1 /* 2 * Copyright (C) 2008 Apple Inc. All Rights Reserved. 3 * 4 * Redistribution and use in source and binary forms, with or without 5 * modification, are permitted provided that the following conditions 6 * are met: 7 * 1. Redistributions of source code must retain the above copyright 8 * notice, this list of conditions and the following disclaimer. 9 * 2. Redistributions in binary form must reproduce the above copyright 10 * notice, this list of conditions and the following disclaimer in the 11 * documentation and/or other materials provided with the distribution. 12 * 13 * THIS SOFTWARE IS PROVIDED BY APPLE COMPUTER, INC. ``AS IS'' AND ANY 14 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 15 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 16 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE COMPUTER, INC. OR 17 * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, 18 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, 19 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 20 * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY 21 * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 22 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 23 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 24 * 25 */ 26 27 #ifndef CrossOriginPreflightResultCache_h 28 #define CrossOriginPreflightResultCache_h 29 30 #include "KURLHash.h" 31 #include <wtf/HashMap.h> 32 #include <wtf/HashSet.h> 33 #include <wtf/PassOwnPtr.h> 34 #include <wtf/text/StringHash.h> 35 36 namespace WebCore { 37 38 class HTTPHeaderMap; 39 class ResourceResponse; 40 41 class CrossOriginPreflightResultCacheItem { 42 WTF_MAKE_NONCOPYABLE(CrossOriginPreflightResultCacheItem); WTF_MAKE_FAST_ALLOCATED; 43 public: CrossOriginPreflightResultCacheItem(bool credentials)44 CrossOriginPreflightResultCacheItem(bool credentials) 45 : m_absoluteExpiryTime(0) 46 , m_credentials(credentials) 47 { 48 } 49 50 bool parse(const ResourceResponse&, String& errorDescription); 51 bool allowsCrossOriginMethod(const String&, String& errorDescription) const; 52 bool allowsCrossOriginHeaders(const HTTPHeaderMap&, String& errorDescription) const; 53 bool allowsRequest(bool includeCredentials, const String& method, const HTTPHeaderMap& requestHeaders) const; 54 55 private: 56 typedef HashSet<String, CaseFoldingHash> HeadersSet; 57 58 // FIXME: A better solution to holding onto the absolute expiration time might be 59 // to start a timer for the expiration delta that removes this from the cache when 60 // it fires. 61 double m_absoluteExpiryTime; 62 bool m_credentials; 63 HashSet<String> m_methods; 64 HeadersSet m_headers; 65 }; 66 67 class CrossOriginPreflightResultCache { 68 WTF_MAKE_NONCOPYABLE(CrossOriginPreflightResultCache); WTF_MAKE_FAST_ALLOCATED; 69 public: 70 static CrossOriginPreflightResultCache& shared(); 71 72 void appendEntry(const String& origin, const KURL&, PassOwnPtr<CrossOriginPreflightResultCacheItem>); 73 bool canSkipPreflight(const String& origin, const KURL&, bool includeCredentials, const String& method, const HTTPHeaderMap& requestHeaders); 74 75 void empty(); 76 77 private: CrossOriginPreflightResultCache()78 CrossOriginPreflightResultCache() { } 79 80 typedef HashMap<std::pair<String, KURL>, CrossOriginPreflightResultCacheItem*> CrossOriginPreflightResultHashMap; 81 82 CrossOriginPreflightResultHashMap m_preflightHashMap; 83 }; 84 85 } // namespace WebCore 86 87 #endif 88