1 // Copyright 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
11 #include "base/memory/scoped_ptr.h"
12 #include "base/strings/string16.h"
13 #include "url/url_canon.h"
14 #include "url/url_canon_stdstring.h"
15 #include "url/url_constants.h"
16 #include "url/url_export.h"
17 #include "url/url_parse.h"
19 class URL_EXPORT GURL
{
21 typedef url::StringPieceReplacements
<std::string
> Replacements
;
22 typedef url::StringPieceReplacements
<base::string16
> ReplacementsW
;
24 // Creates an empty, invalid URL.
27 // Copy construction is relatively inexpensive, with most of the time going
28 // to reallocating the string. It does not re-parse.
29 GURL(const GURL
& other
);
31 // The narrow version requires the input be UTF-8. Invalid UTF-8 input will
32 // result in an invalid URL.
34 // The wide version should also take an encoding parameter so we know how to
35 // encode the query parameters. It is probably sufficient for the narrow
36 // version to assume the query parameter encoding should be the same as the
38 explicit GURL(const std::string
& url_string
/*, output_param_encoding*/);
39 explicit GURL(const base::string16
& url_string
/*, output_param_encoding*/);
41 // Constructor for URLs that have already been parsed and canonicalized. This
42 // is used for conversions from KURL, for example. The caller must supply all
43 // information associated with the URL, which must be correct and consistent.
44 GURL(const char* canonical_spec
,
45 size_t canonical_spec_len
,
46 const url::Parsed
& parsed
,
48 // Notice that we take the canonical_spec by value so that we can convert
49 // from WebURL without copying the string. When we call this constructor
50 // we pass in a temporary std::string, which lets the compiler skip the
51 // copy and just move the std::string into the function argument. In the
52 // implementation, we use swap to move the data into the GURL itself,
53 // which means we end up with zero copies.
54 GURL(std::string canonical_spec
, const url::Parsed
& parsed
, bool is_valid
);
58 GURL
& operator=(GURL other
);
60 // Returns true when this object represents a valid parsed URL. When not
61 // valid, other functions will still succeed, but you will not get canonical
62 // data out in the format you may be expecting. Instead, we keep something
63 // "reasonable looking" so that the user can see how it's busted if
65 bool is_valid() const {
69 // Returns true if the URL is zero-length. Note that empty URLs are also
70 // invalid, and is_valid() will return false for them. This is provided
71 // because some users may want to treat the empty case differently.
72 bool is_empty() const {
76 // Returns the raw spec, i.e., the full text of the URL, in canonical UTF-8,
77 // if the URL is valid. If the URL is not valid, this will assert and return
78 // the empty string (for safety in release builds, to keep them from being
79 // misused which might be a security problem).
81 // The URL will be ASCII except the reference fragment, which may be UTF-8.
82 // It is guaranteed to be valid UTF-8.
84 // The exception is for empty() URLs (which are !is_valid()) but this will
85 // return the empty string without asserting.
87 // Used invalid_spec() below to get the unusable spec of an invalid URL. This
88 // separation is designed to prevent errors that may cause security problems
89 // that could result from the mistaken use of an invalid URL.
90 const std::string
& spec() const;
92 // Returns the potentially invalid spec for a the URL. This spec MUST NOT be
93 // modified or sent over the network. It is designed to be displayed in error
94 // messages to the user, as the apperance of the spec may explain the error.
95 // If the spec is valid, the valid spec will be returned.
97 // The returned string is guaranteed to be valid UTF-8.
98 const std::string
& possibly_invalid_spec() const {
102 // Getter for the raw parsed structure. This allows callers to locate parts
103 // of the URL within the spec themselves. Most callers should consider using
104 // the individual component getters below.
106 // The returned parsed structure will reference into the raw spec, which may
107 // or may not be valid. If you are using this to index into the spec, BE
108 // SURE YOU ARE USING possibly_invalid_spec() to get the spec, and that you
109 // don't do anything "important" with invalid specs.
110 const url::Parsed
& parsed_for_possibly_invalid_spec() const {
114 // Defiant equality operator!
115 bool operator==(const GURL
& other
) const;
116 bool operator!=(const GURL
& other
) const;
118 // Allows GURL to used as a key in STL (for example, a std::set or std::map).
119 bool operator<(const GURL
& other
) const;
120 bool operator>(const GURL
& other
) const;
122 // Resolves a URL that's possibly relative to this object's URL, and returns
123 // it. Absolute URLs are also handled according to the rules of URLs on web
126 // It may be impossible to resolve the URLs properly. If the input is not
127 // "standard" (SchemeIsStandard() == false) and the input looks relative, we
128 // can't resolve it. In these cases, the result will be an empty, invalid
131 // The result may also be a nonempty, invalid URL if the input has some kind
132 // of encoding error. In these cases, we will try to construct a "good" URL
133 // that may have meaning to the user, but it will be marked invalid.
135 // It is an error to resolve a URL relative to an invalid URL. The result
136 // will be the empty URL.
137 GURL
Resolve(const std::string
& relative
) const;
138 GURL
Resolve(const base::string16
& relative
) const;
140 // Like Resolve() above but takes a character set encoder which will be used
141 // for any query text specified in the input. The charset converter parameter
142 // may be NULL, in which case it will be treated as UTF-8.
144 // TODO(brettw): These should be replaced with versions that take something
145 // more friendly than a raw CharsetConverter (maybe like an ICU character set
147 GURL
ResolveWithCharsetConverter(
148 const std::string
& relative
,
149 url::CharsetConverter
* charset_converter
) const;
150 GURL
ResolveWithCharsetConverter(
151 const base::string16
& relative
,
152 url::CharsetConverter
* charset_converter
) const;
154 // Creates a new GURL by replacing the current URL's components with the
155 // supplied versions. See the Replacements class in url_canon.h for more.
157 // These are not particularly quick, so avoid doing mutations when possible.
158 // Prefer the 8-bit version when possible.
160 // It is an error to replace components of an invalid URL. The result will
163 // Note that we use the more general url::Replacements type to give
164 // callers extra flexibility rather than our override.
165 GURL
ReplaceComponents(const url::Replacements
<char>& replacements
) const;
166 GURL
ReplaceComponents(
167 const url::Replacements
<base::char16
>& replacements
) const;
169 // A helper function that is equivalent to replacing the path with a slash
170 // and clearing out everything after that. We sometimes need to know just the
171 // scheme and the authority. If this URL is not a standard URL (it doesn't
172 // have the regular authority and path sections), then the result will be
173 // an empty, invalid GURL. Note that this *does* work for file: URLs, which
174 // some callers may want to filter out before calling this.
176 // It is an error to get an empty path on an invalid URL. The result
177 // will be the empty URL.
178 GURL
GetWithEmptyPath() const;
180 // A helper function to return a GURL containing just the scheme, host,
181 // and port from a URL. Equivalent to clearing any username and password,
182 // replacing the path with a slash, and clearing everything after that. If
183 // this URL is not a standard URL, then the result will be an empty,
184 // invalid GURL. If the URL has neither username nor password, this
185 // degenerates to GetWithEmptyPath().
187 // It is an error to get the origin of an invalid URL. The result
188 // will be the empty URL.
189 GURL
GetOrigin() const;
191 // A helper function to return a GURL stripped from the elements that are not
192 // supposed to be sent as HTTP referrer: username, password and ref fragment.
193 // For invalid URLs or URLs that no valid referrers, an empty URL will be
195 GURL
GetAsReferrer() const;
197 // Returns true if the scheme for the current URL is a known "standard-format"
198 // scheme. A standard-format scheme adheres to what RFC 3986 calls "generic
199 // URI syntax" (https://tools.ietf.org/html/rfc3986#section-3). This includes
200 // file: and filesystem:, which some callers may want to filter out explicitly
201 // by calling SchemeIsFile[System].
202 bool IsStandard() const;
204 // Returns true if the given parameter (should be lower-case ASCII to match
205 // the canonicalized scheme) is the scheme for this URL. This call is more
206 // efficient than getting the scheme and comparing it because no copies or
207 // object constructions are done.
208 bool SchemeIs(const char* lower_ascii_scheme
) const;
210 // Returns true if the scheme is "http" or "https".
211 bool SchemeIsHTTPOrHTTPS() const;
213 // Returns true is the scheme is "ws" or "wss".
214 bool SchemeIsWSOrWSS() const;
216 // We often need to know if this is a file URL. File URLs are "standard", but
217 // are often treated separately by some programs.
218 bool SchemeIsFile() const {
219 return SchemeIs(url::kFileScheme
);
222 // FileSystem URLs need to be treated differently in some cases.
223 bool SchemeIsFileSystem() const {
224 return SchemeIs(url::kFileSystemScheme
);
227 // Returns true if the scheme indicates a secure connection.
229 // NOTE: This function is deprecated. You probably want
230 // |SchemeIsCryptographic| (if you just want to know if a scheme uses TLS for
231 // network transport) or Chromium's |IsOriginSecure| for a higher-level test
232 // about an origin's security. See those functions' documentation for more
235 // TODO(palmer): Audit callers and change them to |SchemeIsCryptographic| or
236 // |IsOriginSecure|, as appropriate. Then remove |SchemeIsSecure|.
238 bool SchemeIsSecure() const {
239 return SchemeIs(url::kHttpsScheme
) || SchemeIs(url::kWssScheme
) ||
240 (SchemeIsFileSystem() && inner_url() &&
241 inner_url()->SchemeIsSecure());
244 // Returns true if the scheme indicates a network connection that uses TLS or
245 // some other cryptographic protocol (e.g. QUIC) for security.
247 // This function is a not a complete test of whether or not an origin's code
248 // is minimally trustworthy. For that, see Chromium's |IsOriginSecure| for a
249 // higher-level and more complete semantics. See that function's documentation
251 bool SchemeIsCryptographic() const {
252 return SchemeIs(url::kHttpsScheme
) || SchemeIs(url::kWssScheme
);
255 // Returns true if the scheme is "blob".
256 bool SchemeIsBlob() const {
257 return SchemeIs(url::kBlobScheme
);
260 // The "content" of the URL is everything after the scheme (skipping the
261 // scheme delimiting colon). It is an error to get the origin of an invalid
262 // URL. The result will be an empty string.
263 std::string
GetContent() const;
265 // Returns true if the hostname is an IP address. Note: this function isn't
266 // as cheap as a simple getter because it re-parses the hostname to verify.
267 bool HostIsIPAddress() const;
269 // Getters for various components of the URL. The returned string will be
270 // empty if the component is empty or is not present.
271 std::string
scheme() const { // Not including the colon. See also SchemeIs.
272 return ComponentString(parsed_
.scheme
);
274 std::string
username() const {
275 return ComponentString(parsed_
.username
);
277 std::string
password() const {
278 return ComponentString(parsed_
.password
);
280 // Note that this may be a hostname, an IPv4 address, or an IPv6 literal
281 // surrounded by square brackets, like "[2001:db8::1]". To exclude these
282 // brackets, use HostNoBrackets() below.
283 std::string
host() const {
284 return ComponentString(parsed_
.host
);
286 std::string
port() const { // Returns -1 if "default"
287 return ComponentString(parsed_
.port
);
289 std::string
path() const { // Including first slash following host
290 return ComponentString(parsed_
.path
);
292 std::string
query() const { // Stuff following '?'
293 return ComponentString(parsed_
.query
);
295 std::string
ref() const { // Stuff following '#'
296 return ComponentString(parsed_
.ref
);
299 // Existance querying. These functions will return true if the corresponding
300 // URL component exists in this URL. Note that existance is different than
301 // being nonempty. http://www.google.com/? has a query that just happens to
302 // be empty, and has_query() will return true.
303 bool has_scheme() const {
304 return parsed_
.scheme
.len
>= 0;
306 bool has_username() const {
307 return parsed_
.username
.len
>= 0;
309 bool has_password() const {
310 return parsed_
.password
.len
>= 0;
312 bool has_host() const {
313 // Note that hosts are special, absense of host means length 0.
314 return parsed_
.host
.len
> 0;
316 bool has_port() const {
317 return parsed_
.port
.len
>= 0;
319 bool has_path() const {
320 // Note that http://www.google.com/" has a path, the path is "/". This can
321 // return false only for invalid or nonstandard URLs.
322 return parsed_
.path
.len
>= 0;
324 bool has_query() const {
325 return parsed_
.query
.len
>= 0;
327 bool has_ref() const {
328 return parsed_
.ref
.len
>= 0;
331 // Returns a parsed version of the port. Can also be any of the special
332 // values defined in Parsed for ExtractPort.
335 // Returns the port number of the URL, or the default port number.
336 // If the scheme has no concept of port (or unknown default) returns
338 int EffectiveIntPort() const;
340 // Extracts the filename portion of the path and returns it. The filename
341 // is everything after the last slash in the path. This may be empty.
342 std::string
ExtractFileName() const;
344 // Returns the path that should be sent to the server. This is the path,
345 // parameter, and query portions of the URL. It is guaranteed to be ASCII.
346 std::string
PathForRequest() const;
348 // Returns the host, excluding the square brackets surrounding IPv6 address
349 // literals. This can be useful for passing to getaddrinfo().
350 std::string
HostNoBrackets() const;
352 // Returns true if this URL's host matches or is in the same domain as
353 // the given input string. For example if this URL was "www.google.com",
354 // this would match "com", "google.com", and "www.google.com
355 // (input domain should be lower-case ASCII to match the canonicalized
356 // scheme). This call is more efficient than getting the host and check
357 // whether host has the specific domain or not because no copies or
358 // object constructions are done.
360 // If function DomainIs has parameter domain_len, which means the parameter
361 // lower_ascii_domain does not gurantee to terminate with NULL character.
362 bool DomainIs(const char* lower_ascii_domain
, int domain_len
) const;
364 // If function DomainIs only has parameter lower_ascii_domain, which means
365 // domain string should be terminate with NULL character.
366 bool DomainIs(const char* lower_ascii_domain
) const {
367 return DomainIs(lower_ascii_domain
,
368 static_cast<int>(strlen(lower_ascii_domain
)));
371 // Swaps the contents of this GURL object with the argument without doing
372 // any memory allocations.
373 void Swap(GURL
* other
);
375 // Returns a reference to a singleton empty GURL. This object is for callers
376 // who return references but don't have anything to return in some cases.
377 // This function may be called from any thread.
378 static const GURL
& EmptyGURL();
380 // Returns the inner URL of a nested URL [currently only non-null for
381 // filesystem: URLs].
382 const GURL
* inner_url() const {
383 return inner_url_
.get();
387 // Variant of the string parsing constructor that allows the caller to elect
388 // retain trailing whitespace, if any, on the passed URL spec but only if the
389 // scheme is one that allows trailing whitespace. The primary use-case is
390 // for data: URLs. In most cases, you want to use the single parameter
391 // constructor above.
392 enum RetainWhiteSpaceSelector
{ RETAIN_TRAILING_PATH_WHITEPACE
};
393 GURL(const std::string
& url_string
, RetainWhiteSpaceSelector
);
395 template<typename STR
>
396 void InitCanonical(const STR
& input_spec
, bool trim_path_end
);
398 void InitializeFromCanonicalSpec();
400 // Returns the substring of the input identified by the given component.
401 std::string
ComponentString(const url::Component
& comp
) const {
403 return std::string();
404 return std::string(spec_
, comp
.begin
, comp
.len
);
407 // The actual text of the URL, in canonical ASCII form.
410 // Set when the given URL is valid. Otherwise, we may still have a spec and
411 // components, but they may not identify valid resources (for example, an
412 // invalid port number, invalid characters in the scheme, etc.).
415 // Identified components of the canonical spec.
418 // Used for nested schemes [currently only filesystem:].
419 scoped_ptr
<GURL
> inner_url_
;
421 // TODO bug 684583: Add encoding for query params.
424 // Stream operator so GURL can be used in assertion statements.
425 URL_EXPORT
std::ostream
& operator<<(std::ostream
& out
, const GURL
& url
);
427 #endif // URL_GURL_H_