Home | History | Annotate | Download | only in http
      1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
      2 // Use of this source code is governed by a BSD-style license that can be
      3 // found in the LICENSE file.
      4 
      5 #ifndef NET_HTTP_HTTP_RESPONSE_HEADERS_H_
      6 #define NET_HTTP_HTTP_RESPONSE_HEADERS_H_
      7 
      8 #include <string>
      9 #include <vector>
     10 
     11 #include "base/basictypes.h"
     12 #include "base/containers/hash_tables.h"
     13 #include "base/memory/ref_counted.h"
     14 #include "base/strings/string_piece.h"
     15 #include "net/base/net_export.h"
     16 #include "net/base/net_log.h"
     17 #include "net/http/http_version.h"
     18 
     19 class Pickle;
     20 class PickleIterator;
     21 
     22 namespace base {
     23 class Time;
     24 class TimeDelta;
     25 }
     26 
     27 namespace net {
     28 
     29 class HttpByteRange;
     30 
     31 // HttpResponseHeaders: parses and holds HTTP response headers.
     32 class NET_EXPORT HttpResponseHeaders
     33     : public base::RefCountedThreadSafe<HttpResponseHeaders> {
     34  public:
     35   // Persist options.
     36   typedef int PersistOptions;
     37   static const PersistOptions PERSIST_RAW = -1;  // Raw, unparsed headers.
     38   static const PersistOptions PERSIST_ALL = 0;  // Parsed headers.
     39   static const PersistOptions PERSIST_SANS_COOKIES = 1 << 0;
     40   static const PersistOptions PERSIST_SANS_CHALLENGES = 1 << 1;
     41   static const PersistOptions PERSIST_SANS_HOP_BY_HOP = 1 << 2;
     42   static const PersistOptions PERSIST_SANS_NON_CACHEABLE = 1 << 3;
     43   static const PersistOptions PERSIST_SANS_RANGES = 1 << 4;
     44   static const PersistOptions PERSIST_SANS_SECURITY_STATE = 1 << 5;
     45 
     46   static const char kContentRange[];
     47 
     48   // Parses the given raw_headers.  raw_headers should be formatted thus:
     49   // includes the http status response line, each line is \0-terminated, and
     50   // it's terminated by an empty line (ie, 2 \0s in a row).
     51   // (Note that line continuations should have already been joined;
     52   // see HttpUtil::AssembleRawHeaders)
     53   //
     54   // HttpResponseHeaders does not perform any encoding changes on the input.
     55   //
     56   explicit HttpResponseHeaders(const std::string& raw_headers);
     57 
     58   // Initializes from the representation stored in the given pickle.  The data
     59   // for this object is found relative to the given pickle_iter, which should
     60   // be passed to the pickle's various Read* methods.
     61   HttpResponseHeaders(const Pickle& pickle, PickleIterator* pickle_iter);
     62 
     63   // Appends a representation of this object to the given pickle.
     64   // The options argument can be a combination of PersistOptions.
     65   void Persist(Pickle* pickle, PersistOptions options);
     66 
     67   // Performs header merging as described in 13.5.3 of RFC 2616.
     68   void Update(const HttpResponseHeaders& new_headers);
     69 
     70   // Removes all instances of a particular header.
     71   void RemoveHeader(const std::string& name);
     72 
     73   // Removes a particular header line. The header name is compared
     74   // case-insensitively.
     75   void RemoveHeaderLine(const std::string& name, const std::string& value);
     76 
     77   // Adds a particular header.  |header| has to be a single header without any
     78   // EOL termination, just [<header-name>: <header-values>]
     79   // If a header with the same name is already stored, the two headers are not
     80   // merged together by this method; the one provided is simply put at the
     81   // end of the list.
     82   void AddHeader(const std::string& header);
     83 
     84   // Replaces the current status line with the provided one (|new_status| should
     85   // not have any EOL).
     86   void ReplaceStatusLine(const std::string& new_status);
     87 
     88   // Updates headers (Content-Length and Content-Range) in the |headers| to
     89   // include the right content length and range for |byte_range|.  This also
     90   // updates HTTP status line if |replace_status_line| is true.
     91   // |byte_range| must have a valid, bounded range (i.e. coming from a valid
     92   // response or should be usable for a response).
     93   void UpdateWithNewRange(const HttpByteRange& byte_range,
     94                           int64 resource_size,
     95                           bool replace_status_line);
     96 
     97   // Creates a normalized header string.  The output will be formatted exactly
     98   // like so:
     99   //     HTTP/<version> <status_code> <status_text>\n
    100   //     [<header-name>: <header-values>\n]*
    101   // meaning, each line is \n-terminated, and there is no extra whitespace
    102   // beyond the single space separators shown (of course, values can contain
    103   // whitespace within them).  If a given header-name appears more than once
    104   // in the set of headers, they are combined into a single line like so:
    105   //     <header-name>: <header-value1>, <header-value2>, ...<header-valueN>\n
    106   //
    107   // DANGER: For some headers (e.g., "Set-Cookie"), the normalized form can be
    108   // a lossy format.  This is due to the fact that some servers generate
    109   // Set-Cookie headers that contain unquoted commas (usually as part of the
    110   // value of an "expires" attribute).  So, use this function with caution.  Do
    111   // not expect to be able to re-parse Set-Cookie headers from this output.
    112   //
    113   // NOTE: Do not make any assumptions about the encoding of this output
    114   // string.  It may be non-ASCII, and the encoding used by the server is not
    115   // necessarily known to us.  Do not assume that this output is UTF-8!
    116   //
    117   // TODO(darin): remove this method
    118   //
    119   void GetNormalizedHeaders(std::string* output) const;
    120 
    121   // Fetch the "normalized" value of a single header, where all values for the
    122   // header name are separated by commas.  See the GetNormalizedHeaders for
    123   // format details.  Returns false if this header wasn't found.
    124   //
    125   // NOTE: Do not make any assumptions about the encoding of this output
    126   // string.  It may be non-ASCII, and the encoding used by the server is not
    127   // necessarily known to us.  Do not assume that this output is UTF-8!
    128   //
    129   // TODO(darin): remove this method
    130   //
    131   bool GetNormalizedHeader(const std::string& name, std::string* value) const;
    132 
    133   // Returns the normalized status line.  For HTTP/0.9 responses (i.e.,
    134   // responses that lack a status line), this is the manufactured string
    135   // "HTTP/0.9 200 OK".
    136   std::string GetStatusLine() const;
    137 
    138   // Get the HTTP version of the normalized status line.
    139   HttpVersion GetHttpVersion() const {
    140     return http_version_;
    141   }
    142 
    143   // Get the HTTP version determined while parsing; or (0,0) if parsing failed
    144   HttpVersion GetParsedHttpVersion() const {
    145     return parsed_http_version_;
    146   }
    147 
    148   // Get the HTTP status text of the normalized status line.
    149   std::string GetStatusText() const;
    150 
    151   // Enumerate the "lines" of the response headers.  This skips over the status
    152   // line.  Use GetStatusLine if you are interested in that.  Note that this
    153   // method returns the un-coalesced response header lines, so if a response
    154   // header appears on multiple lines, then it will appear multiple times in
    155   // this enumeration (in the order the header lines were received from the
    156   // server).  Also, a given header might have an empty value.  Initialize a
    157   // 'void*' variable to NULL and pass it by address to EnumerateHeaderLines.
    158   // Call EnumerateHeaderLines repeatedly until it returns false.  The
    159   // out-params 'name' and 'value' are set upon success.
    160   bool EnumerateHeaderLines(void** iter,
    161                             std::string* name,
    162                             std::string* value) const;
    163 
    164   // Enumerate the values of the specified header.   If you are only interested
    165   // in the first header, then you can pass NULL for the 'iter' parameter.
    166   // Otherwise, to iterate across all values for the specified header,
    167   // initialize a 'void*' variable to NULL and pass it by address to
    168   // EnumerateHeader. Note that a header might have an empty value. Call
    169   // EnumerateHeader repeatedly until it returns false.
    170   bool EnumerateHeader(void** iter,
    171                        const base::StringPiece& name,
    172                        std::string* value) const;
    173 
    174   // Returns true if the response contains the specified header-value pair.
    175   // Both name and value are compared case insensitively.
    176   bool HasHeaderValue(const base::StringPiece& name,
    177                       const base::StringPiece& value) const;
    178 
    179   // Returns true if the response contains the specified header.
    180   // The name is compared case insensitively.
    181   bool HasHeader(const base::StringPiece& name) const;
    182 
    183   // Get the mime type and charset values in lower case form from the headers.
    184   // Empty strings are returned if the values are not present.
    185   void GetMimeTypeAndCharset(std::string* mime_type,
    186                              std::string* charset) const;
    187 
    188   // Get the mime type in lower case from the headers.  If there's no mime
    189   // type, returns false.
    190   bool GetMimeType(std::string* mime_type) const;
    191 
    192   // Get the charset in lower case from the headers.  If there's no charset,
    193   // returns false.
    194   bool GetCharset(std::string* charset) const;
    195 
    196   // Returns true if this response corresponds to a redirect.  The target
    197   // location of the redirect is optionally returned if location is non-null.
    198   bool IsRedirect(std::string* location) const;
    199 
    200   // Returns true if the HTTP response code passed in corresponds to a
    201   // redirect.
    202   static bool IsRedirectResponseCode(int response_code);
    203 
    204   // Returns true if the response cannot be reused without validation.  The
    205   // result is relative to the current_time parameter, which is a parameter to
    206   // support unit testing.  The request_time parameter indicates the time at
    207   // which the request was made that resulted in this response, which was
    208   // received at response_time.
    209   bool RequiresValidation(const base::Time& request_time,
    210                           const base::Time& response_time,
    211                           const base::Time& current_time) const;
    212 
    213   // Returns the amount of time the server claims the response is fresh from
    214   // the time the response was generated.  See section 13.2.4 of RFC 2616.  See
    215   // RequiresValidation for a description of the response_time parameter.
    216   base::TimeDelta GetFreshnessLifetime(const base::Time& response_time) const;
    217 
    218   // Returns the age of the response.  See section 13.2.3 of RFC 2616.
    219   // See RequiresValidation for a description of this method's parameters.
    220   base::TimeDelta GetCurrentAge(const base::Time& request_time,
    221                                 const base::Time& response_time,
    222                                 const base::Time& current_time) const;
    223 
    224   // The following methods extract values from the response headers.  If a
    225   // value is not present, then false is returned.  Otherwise, true is returned
    226   // and the out param is assigned to the corresponding value.
    227   bool GetMaxAgeValue(base::TimeDelta* value) const;
    228   bool GetAgeValue(base::TimeDelta* value) const;
    229   bool GetDateValue(base::Time* value) const;
    230   bool GetLastModifiedValue(base::Time* value) const;
    231   bool GetExpiresValue(base::Time* value) const;
    232 
    233   // Extracts the time value of a particular header.  This method looks for the
    234   // first matching header value and parses its value as a HTTP-date.
    235   bool GetTimeValuedHeader(const std::string& name, base::Time* result) const;
    236 
    237   // Determines if this response indicates a keep-alive connection.
    238   bool IsKeepAlive() const;
    239 
    240   // Returns true if this response has a strong etag or last-modified header.
    241   // See section 13.3.3 of RFC 2616.
    242   bool HasStrongValidators() const;
    243 
    244   // Extracts the value of the Content-Length header or returns -1 if there is
    245   // no such header in the response.
    246   int64 GetContentLength() const;
    247 
    248   // Extracts the value of the specified header or returns -1 if there is no
    249   // such header in the response.
    250   int64 GetInt64HeaderValue(const std::string& header) const;
    251 
    252   // Extracts the values in a Content-Range header and returns true if they are
    253   // valid for a 206 response; otherwise returns false.
    254   // The following values will be outputted:
    255   // |*first_byte_position| = inclusive position of the first byte of the range
    256   // |*last_byte_position| = inclusive position of the last byte of the range
    257   // |*instance_length| = size in bytes of the object requested
    258   // If any of the above values is unknown, its value will be -1.
    259   bool GetContentRange(int64* first_byte_position,
    260                        int64* last_byte_position,
    261                        int64* instance_length) const;
    262 
    263   // Returns true if the response is chunk-encoded.
    264   bool IsChunkEncoded() const;
    265 
    266   // Creates a Value for use with the NetLog containing the response headers.
    267   base::Value* NetLogCallback(NetLog::LogLevel log_level) const;
    268 
    269   // Takes in a Value created by the above function, and attempts to create a
    270   // copy of the original headers.  Returns true on success.  On failure,
    271   // clears |http_response_headers|.
    272   // TODO(mmenke):  Long term, we want to remove this, and migrate external
    273   //                consumers to be NetworkDelegates.
    274   static bool FromNetLogParam(
    275       const base::Value* event_param,
    276       scoped_refptr<HttpResponseHeaders>* http_response_headers);
    277 
    278   // Returns the HTTP response code.  This is 0 if the response code text seems
    279   // to exist but could not be parsed.  Otherwise, it defaults to 200 if the
    280   // response code is not found in the raw headers.
    281   int response_code() const { return response_code_; }
    282 
    283   // Returns the raw header string.
    284   const std::string& raw_headers() const { return raw_headers_; }
    285 
    286  private:
    287   friend class base::RefCountedThreadSafe<HttpResponseHeaders>;
    288 
    289   typedef base::hash_set<std::string> HeaderSet;
    290 
    291   // The members of this structure point into raw_headers_.
    292   struct ParsedHeader;
    293   typedef std::vector<ParsedHeader> HeaderList;
    294 
    295   HttpResponseHeaders();
    296   ~HttpResponseHeaders();
    297 
    298   // Initializes from the given raw headers.
    299   void Parse(const std::string& raw_input);
    300 
    301   // Helper function for ParseStatusLine.
    302   // Tries to extract the "HTTP/X.Y" from a status line formatted like:
    303   //    HTTP/1.1 200 OK
    304   // with line_begin and end pointing at the begin and end of this line.  If the
    305   // status line is malformed, returns HttpVersion(0,0).
    306   static HttpVersion ParseVersion(std::string::const_iterator line_begin,
    307                                   std::string::const_iterator line_end);
    308 
    309   // Tries to extract the status line from a header block, given the first
    310   // line of said header block.  If the status line is malformed, we'll
    311   // construct a valid one.  Example input:
    312   //    HTTP/1.1 200 OK
    313   // with line_begin and end pointing at the begin and end of this line.
    314   // Output will be a normalized version of this.
    315   void ParseStatusLine(std::string::const_iterator line_begin,
    316                        std::string::const_iterator line_end,
    317                        bool has_headers);
    318 
    319   // Find the header in our list (case-insensitive) starting with parsed_ at
    320   // index |from|.  Returns string::npos if not found.
    321   size_t FindHeader(size_t from, const base::StringPiece& name) const;
    322 
    323   // Add a header->value pair to our list.  If we already have header in our
    324   // list, append the value to it.
    325   void AddHeader(std::string::const_iterator name_begin,
    326                  std::string::const_iterator name_end,
    327                  std::string::const_iterator value_begin,
    328                  std::string::const_iterator value_end);
    329 
    330   // Add to parsed_ given the fields of a ParsedHeader object.
    331   void AddToParsed(std::string::const_iterator name_begin,
    332                    std::string::const_iterator name_end,
    333                    std::string::const_iterator value_begin,
    334                    std::string::const_iterator value_end);
    335 
    336   // Replaces the current headers with the merged version of |raw_headers| and
    337   // the current headers without the headers in |headers_to_remove|. Note that
    338   // |headers_to_remove| are removed from the current headers (before the
    339   // merge), not after the merge.
    340   void MergeWithHeaders(const std::string& raw_headers,
    341                         const HeaderSet& headers_to_remove);
    342 
    343   // Adds the values from any 'cache-control: no-cache="foo,bar"' headers.
    344   void AddNonCacheableHeaders(HeaderSet* header_names) const;
    345 
    346   // Adds the set of header names that contain cookie values.
    347   static void AddSensitiveHeaders(HeaderSet* header_names);
    348 
    349   // Adds the set of rfc2616 hop-by-hop response headers.
    350   static void AddHopByHopHeaders(HeaderSet* header_names);
    351 
    352   // Adds the set of challenge response headers.
    353   static void AddChallengeHeaders(HeaderSet* header_names);
    354 
    355   // Adds the set of cookie response headers.
    356   static void AddCookieHeaders(HeaderSet* header_names);
    357 
    358   // Adds the set of content range response headers.
    359   static void AddHopContentRangeHeaders(HeaderSet* header_names);
    360 
    361   // Adds the set of transport security state headers.
    362   static void AddSecurityStateHeaders(HeaderSet* header_names);
    363 
    364   // We keep a list of ParsedHeader objects.  These tell us where to locate the
    365   // header-value pairs within raw_headers_.
    366   HeaderList parsed_;
    367 
    368   // The raw_headers_ consists of the normalized status line (terminated with a
    369   // null byte) and then followed by the raw null-terminated headers from the
    370   // input that was passed to our constructor.  We preserve the input [*] to
    371   // maintain as much ancillary fidelity as possible (since it is sometimes
    372   // hard to tell what may matter down-stream to a consumer of XMLHttpRequest).
    373   // [*] The status line may be modified.
    374   std::string raw_headers_;
    375 
    376   // This is the parsed HTTP response code.
    377   int response_code_;
    378 
    379   // The normalized http version (consistent with what GetStatusLine() returns).
    380   HttpVersion http_version_;
    381 
    382   // The parsed http version number (not normalized).
    383   HttpVersion parsed_http_version_;
    384 
    385   DISALLOW_COPY_AND_ASSIGN(HttpResponseHeaders);
    386 };
    387 
    388 }  // namespace net
    389 
    390 #endif  // NET_HTTP_HTTP_RESPONSE_HEADERS_H_
    391