Home | History | Annotate | Download | only in filesystem
      1 /*
      2  * Copyright (C) 2010 Google Inc. All rights reserved.
      3  *
      4  * Redistribution and use in source and binary forms, with or without
      5  * modification, are permitted provided that the following conditions are
      6  * met:
      7  *
      8  *     * Redistributions of source code must retain the above copyright
      9  * notice, this list of conditions and the following disclaimer.
     10  *     * Redistributions in binary form must reproduce the above
     11  * copyright notice, this list of conditions and the following disclaimer
     12  * in the documentation and/or other materials provided with the
     13  * distribution.
     14  *     * Neither the name of Google Inc. nor the names of its
     15  * contributors may be used to endorse or promote products derived from
     16  * this software without specific prior written permission.
     17  *
     18  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
     19  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
     20  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
     21  * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
     22  * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
     23  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
     24  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
     25  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
     26  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     27  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
     28  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
     29  */
     30 
     31 #include "config.h"
     32 #include "modules/filesystem/DOMFilePath.h"
     33 
     34 #include "wtf/Vector.h"
     35 #include "wtf/text/CString.h"
     36 
     37 namespace WebCore {
     38 
     39 const char DOMFilePath::separator = '/';
     40 const char DOMFilePath::root[] = "/";
     41 
     42 String DOMFilePath::append(const String& base, const String& components)
     43 {
     44     return ensureDirectoryPath(base) + components;
     45 }
     46 
     47 String DOMFilePath::ensureDirectoryPath(const String& path)
     48 {
     49     if (!DOMFilePath::endsWithSeparator(path)) {
     50         String newPath = path;
     51         newPath.append(DOMFilePath::separator);
     52         return newPath;
     53     }
     54     return path;
     55 }
     56 
     57 String DOMFilePath::getName(const String& path)
     58 {
     59     int index = path.reverseFind(DOMFilePath::separator);
     60     if (index != -1)
     61         return path.substring(index + 1);
     62     return path;
     63 }
     64 
     65 String DOMFilePath::getDirectory(const String& path)
     66 {
     67     int index = path.reverseFind(DOMFilePath::separator);
     68     if (!index)
     69         return DOMFilePath::root;
     70     if (index != -1)
     71         return path.substring(0, index);
     72     return ".";
     73 }
     74 
     75 bool DOMFilePath::isParentOf(const String& parent, const String& mayBeChild)
     76 {
     77     ASSERT(DOMFilePath::isAbsolute(parent));
     78     ASSERT(DOMFilePath::isAbsolute(mayBeChild));
     79     if (parent == DOMFilePath::root && mayBeChild != DOMFilePath::root)
     80         return true;
     81     if (parent.length() >= mayBeChild.length() || !mayBeChild.startsWith(parent, false))
     82         return false;
     83     if (mayBeChild[parent.length()] != DOMFilePath::separator)
     84         return false;
     85     return true;
     86 }
     87 
     88 String DOMFilePath::removeExtraParentReferences(const String& path)
     89 {
     90     ASSERT(DOMFilePath::isAbsolute(path));
     91     Vector<String> components;
     92     Vector<String> canonicalized;
     93     path.split(DOMFilePath::separator, components);
     94     for (size_t i = 0; i < components.size(); ++i) {
     95         if (components[i] == ".")
     96             continue;
     97         if (components[i] == "..") {
     98             if (canonicalized.size() > 0)
     99                 canonicalized.removeLast();
    100             continue;
    101         }
    102         canonicalized.append(components[i]);
    103     }
    104     if (canonicalized.isEmpty())
    105         return DOMFilePath::root;
    106     String result;
    107     for (size_t i = 0; i < canonicalized.size(); ++i) {
    108         result.append(DOMFilePath::separator);
    109         result.append(canonicalized[i]);
    110     }
    111     return result;
    112 }
    113 
    114 bool DOMFilePath::isValidPath(const String& path)
    115 {
    116     if (path.isEmpty() || path == DOMFilePath::root)
    117         return true;
    118 
    119     // Embedded NULs are not allowed.
    120     if (path.find(static_cast<UChar>(0)) != WTF::notFound)
    121         return false;
    122 
    123     // While not [yet] restricted by the spec, '\\' complicates implementation for Chromium.
    124     if (path.find('\\') != WTF::notFound)
    125         return false;
    126 
    127     // This method is only called on fully-evaluated absolute paths. Any sign of ".." or "." is likely an attempt to break out of the sandbox.
    128     Vector<String> components;
    129     path.split(DOMFilePath::separator, components);
    130     for (size_t i = 0; i < components.size(); ++i) {
    131         if (components[i] == ".")
    132             return false;
    133         if (components[i] == "..")
    134             return false;
    135     }
    136     return true;
    137 }
    138 
    139 bool DOMFilePath::isValidName(const String& name)
    140 {
    141     if (name.isEmpty())
    142         return true;
    143     // '/' is not allowed in name.
    144     if (name.contains('/'))
    145         return false;
    146     return isValidPath(name);
    147 }
    148 
    149 } // namespace WebCore
    150