1 | /* |
2 | * Copyright (C) 2010 Google Inc. All rights reserved. |
3 | * |
4 | * Redistribution and use in source and binary forms, with or without |
5 | * modification, are permitted provided that the following conditions are |
6 | * met: |
7 | * |
8 | * * Redistributions of source code must retain the above copyright |
9 | * notice, this list of conditions and the following disclaimer. |
10 | * * Redistributions in binary form must reproduce the above |
11 | * copyright notice, this list of conditions and the following disclaimer |
12 | * in the documentation and/or other materials provided with the |
13 | * distribution. |
14 | * * Neither the name of Google Inc. nor the names of its |
15 | * contributors may be used to endorse or promote products derived from |
16 | * this software without specific prior written permission. |
17 | * |
18 | * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS |
19 | * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT |
20 | * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR |
21 | * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT |
22 | * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, |
23 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT |
24 | * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
25 | * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
26 | * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
27 | * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE |
28 | * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
29 | */ |
30 | |
31 | #pragma once |
32 | |
33 | #include <wtf/URL.h> |
34 | |
35 | namespace WebCore { |
36 | |
37 | class SecurityOrigin; |
38 | |
39 | // Blob URLs are of the form |
40 | // blob:%escaped_origin%/%UUID% |
41 | // For public urls, the origin of the host page is encoded in the URL value to |
42 | // allow easy lookup of the origin when security checks need to be performed. |
43 | // When loading blobs via ResourceHandle or when reading blobs via FileReader |
44 | // the loader conducts security checks that examine the origin of host page |
45 | // encoded in the public blob url. The origin baked into internal blob urls |
46 | // is a simple constant value, "blobinternal://", internal urls should not |
47 | // be used with ResourceHandle or FileReader. |
48 | class BlobURL { |
49 | public: |
50 | static URL createPublicURL(SecurityOrigin*); |
51 | static URL createInternalURL(); |
52 | static String getOrigin(const URL&); |
53 | static String getIdentifier(const URL&); |
54 | |
55 | private: |
56 | static URL createBlobURL(const String& originString); |
57 | BlobURL() { } |
58 | }; |
59 | |
60 | } // namespace WebCore |
61 | |