1 /* 2 * Copyright (C) 2010 Apple Inc. All Rights Reserved. 3 * 4 * Redistribution and use in source and binary forms, with or without 5 * modification, are permitted provided that the following conditions 6 * are met: 7 * 1. Redistributions of source code must retain the above copyright 8 * notice, this list of conditions and the following disclaimer. 9 * 2. Redistributions in binary form must reproduce the above copyright 10 * notice, this list of conditions and the following disclaimer in the 11 * documentation and/or other materials provided with the distribution. 12 * 13 * THIS SOFTWARE IS PROVIDED BY APPLE, INC. ``AS IS'' AND ANY 14 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 15 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 16 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE COMPUTER, INC. OR 17 * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, 18 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, 19 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR 20 * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY 21 * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 22 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE 23 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 24 * 25 */ 26 #ifndef SchemeRegistry_h 27 #define SchemeRegistry_h 28 29 #include "PlatformString.h" 30 #include <wtf/HashSet.h> 31 #include <wtf/text/StringHash.h> 32 33 namespace WebCore { 34 35 typedef HashSet<String, CaseFoldingHash> URLSchemesMap; 36 37 class SchemeRegistry { 38 public: 39 static void registerURLSchemeAsLocal(const String&); 40 static void removeURLSchemeRegisteredAsLocal(const String&); 41 static const URLSchemesMap& localSchemes(); 42 43 static bool shouldTreatURLSchemeAsLocal(const String&); 44 45 // Secure schemes do not trigger mixed content warnings. For example, 46 // https and data are secure schemes because they cannot be corrupted by 47 // active network attackers. 48 static void registerURLSchemeAsSecure(const String&); 49 static bool shouldTreatURLSchemeAsSecure(const String&); 50 51 static void registerURLSchemeAsNoAccess(const String&); 52 static bool shouldTreatURLSchemeAsNoAccess(const String&); 53 54 // Display-isolated schemes can only be displayed (in the sense of 55 // SecurityOrigin::canDisplay) by documents from the same scheme. 56 static void registerURLSchemeAsDisplayIsolated(const String&); 57 static bool shouldTreatURLSchemeAsDisplayIsolated(const String&); 58 59 static void registerURLSchemeAsEmptyDocument(const String&); 60 static bool shouldLoadURLSchemeAsEmptyDocument(const String&); 61 62 // Such schemes should delegate to SecurityOrigin::canRequest for any URL 63 // passed to SecurityOrigin::canDisplay. 64 static bool canDisplayOnlyIfCanRequest(const String& scheme); 65 static void registerAsCanDisplayOnlyIfCanRequest(const String& scheme); 66 }; 67 68 } // namespace WebCore 69 70 #endif // SchemeRegistry_h 71
