 | * are met: |
| 7 | * 1. Redistributions of source code must retain the above copyright |
| 8 | * notice, this list of conditions and the following disclaimer. |
| 9 | * 2. Redistributions in binary form must reproduce the above copyright |
| 10 | * notice, this list of conditions and the following disclaimer in the |
| 11 | * documentation and/or other materials provided with the distribution. |
| 12 | * |
| 13 | * THIS SOFTWARE IS PROVIDED BY APPLE COMPUTER, INC. ``AS IS'' AND ANY |
| 14 | * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
| 15 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR |
| 16 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE COMPUTER, INC. OR |
| 17 | * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, |
| 18 | * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, |
| 19 | * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR |
| 20 | * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY |
| 21 | * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| 22 | * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
| 23 | * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| 24 | * |
| 25 | */ |
| 26 | |
| tonyg@chromium.org | 938b60e | 2011-01-17 21:38:32 +0000 | [diff] [blame] | 27 | #ifndef CrossOriginAccessControl_h |
| 28 | #define CrossOriginAccessControl_h |
| 29 | |
| ap@apple.com | 5b2281c | 2013-04-11 16:32:24 +0000 | [diff] [blame] | 30 | #include "ResourceHandleTypes.h" |
| barraclough@apple.com | d218c2d | 2010-08-10 00:38:14 +0000 | [diff] [blame] | 31 | #include <wtf/Forward.h> |
| commit-queue@webkit.org | 9be43bd | 2012-01-16 18:42:03 +0000 | [diff] [blame] | 32 | #include <wtf/HashSet.h> |
| ap@apple.com | 5b2281c | 2013-04-11 16:32:24 +0000 | [diff] [blame] | 33 | #include <wtf/text/StringHash.h> |
| barraclough@apple.com | d218c2d | 2010-08-10 00:38:14 +0000 | [diff] [blame] | 34 | |
| ap@webkit.org | 213b4b0 | 2009-03-10 08:11:04 +0000 | [diff] [blame] | 35 | namespace WebCore { |
| 36 | |
| commit-queue@webkit.org | 9be43bd | 2012-01-16 18:42:03 +0000 | [diff] [blame] | 37 | typedef HashSet<String, CaseFoldingHash> HTTPHeaderSet; |
| 38 | |
| abarth@webkit.org | 9325a76 | 2011-05-20 20:58:34 +0000 | [diff] [blame] | 39 | class HTTPHeaderMap; |
| ap@apple.com | 5b2281c | 2013-04-11 16:32:24 +0000 | [diff] [blame] | 40 | class ResourceRequest; |
| abarth@webkit.org | 9325a76 | 2011-05-20 20:58:34 +0000 | [diff] [blame] | 41 | class ResourceResponse; |
| 42 | class SecurityOrigin; |
| ap@webkit.org | 213b4b0 | 2009-03-10 08:11:04 +0000 | [diff] [blame] | 43 | |
| abarth@webkit.org | 9325a76 | 2011-05-20 20:58:34 +0000 | [diff] [blame] | 44 | bool isSimpleCrossOriginAccessRequest(const String& method, const HTTPHeaderMap&); |
| 45 | bool isOnAccessControlSimpleRequestMethodWhitelist(const String&); |
| 46 | bool isOnAccessControlSimpleRequestHeaderWhitelist(const String& name, const String& value); |
| 47 | bool isOnAccessControlResponseHeaderWhitelist(const String&); |
| ap@webkit.org | 213b4b0 | 2009-03-10 08:11:04 +0000 | [diff] [blame] | 48 | |
| japhet@chromium.org | 40d9a46 | 2011-08-26 17:41:25 +0000 | [diff] [blame] | 49 | void updateRequestForAccessControl(ResourceRequest&, SecurityOrigin*, StoredCredentials); |
| bbudge@chromium.org | 9fb9052 | 2012-04-09 17:17:25 +0000 | [diff] [blame] | 50 | ResourceRequest createAccessControlPreflightRequest(const ResourceRequest&, SecurityOrigin*); |
| abarth@webkit.org | 9325a76 | 2011-05-20 20:58:34 +0000 | [diff] [blame] | 51 | |
| japhet@chromium.org | 40d9a46 | 2011-08-26 17:41:25 +0000 | [diff] [blame] | 52 | bool passesAccessControlCheck(const ResourceResponse&, StoredCredentials, SecurityOrigin*, String& errorDescription); |
| commit-queue@webkit.org | 9be43bd | 2012-01-16 18:42:03 +0000 | [diff] [blame] | 53 | void parseAccessControlExposeHeadersAllowList(const String& headerValue, HTTPHeaderSet&); |
| ap@webkit.org | 213b4b0 | 2009-03-10 08:11:04 +0000 | [diff] [blame] | 54 | |
| 55 | } // namespace WebCore |
| tonyg@chromium.org | 938b60e | 2011-01-17 21:38:32 +0000 | [diff] [blame] | 56 | |
| 57 | #endif // CrossOriginAccessControl_h |
