1 // Copyright 2014 The Chromium Authors. All rights reserved. 2 // Use of this source code is governed by a BSD-style license that can be 3 // found in the LICENSE file. 4 5 #include "components/autofill/core/common/autofill_data_validation.h" 6 7 #include "components/autofill/core/common/form_data.h" 8 #include "components/autofill/core/common/form_field_data.h" 9 #include "components/autofill/core/common/password_form_fill_data.h" 10 #include "url/gurl.h" 11 12 namespace autofill { 13 14 const size_t kMaxDataLength = 1024; 15 16 // Allow enough space for all countries (roughly 300 distinct values) and all 17 // timezones (roughly 400 distinct values), plus some extra wiggle room. 18 const size_t kMaxListSize = 512; 19 IsValidString(const std::string & str)20bool IsValidString(const std::string& str) { 21 return str.size() <= kMaxDataLength; 22 } 23 IsValidString16(const base::string16 & str)24bool IsValidString16(const base::string16& str) { 25 return str.size() <= kMaxDataLength; 26 } 27 IsValidGURL(const GURL & url)28bool IsValidGURL(const GURL& url) { 29 return url.is_empty() || url.is_valid(); 30 } 31 IsValidFormFieldData(const FormFieldData & field)32bool IsValidFormFieldData(const FormFieldData& field) { 33 return 34 IsValidString16(field.label) && 35 IsValidString16(field.name) && 36 IsValidString16(field.value) && 37 IsValidString(field.form_control_type) && 38 IsValidString(field.autocomplete_attribute) && 39 IsValidString16Vector(field.option_values) && 40 IsValidString16Vector(field.option_contents); 41 } 42 IsValidFormData(const FormData & form)43bool IsValidFormData(const FormData& form) { 44 if (!IsValidString16(form.name) || 45 !IsValidString16(form.method) || 46 !IsValidGURL(form.origin) || 47 !IsValidGURL(form.action)) 48 return false; 49 50 if (form.fields.size() > kMaxListSize) 51 return false; 52 53 for (std::vector<FormFieldData>::const_iterator it = form.fields.begin(); 54 it != form.fields.end(); ++it) { 55 if (!IsValidFormFieldData(*it)) 56 return false; 57 } 58 59 return true; 60 } 61 IsValidPasswordFormFillData(const PasswordFormFillData & form)62bool IsValidPasswordFormFillData(const PasswordFormFillData& form) { 63 if (!IsValidFormData(form.basic_data) || 64 !IsValidString(form.preferred_realm)) 65 return false; 66 67 for (PasswordFormFillData::LoginCollection::const_iterator it = 68 form.additional_logins.begin(); 69 it != form.additional_logins.end(); ++it) { 70 if (!IsValidString16(it->first) || 71 !IsValidString16(it->second.password) || 72 !IsValidString(it->second.realm)) 73 return false; 74 } 75 76 for (PasswordFormFillData::UsernamesCollection::const_iterator it = 77 form.other_possible_usernames.begin(); 78 it != form.other_possible_usernames.end(); ++it) { 79 if (!IsValidString16(it->first.username) || 80 !IsValidString16(it->first.password) || 81 !IsValidString(it->first.realm) || 82 !IsValidString16Vector(it->second)) 83 return false; 84 } 85 86 return true; 87 } 88 IsValidString16Vector(const std::vector<base::string16> & v)89bool IsValidString16Vector(const std::vector<base::string16>& v) { 90 if (v.size() > kMaxListSize) 91 return false; 92 93 for (std::vector<base::string16>::const_iterator it = v.begin(); 94 it != v.end(); ++it) { 95 if (!IsValidString16(*it)) 96 return false; 97 } 98 99 return true; 100 } 101 IsValidFormDataVector(const std::vector<FormData> & v)102bool IsValidFormDataVector(const std::vector<FormData>& v) { 103 if (v.size() > kMaxListSize) 104 return false; 105 106 for (std::vector<FormData>::const_iterator it = v.begin(); it != v.end(); 107 ++it) { 108 if (!IsValidFormData(*it)) 109 return false; 110 } 111 112 return true; 113 } 114 115 } // namespace autofill 116