1 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
5 #include "chrome_frame/navigation_constraints.h"
7 #include "base/strings/string_util.h"
8 #include "base/strings/utf_string_conversions.h"
9 #include "chrome/common/url_constants.h"
10 #include "chrome_frame/utils.h"
11 #include "extensions/common/constants.h"
13 NavigationConstraintsImpl::NavigationConstraintsImpl() : is_privileged_(false) {
16 // NavigationConstraintsImpl method definitions.
17 bool NavigationConstraintsImpl::AllowUnsafeUrls() {
18 // No sanity checks if unsafe URLs are allowed
19 return GetConfigBool(false, kAllowUnsafeURLs
);
22 bool NavigationConstraintsImpl::IsSchemeAllowed(const GURL
& url
) {
29 if (url
.SchemeIs(chrome::kHttpScheme
) ||
30 url
.SchemeIs(chrome::kHttpsScheme
))
33 // Additional checking for view-source. Allow only http and https
34 // URLs in view source.
35 if (url
.SchemeIs(content::kViewSourceScheme
)) {
36 GURL
sub_url(url
.path());
37 if (sub_url
.SchemeIs(chrome::kHttpScheme
) ||
38 sub_url
.SchemeIs(chrome::kHttpsScheme
))
42 // Allow only about:blank or about:version
43 if (url
.SchemeIs(chrome::kAboutScheme
)) {
44 if (LowerCaseEqualsASCII(url
.spec(), content::kAboutBlankURL
) ||
45 LowerCaseEqualsASCII(url
.spec(), chrome::kAboutVersionURL
)) {
51 (url
.SchemeIs(chrome::kDataScheme
) ||
52 url
.SchemeIs(extensions::kExtensionScheme
))) {
59 bool NavigationConstraintsImpl::IsZoneAllowed(const GURL
& url
) {
60 if (!security_manager_
) {
61 HRESULT hr
= security_manager_
.CreateInstance(
62 CLSID_InternetSecurityManager
);
64 NOTREACHED() << __FUNCTION__
65 << " Failed to create SecurityManager. Error: 0x%x"
69 DWORD zone
= URLZONE_INVALID
;
70 std::wstring unicode_url
= UTF8ToWide(url
.spec());
71 security_manager_
->MapUrlToZone(unicode_url
.c_str(), &zone
, 0);
72 if (zone
== URLZONE_UNTRUSTED
) {
73 DLOG(WARNING
) << __FUNCTION__
74 << " Disallowing navigation to restricted url: " << url
;
81 bool NavigationConstraintsImpl::is_privileged() const {
82 return is_privileged_
;
85 void NavigationConstraintsImpl::set_is_privileged(bool is_privileged
) {
86 is_privileged_
= is_privileged
;