08766d47f4
When an HTTPS response carries a Strict-Transport-Security header, the received policy is now respected. Subsequent HTTP requests to a known HSTS host are upgraded to HTTPS before the fetch algorithm makes further decisions such as CORS and mixed content. Fixes tpexpress.co.uk, where an XHR redirects HTTPS -> HTTP -> HTTPS, relying on a HSTS policy received on the document response to avoid the CORS failure.
154 lines
3.8 KiB
C++
154 lines
3.8 KiB
C++
/*
|
|
* Copyright (c) 2023, Andrew Kaster <akaster@serenityos.org>
|
|
*
|
|
* SPDX-License-Identifier: BSD-2-Clause
|
|
*/
|
|
|
|
#include <LibJS/Runtime/VM.h>
|
|
#include <LibWeb/Bindings/MainThreadVM.h>
|
|
#include <LibWeb/HTML/WorkerAgentTypes.h>
|
|
#include <WebWorker/ConnectionFromClient.h>
|
|
#include <WebWorker/PageHost.h>
|
|
|
|
namespace WebWorker {
|
|
|
|
GC_DEFINE_ALLOCATOR(PageHost);
|
|
|
|
GC::Ref<PageHost> PageHost::create(JS::VM& vm, ConnectionFromClient& client)
|
|
{
|
|
return vm.heap().allocate<PageHost>(client);
|
|
}
|
|
|
|
PageHost::~PageHost() = default;
|
|
|
|
Web::Page& PageHost::page()
|
|
{
|
|
return *m_page;
|
|
}
|
|
|
|
Web::Page const& PageHost::page() const
|
|
{
|
|
return *m_page;
|
|
}
|
|
|
|
Gfx::Palette PageHost::palette() const
|
|
{
|
|
return Gfx::Palette(*m_palette_impl);
|
|
}
|
|
|
|
void PageHost::setup_palette()
|
|
{
|
|
// FIXME: We don't actually need a palette :thonk:
|
|
auto buffer_or_error = Core::AnonymousBuffer::create_with_size(sizeof(Gfx::SystemTheme));
|
|
VERIFY(!buffer_or_error.is_error());
|
|
auto buffer = buffer_or_error.release_value();
|
|
auto* theme = buffer.data<Gfx::SystemTheme>();
|
|
theme->color[to_underlying(Gfx::ColorRole::Window)] = Color(Color::Magenta).value();
|
|
theme->color[to_underlying(Gfx::ColorRole::WindowText)] = Color(Color::Cyan).value();
|
|
m_palette_impl = Gfx::PaletteImpl::create_with_anonymous_buffer(buffer);
|
|
}
|
|
|
|
bool PageHost::is_connection_open() const
|
|
{
|
|
return m_client.is_open();
|
|
}
|
|
|
|
Web::DevicePixelRect PageHost::screen_rect() const
|
|
{
|
|
return {};
|
|
}
|
|
|
|
double PageHost::zoom_level() const
|
|
{
|
|
return 1.0;
|
|
}
|
|
|
|
double PageHost::device_pixel_ratio() const
|
|
{
|
|
return 1.0;
|
|
}
|
|
|
|
double PageHost::device_pixels_per_css_pixel() const
|
|
{
|
|
return 1.0;
|
|
}
|
|
|
|
Web::CSS::PreferredColorScheme PageHost::preferred_color_scheme() const
|
|
{
|
|
return Web::CSS::PreferredColorScheme::Auto;
|
|
}
|
|
|
|
Web::CSS::PreferredContrast PageHost::preferred_contrast() const
|
|
{
|
|
return Web::CSS::PreferredContrast::Auto;
|
|
}
|
|
|
|
Web::CSS::PreferredMotion PageHost::preferred_motion() const
|
|
{
|
|
return Web::CSS::PreferredMotion::Auto;
|
|
}
|
|
|
|
HTTP::Cookie::VersionedCookie PageHost::page_did_request_cookie(URL::URL const& url, HTTP::Cookie::Source source)
|
|
{
|
|
return m_client.did_request_cookie(url, source);
|
|
}
|
|
|
|
void PageHost::page_did_store_hsts_policy(String const& domain, HTTP::HSTS::ParsedHSTSPolicy const& policy)
|
|
{
|
|
m_client.async_did_store_hsts_policy(domain, policy);
|
|
}
|
|
|
|
bool PageHost::page_did_is_known_hsts_host(String const& domain)
|
|
{
|
|
return m_client.did_is_known_hsts_host(domain);
|
|
}
|
|
|
|
void PageHost::page_did_report_worker_exception(String const& message, String const& filename, u32 lineno, u32 colno)
|
|
{
|
|
m_client.async_did_report_worker_exception(message, filename, lineno, colno);
|
|
}
|
|
|
|
void PageHost::page_did_post_broadcast_channel_message(Web::HTML::BroadcastChannelMessage const& message)
|
|
{
|
|
m_client.async_did_post_broadcast_channel_message(message);
|
|
}
|
|
|
|
void PageHost::request_file(Web::FileRequest request)
|
|
{
|
|
m_client.request_file(move(request));
|
|
}
|
|
|
|
Web::HTML::WorkerAgentId PageHost::start_worker_agent(Web::HTML::WorkerAgentStartRequest&& request)
|
|
{
|
|
return m_client.start_worker_agent(move(request));
|
|
}
|
|
|
|
void PageHost::close_worker_agent(Web::HTML::WorkerAgentId agent_id, Web::HTML::WorkerAgentOwnerToken owner_token)
|
|
{
|
|
m_client.async_close_worker_agent(agent_id, owner_token);
|
|
}
|
|
|
|
void PageHost::did_finish_loading_worker_script(bool worker_is_secure_context)
|
|
{
|
|
m_client.async_did_finish_loading_worker_script(worker_is_secure_context);
|
|
}
|
|
|
|
void PageHost::did_fail_loading_worker_script()
|
|
{
|
|
m_client.async_did_fail_loading_worker_script();
|
|
}
|
|
|
|
PageHost::PageHost(ConnectionFromClient& client)
|
|
: m_client(client)
|
|
, m_page(Web::Page::create(Web::Bindings::main_thread_vm(), *this))
|
|
{
|
|
setup_palette();
|
|
}
|
|
|
|
void PageHost::visit_edges(JS::Cell::Visitor& visitor)
|
|
{
|
|
Base::visit_edges(visitor);
|
|
visitor.visit(m_page);
|
|
}
|
|
|
|
}
|