2015-07-20 02:12:11 +00:00
|
|
|
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
|
|
|
|
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
|
|
|
|
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
|
|
|
|
#ifndef nsContentSecurityManager_h___
|
|
|
|
#define nsContentSecurityManager_h___
|
|
|
|
|
2015-09-18 16:27:15 +00:00
|
|
|
#include "nsIContentSecurityManager.h"
|
2015-07-20 02:12:11 +00:00
|
|
|
#include "nsIChannel.h"
|
2015-12-06 23:33:14 +00:00
|
|
|
#include "nsIChannelEventSink.h"
|
2015-09-18 16:27:15 +00:00
|
|
|
|
2015-07-20 02:12:11 +00:00
|
|
|
class nsIStreamListener;
|
|
|
|
|
2015-09-18 16:27:15 +00:00
|
|
|
#define NS_CONTENTSECURITYMANAGER_CONTRACTID \
|
|
|
|
"@mozilla.org/contentsecuritymanager;1"
|
|
|
|
// cdcc1ab8-3cea-4e6c-a294-a651fa35227f
|
|
|
|
#define NS_CONTENTSECURITYMANAGER_CID \
|
2018-11-30 10:46:48 +00:00
|
|
|
{ \
|
2015-09-18 16:27:15 +00:00
|
|
|
0xcdcc1ab8, 0x3cea, 0x4e6c, { \
|
|
|
|
0xa2, 0x94, 0xa6, 0x51, 0xfa, 0x35, 0x22, 0x7f \
|
|
|
|
} \
|
|
|
|
}
|
2018-11-30 10:46:48 +00:00
|
|
|
|
2015-09-18 16:27:15 +00:00
|
|
|
class nsContentSecurityManager : public nsIContentSecurityManager,
|
2015-12-06 23:33:14 +00:00
|
|
|
public nsIChannelEventSink {
|
2015-09-18 16:27:15 +00:00
|
|
|
public:
|
|
|
|
NS_DECL_ISUPPORTS
|
|
|
|
NS_DECL_NSICONTENTSECURITYMANAGER
|
2015-12-06 23:33:14 +00:00
|
|
|
NS_DECL_NSICHANNELEVENTSINK
|
2015-09-18 16:27:15 +00:00
|
|
|
|
2015-07-20 02:12:11 +00:00
|
|
|
nsContentSecurityManager() {}
|
|
|
|
|
|
|
|
static nsresult doContentSecurityCheck(
|
|
|
|
nsIChannel* aChannel, nsCOMPtr<nsIStreamListener>& aInAndOutListener);
|
2015-09-18 16:27:15 +00:00
|
|
|
|
2017-11-03 12:23:11 +00:00
|
|
|
static bool AllowTopLevelNavigationToDataURI(nsIChannel* aChannel);
|
2018-02-18 18:52:52 +00:00
|
|
|
static bool AllowInsecureRedirectToDataURI(nsIChannel* aNewChannel);
|
2017-09-06 07:33:10 +00:00
|
|
|
|
2019-04-18 13:54:43 +00:00
|
|
|
static void AssertEvalNotUsingSystemPrincipal(nsIPrincipal* subjectPrincipal,
|
|
|
|
JSContext* cx);
|
|
|
|
|
2015-09-18 16:27:15 +00:00
|
|
|
private:
|
2015-12-06 23:33:14 +00:00
|
|
|
static nsresult CheckChannel(nsIChannel* aChannel);
|
2018-04-05 22:27:02 +00:00
|
|
|
static nsresult CheckFTPSubresourceLoad(nsIChannel* aChannel);
|
2015-12-06 23:33:14 +00:00
|
|
|
|
2015-09-18 16:27:15 +00:00
|
|
|
virtual ~nsContentSecurityManager() {}
|
2015-07-20 02:12:11 +00:00
|
|
|
};
|
|
|
|
|
|
|
|
#endif /* nsContentSecurityManager_h___ */
|