• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4 
5 #ifndef NET_HTTP_HTTP_RESPONSE_HEADERS_H_
6 #define NET_HTTP_HTTP_RESPONSE_HEADERS_H_
7 
8 #include <string>
9 #include <vector>
10 
11 #include "base/basictypes.h"
12 #include "base/containers/hash_tables.h"
13 #include "base/memory/ref_counted.h"
14 #include "base/strings/string_piece.h"
15 #include "net/base/net_export.h"
16 #include "net/base/net_log.h"
17 #include "net/http/http_version.h"
18 
19 class Pickle;
20 class PickleIterator;
21 
22 namespace base {
23 class Time;
24 class TimeDelta;
25 }
26 
27 namespace net {
28 
29 class HttpByteRange;
30 
31 // HttpResponseHeaders: parses and holds HTTP response headers.
32 class NET_EXPORT HttpResponseHeaders
33     : public base::RefCountedThreadSafe<HttpResponseHeaders> {
34  public:
35   // Persist options.
36   typedef int PersistOptions;
37   static const PersistOptions PERSIST_RAW = -1;  // Raw, unparsed headers.
38   static const PersistOptions PERSIST_ALL = 0;  // Parsed headers.
39   static const PersistOptions PERSIST_SANS_COOKIES = 1 << 0;
40   static const PersistOptions PERSIST_SANS_CHALLENGES = 1 << 1;
41   static const PersistOptions PERSIST_SANS_HOP_BY_HOP = 1 << 2;
42   static const PersistOptions PERSIST_SANS_NON_CACHEABLE = 1 << 3;
43   static const PersistOptions PERSIST_SANS_RANGES = 1 << 4;
44   static const PersistOptions PERSIST_SANS_SECURITY_STATE = 1 << 5;
45 
46   static const char kContentRange[];
47 
48   // Parses the given raw_headers.  raw_headers should be formatted thus:
49   // includes the http status response line, each line is \0-terminated, and
50   // it's terminated by an empty line (ie, 2 \0s in a row).
51   // (Note that line continuations should have already been joined;
52   // see HttpUtil::AssembleRawHeaders)
53   //
54   // HttpResponseHeaders does not perform any encoding changes on the input.
55   //
56   explicit HttpResponseHeaders(const std::string& raw_headers);
57 
58   // Initializes from the representation stored in the given pickle.  The data
59   // for this object is found relative to the given pickle_iter, which should
60   // be passed to the pickle's various Read* methods.
61   HttpResponseHeaders(const Pickle& pickle, PickleIterator* pickle_iter);
62 
63   // Appends a representation of this object to the given pickle.
64   // The options argument can be a combination of PersistOptions.
65   void Persist(Pickle* pickle, PersistOptions options);
66 
67   // Performs header merging as described in 13.5.3 of RFC 2616.
68   void Update(const HttpResponseHeaders& new_headers);
69 
70   // Removes all instances of a particular header.
71   void RemoveHeader(const std::string& name);
72 
73   // Removes a particular header line. The header name is compared
74   // case-insensitively.
75   void RemoveHeaderLine(const std::string& name, const std::string& value);
76 
77   // Adds a particular header.  |header| has to be a single header without any
78   // EOL termination, just [<header-name>: <header-values>]
79   // If a header with the same name is already stored, the two headers are not
80   // merged together by this method; the one provided is simply put at the
81   // end of the list.
82   void AddHeader(const std::string& header);
83 
84   // Replaces the current status line with the provided one (|new_status| should
85   // not have any EOL).
86   void ReplaceStatusLine(const std::string& new_status);
87 
88   // Updates headers (Content-Length and Content-Range) in the |headers| to
89   // include the right content length and range for |byte_range|.  This also
90   // updates HTTP status line if |replace_status_line| is true.
91   // |byte_range| must have a valid, bounded range (i.e. coming from a valid
92   // response or should be usable for a response).
93   void UpdateWithNewRange(const HttpByteRange& byte_range,
94                           int64 resource_size,
95                           bool replace_status_line);
96 
97   // Creates a normalized header string.  The output will be formatted exactly
98   // like so:
99   //     HTTP/<version> <status_code> <status_text>\n
100   //     [<header-name>: <header-values>\n]*
101   // meaning, each line is \n-terminated, and there is no extra whitespace
102   // beyond the single space separators shown (of course, values can contain
103   // whitespace within them).  If a given header-name appears more than once
104   // in the set of headers, they are combined into a single line like so:
105   //     <header-name>: <header-value1>, <header-value2>, ...<header-valueN>\n
106   //
107   // DANGER: For some headers (e.g., "Set-Cookie"), the normalized form can be
108   // a lossy format.  This is due to the fact that some servers generate
109   // Set-Cookie headers that contain unquoted commas (usually as part of the
110   // value of an "expires" attribute).  So, use this function with caution.  Do
111   // not expect to be able to re-parse Set-Cookie headers from this output.
112   //
113   // NOTE: Do not make any assumptions about the encoding of this output
114   // string.  It may be non-ASCII, and the encoding used by the server is not
115   // necessarily known to us.  Do not assume that this output is UTF-8!
116   //
117   // TODO(darin): remove this method
118   //
119   void GetNormalizedHeaders(std::string* output) const;
120 
121   // Fetch the "normalized" value of a single header, where all values for the
122   // header name are separated by commas.  See the GetNormalizedHeaders for
123   // format details.  Returns false if this header wasn't found.
124   //
125   // NOTE: Do not make any assumptions about the encoding of this output
126   // string.  It may be non-ASCII, and the encoding used by the server is not
127   // necessarily known to us.  Do not assume that this output is UTF-8!
128   //
129   // TODO(darin): remove this method
130   //
131   bool GetNormalizedHeader(const std::string& name, std::string* value) const;
132 
133   // Returns the normalized status line.  For HTTP/0.9 responses (i.e.,
134   // responses that lack a status line), this is the manufactured string
135   // "HTTP/0.9 200 OK".
136   std::string GetStatusLine() const;
137 
138   // Get the HTTP version of the normalized status line.
GetHttpVersion()139   HttpVersion GetHttpVersion() const {
140     return http_version_;
141   }
142 
143   // Get the HTTP version determined while parsing; or (0,0) if parsing failed
GetParsedHttpVersion()144   HttpVersion GetParsedHttpVersion() const {
145     return parsed_http_version_;
146   }
147 
148   // Get the HTTP status text of the normalized status line.
149   std::string GetStatusText() const;
150 
151   // Enumerate the "lines" of the response headers.  This skips over the status
152   // line.  Use GetStatusLine if you are interested in that.  Note that this
153   // method returns the un-coalesced response header lines, so if a response
154   // header appears on multiple lines, then it will appear multiple times in
155   // this enumeration (in the order the header lines were received from the
156   // server).  Also, a given header might have an empty value.  Initialize a
157   // 'void*' variable to NULL and pass it by address to EnumerateHeaderLines.
158   // Call EnumerateHeaderLines repeatedly until it returns false.  The
159   // out-params 'name' and 'value' are set upon success.
160   bool EnumerateHeaderLines(void** iter,
161                             std::string* name,
162                             std::string* value) const;
163 
164   // Enumerate the values of the specified header.   If you are only interested
165   // in the first header, then you can pass NULL for the 'iter' parameter.
166   // Otherwise, to iterate across all values for the specified header,
167   // initialize a 'void*' variable to NULL and pass it by address to
168   // EnumerateHeader. Note that a header might have an empty value. Call
169   // EnumerateHeader repeatedly until it returns false.
170   bool EnumerateHeader(void** iter,
171                        const base::StringPiece& name,
172                        std::string* value) const;
173 
174   // Returns true if the response contains the specified header-value pair.
175   // Both name and value are compared case insensitively.
176   bool HasHeaderValue(const base::StringPiece& name,
177                       const base::StringPiece& value) const;
178 
179   // Returns true if the response contains the specified header.
180   // The name is compared case insensitively.
181   bool HasHeader(const base::StringPiece& name) const;
182 
183   // Get the mime type and charset values in lower case form from the headers.
184   // Empty strings are returned if the values are not present.
185   void GetMimeTypeAndCharset(std::string* mime_type,
186                              std::string* charset) const;
187 
188   // Get the mime type in lower case from the headers.  If there's no mime
189   // type, returns false.
190   bool GetMimeType(std::string* mime_type) const;
191 
192   // Get the charset in lower case from the headers.  If there's no charset,
193   // returns false.
194   bool GetCharset(std::string* charset) const;
195 
196   // Returns true if this response corresponds to a redirect.  The target
197   // location of the redirect is optionally returned if location is non-null.
198   bool IsRedirect(std::string* location) const;
199 
200   // Returns true if the HTTP response code passed in corresponds to a
201   // redirect.
202   static bool IsRedirectResponseCode(int response_code);
203 
204   // Returns true if the response cannot be reused without validation.  The
205   // result is relative to the current_time parameter, which is a parameter to
206   // support unit testing.  The request_time parameter indicates the time at
207   // which the request was made that resulted in this response, which was
208   // received at response_time.
209   bool RequiresValidation(const base::Time& request_time,
210                           const base::Time& response_time,
211                           const base::Time& current_time) const;
212 
213   // Returns the amount of time the server claims the response is fresh from
214   // the time the response was generated.  See section 13.2.4 of RFC 2616.  See
215   // RequiresValidation for a description of the response_time parameter.
216   base::TimeDelta GetFreshnessLifetime(const base::Time& response_time) const;
217 
218   // Returns the age of the response.  See section 13.2.3 of RFC 2616.
219   // See RequiresValidation for a description of this method's parameters.
220   base::TimeDelta GetCurrentAge(const base::Time& request_time,
221                                 const base::Time& response_time,
222                                 const base::Time& current_time) const;
223 
224   // The following methods extract values from the response headers.  If a
225   // value is not present, then false is returned.  Otherwise, true is returned
226   // and the out param is assigned to the corresponding value.
227   bool GetMaxAgeValue(base::TimeDelta* value) const;
228   bool GetAgeValue(base::TimeDelta* value) const;
229   bool GetDateValue(base::Time* value) const;
230   bool GetLastModifiedValue(base::Time* value) const;
231   bool GetExpiresValue(base::Time* value) const;
232   bool GetStaleWhileRevalidateValue(base::TimeDelta* value) const;
233 
234   // Extracts the time value of a particular header.  This method looks for the
235   // first matching header value and parses its value as a HTTP-date.
236   bool GetTimeValuedHeader(const std::string& name, base::Time* result) const;
237 
238   // Determines if this response indicates a keep-alive connection.
239   bool IsKeepAlive() const;
240 
241   // Returns true if this response has a strong etag or last-modified header.
242   // See section 13.3.3 of RFC 2616.
243   bool HasStrongValidators() const;
244 
245   // Extracts the value of the Content-Length header or returns -1 if there is
246   // no such header in the response.
247   int64 GetContentLength() const;
248 
249   // Extracts the value of the specified header or returns -1 if there is no
250   // such header in the response.
251   int64 GetInt64HeaderValue(const std::string& header) const;
252 
253   // Extracts the values in a Content-Range header and returns true if they are
254   // valid for a 206 response; otherwise returns false.
255   // The following values will be outputted:
256   // |*first_byte_position| = inclusive position of the first byte of the range
257   // |*last_byte_position| = inclusive position of the last byte of the range
258   // |*instance_length| = size in bytes of the object requested
259   // If any of the above values is unknown, its value will be -1.
260   bool GetContentRange(int64* first_byte_position,
261                        int64* last_byte_position,
262                        int64* instance_length) const;
263 
264   // Returns true if the response is chunk-encoded.
265   bool IsChunkEncoded() const;
266 
267   // Creates a Value for use with the NetLog containing the response headers.
268   base::Value* NetLogCallback(NetLog::LogLevel log_level) const;
269 
270   // Takes in a Value created by the above function, and attempts to create a
271   // copy of the original headers.  Returns true on success.  On failure,
272   // clears |http_response_headers|.
273   // TODO(mmenke):  Long term, we want to remove this, and migrate external
274   //                consumers to be NetworkDelegates.
275   static bool FromNetLogParam(
276       const base::Value* event_param,
277       scoped_refptr<HttpResponseHeaders>* http_response_headers);
278 
279   // Returns the HTTP response code.  This is 0 if the response code text seems
280   // to exist but could not be parsed.  Otherwise, it defaults to 200 if the
281   // response code is not found in the raw headers.
response_code()282   int response_code() const { return response_code_; }
283 
284   // Returns the raw header string.
raw_headers()285   const std::string& raw_headers() const { return raw_headers_; }
286 
287  private:
288   friend class base::RefCountedThreadSafe<HttpResponseHeaders>;
289 
290   typedef base::hash_set<std::string> HeaderSet;
291 
292   // The members of this structure point into raw_headers_.
293   struct ParsedHeader;
294   typedef std::vector<ParsedHeader> HeaderList;
295 
296   HttpResponseHeaders();
297   ~HttpResponseHeaders();
298 
299   // Initializes from the given raw headers.
300   void Parse(const std::string& raw_input);
301 
302   // Helper function for ParseStatusLine.
303   // Tries to extract the "HTTP/X.Y" from a status line formatted like:
304   //    HTTP/1.1 200 OK
305   // with line_begin and end pointing at the begin and end of this line.  If the
306   // status line is malformed, returns HttpVersion(0,0).
307   static HttpVersion ParseVersion(std::string::const_iterator line_begin,
308                                   std::string::const_iterator line_end);
309 
310   // Tries to extract the status line from a header block, given the first
311   // line of said header block.  If the status line is malformed, we'll
312   // construct a valid one.  Example input:
313   //    HTTP/1.1 200 OK
314   // with line_begin and end pointing at the begin and end of this line.
315   // Output will be a normalized version of this.
316   void ParseStatusLine(std::string::const_iterator line_begin,
317                        std::string::const_iterator line_end,
318                        bool has_headers);
319 
320   // Find the header in our list (case-insensitive) starting with parsed_ at
321   // index |from|.  Returns string::npos if not found.
322   size_t FindHeader(size_t from, const base::StringPiece& name) const;
323 
324   // Search the Cache-Control header for a directive matching |directive|. If
325   // present, treat its value as a time offset in seconds, write it to |result|,
326   // and return true.
327   bool GetCacheControlDirective(const base::StringPiece& directive,
328                                 base::TimeDelta* result) const;
329 
330   // Add a header->value pair to our list.  If we already have header in our
331   // list, append the value to it.
332   void AddHeader(std::string::const_iterator name_begin,
333                  std::string::const_iterator name_end,
334                  std::string::const_iterator value_begin,
335                  std::string::const_iterator value_end);
336 
337   // Add to parsed_ given the fields of a ParsedHeader object.
338   void AddToParsed(std::string::const_iterator name_begin,
339                    std::string::const_iterator name_end,
340                    std::string::const_iterator value_begin,
341                    std::string::const_iterator value_end);
342 
343   // Replaces the current headers with the merged version of |raw_headers| and
344   // the current headers without the headers in |headers_to_remove|. Note that
345   // |headers_to_remove| are removed from the current headers (before the
346   // merge), not after the merge.
347   void MergeWithHeaders(const std::string& raw_headers,
348                         const HeaderSet& headers_to_remove);
349 
350   // Adds the values from any 'cache-control: no-cache="foo,bar"' headers.
351   void AddNonCacheableHeaders(HeaderSet* header_names) const;
352 
353   // Adds the set of header names that contain cookie values.
354   static void AddSensitiveHeaders(HeaderSet* header_names);
355 
356   // Adds the set of rfc2616 hop-by-hop response headers.
357   static void AddHopByHopHeaders(HeaderSet* header_names);
358 
359   // Adds the set of challenge response headers.
360   static void AddChallengeHeaders(HeaderSet* header_names);
361 
362   // Adds the set of cookie response headers.
363   static void AddCookieHeaders(HeaderSet* header_names);
364 
365   // Adds the set of content range response headers.
366   static void AddHopContentRangeHeaders(HeaderSet* header_names);
367 
368   // Adds the set of transport security state headers.
369   static void AddSecurityStateHeaders(HeaderSet* header_names);
370 
371   // We keep a list of ParsedHeader objects.  These tell us where to locate the
372   // header-value pairs within raw_headers_.
373   HeaderList parsed_;
374 
375   // The raw_headers_ consists of the normalized status line (terminated with a
376   // null byte) and then followed by the raw null-terminated headers from the
377   // input that was passed to our constructor.  We preserve the input [*] to
378   // maintain as much ancillary fidelity as possible (since it is sometimes
379   // hard to tell what may matter down-stream to a consumer of XMLHttpRequest).
380   // [*] The status line may be modified.
381   std::string raw_headers_;
382 
383   // This is the parsed HTTP response code.
384   int response_code_;
385 
386   // The normalized http version (consistent with what GetStatusLine() returns).
387   HttpVersion http_version_;
388 
389   // The parsed http version number (not normalized).
390   HttpVersion parsed_http_version_;
391 
392   DISALLOW_COPY_AND_ASSIGN(HttpResponseHeaders);
393 };
394 
395 }  // namespace net
396 
397 #endif  // NET_HTTP_HTTP_RESPONSE_HEADERS_H_
398