1use std::sync::Arc;
6
7use content_security_policy::{self as csp};
8use http::header::{AUTHORIZATION, HeaderName};
9use http::{HeaderMap, Method};
10use ipc_channel::ipc::{self, IpcReceiver, IpcSender};
11use ipc_channel::router::ROUTER;
12use log::error;
13use malloc_size_of_derive::MallocSizeOf;
14use mime::Mime;
15use parking_lot::Mutex;
16use rustc_hash::FxHashMap;
17use serde::{Deserialize, Serialize};
18use servo_base::generic_channel::GenericSharedMemory;
19use servo_base::id::{PipelineId, WebViewId};
20use servo_url::{ImmutableOrigin, ServoUrl};
21use tokio::sync::oneshot::Sender as TokioSender;
22use url::Position;
23use uuid::Uuid;
24
25use crate::ReferrerPolicy;
26use crate::blob_url_store::UrlWithBlobClaim;
27use crate::policy_container::{PolicyContainer, RequestPolicyContainer};
28use crate::pub_domains::is_same_site;
29use crate::resource_fetch_timing::ResourceTimingType;
30use crate::response::{RedirectTaint, Response};
31
32#[derive(Clone, Copy, Debug, Deserialize, Eq, Hash, MallocSizeOf, PartialEq, Serialize)]
33pub struct RequestId(pub Uuid);
35
36impl Default for RequestId {
37 fn default() -> Self {
38 Self(Uuid::new_v4())
39 }
40}
41
42#[derive(Clone, Copy, Debug, Deserialize, MallocSizeOf, PartialEq, Serialize)]
44pub enum Initiator {
45 None,
46 Download,
47 ImageSet,
48 Manifest,
49 XSLT,
50 Prefetch,
51 Link,
52}
53
54pub use csp::Destination;
56
57#[derive(Clone, Debug, Deserialize, MallocSizeOf, PartialEq, Serialize)]
59pub enum Origin {
60 Client,
61 Origin(ImmutableOrigin),
62}
63
64impl Origin {
65 pub fn is_opaque(&self) -> bool {
66 matches!(self, Origin::Origin(ImmutableOrigin::Opaque(_)))
67 }
68}
69
70#[derive(Clone, Debug, Deserialize, MallocSizeOf, PartialEq, Serialize)]
72pub enum Referrer {
73 NoReferrer,
74 Client(ServoUrl),
80 ReferrerUrl(ServoUrl),
81}
82
83#[derive(Clone, Debug, Deserialize, Eq, Hash, MallocSizeOf, PartialEq, Serialize)]
85pub enum RequestMode {
86 Navigate,
87 SameOrigin,
88 NoCors,
89 CorsMode,
90 WebSocket {
91 protocols: Vec<String>,
92 original_url: ServoUrl,
93 },
94}
95
96#[derive(Clone, Copy, Debug, Deserialize, Eq, Hash, MallocSizeOf, PartialEq, Serialize)]
98pub enum CredentialsMode {
99 Omit,
100 CredentialsSameOrigin,
101 Include,
102}
103
104#[derive(Clone, Copy, Debug, Deserialize, MallocSizeOf, PartialEq, Serialize)]
106pub enum CacheMode {
107 Default,
108 NoStore,
109 Reload,
110 NoCache,
111 ForceCache,
112 OnlyIfCached,
113}
114
115#[derive(Clone, Copy, Debug, Deserialize, MallocSizeOf, PartialEq, Serialize)]
117pub enum ServiceWorkersMode {
118 All,
119 None,
120}
121
122#[derive(Clone, Copy, Debug, Deserialize, MallocSizeOf, PartialEq, Serialize)]
124pub enum RedirectMode {
125 Follow,
126 Error,
127 Manual,
128}
129
130#[derive(Clone, Copy, Debug, Deserialize, MallocSizeOf, PartialEq, Serialize)]
132pub enum ResponseTainting {
133 Basic,
134 CorsTainting,
135 Opaque,
136}
137
138#[derive(Clone, Copy, Debug, Default, Deserialize, MallocSizeOf, PartialEq, Serialize)]
140pub enum InternalRequest {
141 Yes,
142 #[default]
143 No,
144}
145
146#[derive(Clone, Debug, Eq, Hash, Deserialize, MallocSizeOf, Serialize, PartialEq)]
148pub struct PreloadKey {
149 pub url: ServoUrl,
151 pub destination: Destination,
153 pub mode: RequestMode,
155 pub credentials_mode: CredentialsMode,
157}
158
159impl PreloadKey {
160 pub fn new(request: &RequestBuilder) -> Self {
161 Self {
162 url: request.url.url(),
163 destination: request.destination,
164 mode: request.mode.clone(),
165 credentials_mode: request.credentials_mode,
166 }
167 }
168}
169
170#[derive(PartialEq, Eq, Clone, Debug, Serialize, Deserialize, Hash, MallocSizeOf)]
171pub struct PreloadId(pub Uuid);
172
173impl Default for PreloadId {
174 fn default() -> Self {
175 Self(Uuid::new_v4())
176 }
177}
178
179#[derive(Debug, MallocSizeOf)]
181pub struct PreloadEntry {
182 pub integrity_metadata: String,
184 pub response: Option<Response>,
186 pub on_response_available: Option<TokioSender<Response>>,
188}
189
190impl PreloadEntry {
191 pub fn new(integrity_metadata: String) -> Self {
192 Self {
193 integrity_metadata,
194 response: None,
195 on_response_available: None,
196 }
197 }
198
199 pub fn with_response(&mut self, response: Response) {
201 if let Some(sender) = self.on_response_available.take() {
204 let _ = sender.send(response);
205 } else {
206 self.response = Some(response);
207 }
208 }
209}
210
211pub type PreloadedResources = FxHashMap<PreloadKey, PreloadId>;
212
213#[derive(Clone, Debug, Deserialize, MallocSizeOf, Serialize)]
215pub struct RequestClient {
216 pub preloaded_resources: PreloadedResources,
218 pub policy_container: PolicyContainer,
220 pub origin: Origin,
222 pub is_nested_browsing_context: bool,
224 pub insecure_requests_policy: InsecureRequestsPolicy,
226 pub has_trustworthy_ancestor_origin: bool,
228}
229
230#[derive(Clone, Copy, Default, MallocSizeOf, PartialEq)]
232pub enum SystemVisibilityState {
233 #[default]
234 Hidden,
235 Visible,
236}
237
238#[derive(Clone, Copy, Default, MallocSizeOf, PartialEq)]
240pub struct TraversableNavigable {
241 current_session_history_step: u8,
243 running_nested_apply_history_step: bool,
247 system_visibility_state: SystemVisibilityState,
249 is_created_by_web_content: bool,
251}
252
253#[derive(Clone, Copy, MallocSizeOf, PartialEq)]
255pub enum TraversableForUserPrompts {
256 NoTraversable,
257 Client,
258 TraversableNavigable(TraversableNavigable),
259}
260
261#[derive(Clone, Copy, Debug, Deserialize, Eq, Hash, MallocSizeOf, PartialEq, Serialize)]
263pub enum CorsSettings {
264 Anonymous,
265 UseCredentials,
266}
267
268impl CorsSettings {
269 pub fn from_enumerated_attribute(value: &str) -> CorsSettings {
271 match value.to_ascii_lowercase().as_str() {
272 "anonymous" => CorsSettings::Anonymous,
273 "use-credentials" => CorsSettings::UseCredentials,
274 _ => CorsSettings::Anonymous,
275 }
276 }
277}
278
279#[derive(Clone, Copy, Debug, Deserialize, MallocSizeOf, PartialEq, Serialize)]
281pub enum ParserMetadata {
282 Default,
283 ParserInserted,
284 NotParserInserted,
285}
286
287#[derive(Clone, Debug, Deserialize, MallocSizeOf, PartialEq, Serialize)]
289pub enum BodySource {
290 Null,
291 Object,
292}
293
294#[derive(Debug, Deserialize, Serialize)]
297pub enum BodyChunkResponse {
298 Chunk(GenericSharedMemory),
300 Done,
302 Error,
305}
306
307#[derive(Debug, Deserialize, Serialize)]
311pub enum BodyChunkRequest {
312 Connect(IpcSender<BodyChunkResponse>),
314 Extract(IpcReceiver<BodyChunkRequest>),
316 Chunk,
318 Done,
320 Error,
322}
323
324#[derive(Clone, Debug, Deserialize, MallocSizeOf, Serialize)]
330pub struct RequestBody {
331 #[conditional_malloc_size_of]
333 body_chunk_request_channel: Arc<Mutex<Option<IpcSender<BodyChunkRequest>>>>,
334 source: BodySource,
336 total_bytes: Option<usize>,
338}
339
340impl RequestBody {
341 pub fn new(
342 body_chunk_request_channel: IpcSender<BodyChunkRequest>,
343 source: BodySource,
344 total_bytes: Option<usize>,
345 ) -> Self {
346 RequestBody {
347 body_chunk_request_channel: Arc::new(Mutex::new(Some(body_chunk_request_channel))),
348 source,
349 total_bytes,
350 }
351 }
352
353 pub fn extract_source(&mut self) {
355 match self.source {
356 BodySource::Null => panic!("Null sources should never be re-directed."),
357 BodySource::Object => {
358 let (chan, port) = ipc::channel().unwrap();
359 let mut lock = self.body_chunk_request_channel.lock();
360 let Some(selfchan) = lock.as_mut() else {
361 error!(
362 "Could not re-extract the request body source because the body stream has already been closed."
363 );
364 return;
365 };
366 if let Err(error) = selfchan.send(BodyChunkRequest::Extract(port)) {
367 error!(
368 "Could not re-extract the request body source because the body stream has already been closed: {error}"
369 );
370 return;
371 }
372 *selfchan = chan;
373 },
374 }
375 }
376
377 pub fn clone_stream(&self) -> Arc<Mutex<Option<IpcSender<BodyChunkRequest>>>> {
379 self.body_chunk_request_channel.clone()
380 }
381
382 pub fn close_stream(&self) {
387 self.body_chunk_request_channel.lock().take();
388 }
389
390 pub fn source_is_null(&self) -> bool {
391 self.source == BodySource::Null
392 }
393
394 #[expect(clippy::len_without_is_empty)]
395 pub fn len(&self) -> Option<usize> {
396 self.total_bytes
397 }
398}
399
400trait RequestBodySize {
401 fn body_length(&self) -> usize;
402}
403
404impl RequestBodySize for Option<RequestBody> {
405 fn body_length(&self) -> usize {
406 self.as_ref()
407 .and_then(|body| body.len())
408 .unwrap_or_default()
409 }
410}
411
412#[derive(Clone, Copy, Debug, Deserialize, MallocSizeOf, PartialEq, Serialize)]
413pub enum InsecureRequestsPolicy {
414 DoNotUpgrade,
415 Upgrade,
416}
417
418pub trait RequestHeadersSize {
419 fn total_size(&self) -> usize;
420}
421
422impl RequestHeadersSize for HeaderMap {
423 fn total_size(&self) -> usize {
424 self.iter()
425 .map(|(name, value)| name.as_str().len() + value.len())
426 .sum()
427 }
428}
429
430#[derive(Clone, Debug, Deserialize, MallocSizeOf, Serialize)]
431pub struct RequestBuilder {
432 pub id: RequestId,
433
434 pub preload_id: Option<PreloadId>,
435
436 #[serde(
438 deserialize_with = "::hyper_serde::deserialize",
439 serialize_with = "::hyper_serde::serialize"
440 )]
441 pub method: Method,
442
443 pub url: UrlWithBlobClaim,
445
446 #[serde(
448 deserialize_with = "::hyper_serde::deserialize",
449 serialize_with = "::hyper_serde::serialize"
450 )]
451 pub headers: HeaderMap,
452
453 pub unsafe_request: bool,
455
456 pub body: Option<RequestBody>,
458 pub reload_navigation: bool,
461 pub history_navigation: bool,
464
465 pub service_workers_mode: ServiceWorkersMode,
467 pub client: Option<RequestClient>,
468 pub destination: Destination,
470 pub synchronous: bool,
471 pub mode: RequestMode,
472
473 pub cache_mode: CacheMode,
475
476 pub use_cors_preflight: bool,
478
479 pub keep_alive: bool,
481
482 pub credentials_mode: CredentialsMode,
484 pub use_url_credentials: bool,
485
486 pub origin: Origin,
488
489 pub policy_container: RequestPolicyContainer,
491
492 pub referrer: Referrer,
494
495 pub referrer_policy: ReferrerPolicy,
497 pub pipeline_id: Option<PipelineId>,
498 pub target_webview_id: Option<WebViewId>,
499
500 pub redirect_mode: RedirectMode,
502
503 pub integrity_metadata: String,
505
506 pub cryptographic_nonce_metadata: String,
508
509 pub url_list: Vec<ServoUrl>,
511
512 pub parser_metadata: ParserMetadata,
514
515 pub initiator: Initiator,
517 pub response_tainting: ResponseTainting,
518 pub crash: Option<String>,
520 pub is_internal_request: InternalRequest,
522}
523
524impl RequestBuilder {
525 pub fn new(
526 webview_id: Option<WebViewId>,
527 url: UrlWithBlobClaim,
528 referrer: Referrer,
529 ) -> RequestBuilder {
530 RequestBuilder {
531 id: RequestId::default(),
532 preload_id: None,
533 method: Method::GET,
534 url,
535 headers: HeaderMap::new(),
536 unsafe_request: false,
537 body: None,
538 reload_navigation: false,
539 history_navigation: false,
540 service_workers_mode: ServiceWorkersMode::All,
541 destination: Destination::None,
542 synchronous: false,
543 mode: RequestMode::NoCors,
544 cache_mode: CacheMode::Default,
545 use_cors_preflight: false,
546 keep_alive: false,
547 credentials_mode: CredentialsMode::CredentialsSameOrigin,
548 use_url_credentials: false,
549 origin: Origin::Client,
550 client: None,
551 policy_container: RequestPolicyContainer::default(),
552 referrer,
553 referrer_policy: ReferrerPolicy::EmptyString,
554 pipeline_id: None,
555 target_webview_id: webview_id,
556 redirect_mode: RedirectMode::Follow,
557 integrity_metadata: "".to_owned(),
558 cryptographic_nonce_metadata: "".to_owned(),
559 url_list: vec![],
560 parser_metadata: ParserMetadata::Default,
561 initiator: Initiator::None,
562 response_tainting: ResponseTainting::Basic,
563 is_internal_request: Default::default(),
564 crash: None,
565 }
566 }
567
568 pub fn preload_id(mut self, preload_id: PreloadId) -> RequestBuilder {
569 self.preload_id = Some(preload_id);
570 self
571 }
572
573 pub fn initiator(mut self, initiator: Initiator) -> RequestBuilder {
575 self.initiator = initiator;
576 self
577 }
578
579 pub fn method(mut self, method: Method) -> RequestBuilder {
581 self.method = method;
582 self
583 }
584
585 pub fn headers(mut self, headers: HeaderMap) -> RequestBuilder {
587 self.headers = headers;
588 self
589 }
590
591 pub fn unsafe_request(mut self, unsafe_request: bool) -> RequestBuilder {
593 self.unsafe_request = unsafe_request;
594 self
595 }
596
597 pub fn body(mut self, body: Option<RequestBody>) -> RequestBuilder {
599 self.body = body;
600 self
601 }
602
603 pub fn destination(mut self, destination: Destination) -> RequestBuilder {
605 self.destination = destination;
606 self
607 }
608
609 pub fn synchronous(mut self, synchronous: bool) -> RequestBuilder {
610 self.synchronous = synchronous;
611 self
612 }
613
614 pub fn mode(mut self, mode: RequestMode) -> RequestBuilder {
615 self.mode = mode;
616 self
617 }
618
619 pub fn use_cors_preflight(mut self, use_cors_preflight: bool) -> RequestBuilder {
621 self.use_cors_preflight = use_cors_preflight;
622 self
623 }
624
625 pub fn keep_alive(mut self, keep_alive: bool) -> RequestBuilder {
627 self.keep_alive = keep_alive;
628 self
629 }
630
631 pub fn credentials_mode(mut self, credentials_mode: CredentialsMode) -> RequestBuilder {
633 self.credentials_mode = credentials_mode;
634 self
635 }
636
637 pub fn use_url_credentials(mut self, use_url_credentials: bool) -> RequestBuilder {
638 self.use_url_credentials = use_url_credentials;
639 self
640 }
641
642 pub fn origin(mut self, origin: ImmutableOrigin) -> RequestBuilder {
644 self.origin = Origin::Origin(origin);
645 self
646 }
647
648 pub fn referrer_policy(mut self, referrer_policy: ReferrerPolicy) -> RequestBuilder {
650 self.referrer_policy = referrer_policy;
651 self
652 }
653
654 pub fn url_list(mut self, url_list: Vec<ServoUrl>) -> RequestBuilder {
656 self.url_list = url_list;
657 self
658 }
659
660 pub fn pipeline_id(mut self, pipeline_id: Option<PipelineId>) -> RequestBuilder {
661 self.pipeline_id = pipeline_id;
662 self
663 }
664
665 pub fn redirect_mode(mut self, redirect_mode: RedirectMode) -> RequestBuilder {
667 self.redirect_mode = redirect_mode;
668 self
669 }
670
671 pub fn integrity_metadata(mut self, integrity_metadata: String) -> RequestBuilder {
673 self.integrity_metadata = integrity_metadata;
674 self
675 }
676
677 pub fn cryptographic_nonce_metadata(mut self, nonce_metadata: String) -> RequestBuilder {
679 self.cryptographic_nonce_metadata = nonce_metadata;
680 self
681 }
682
683 pub fn parser_metadata(mut self, parser_metadata: ParserMetadata) -> RequestBuilder {
685 self.parser_metadata = parser_metadata;
686 self
687 }
688
689 pub fn response_tainting(mut self, response_tainting: ResponseTainting) -> RequestBuilder {
690 self.response_tainting = response_tainting;
691 self
692 }
693
694 pub fn crash(mut self, crash: Option<String>) -> Self {
695 self.crash = crash;
696 self
697 }
698
699 pub fn policy_container(mut self, policy_container: PolicyContainer) -> RequestBuilder {
701 self.policy_container = RequestPolicyContainer::PolicyContainer(policy_container);
702 self
703 }
704
705 pub fn client(mut self, client: RequestClient) -> RequestBuilder {
707 self.client = Some(client);
708 self
709 }
710
711 pub fn service_workers_mode(
713 mut self,
714 service_workers_mode: ServiceWorkersMode,
715 ) -> RequestBuilder {
716 self.service_workers_mode = service_workers_mode;
717 self
718 }
719
720 pub fn cache_mode(mut self, cache_mode: CacheMode) -> RequestBuilder {
722 self.cache_mode = cache_mode;
723 self
724 }
725
726 pub fn is_internal_request(mut self, is_internal_request: InternalRequest) -> RequestBuilder {
727 self.is_internal_request = is_internal_request;
728 self
729 }
730
731 pub fn build(self) -> Request {
732 let mut request = Request::new(
733 self.id,
734 self.url.clone(),
735 Some(self.origin),
736 self.referrer,
737 self.pipeline_id,
738 self.target_webview_id,
739 );
740 request.preload_id = self.preload_id;
741 request.initiator = self.initiator;
742 request.method = self.method;
743 request.headers = self.headers;
744 request.unsafe_request = self.unsafe_request;
745 request.body = self.body;
746 request.reload_navigation = self.reload_navigation;
747 request.history_navigation = self.history_navigation;
748 request.service_workers_mode = self.service_workers_mode;
749 request.destination = self.destination;
750 request.synchronous = self.synchronous;
751 request.mode = self.mode;
752 request.use_cors_preflight = self.use_cors_preflight;
753 request.keep_alive = self.keep_alive;
754 request.credentials_mode = self.credentials_mode;
755 request.use_url_credentials = self.use_url_credentials;
756 request.cache_mode = self.cache_mode;
757 request.referrer_policy = self.referrer_policy;
758 request.redirect_mode = self.redirect_mode;
759 let mut url_list: Vec<_> = self
760 .url_list
761 .into_iter()
762 .map(UrlWithBlobClaim::from_url_without_having_claimed_blob)
763 .collect();
764 if url_list.is_empty() {
765 url_list.push(self.url);
766 }
767 request.redirect_count = url_list.len() as u32 - 1;
768 request.url_list = url_list;
769 request.integrity_metadata = self.integrity_metadata;
770 request.cryptographic_nonce_metadata = self.cryptographic_nonce_metadata;
771 request.parser_metadata = self.parser_metadata;
772 request.response_tainting = self.response_tainting;
773 request.crash = self.crash;
774 request.client = self.client;
775 request.policy_container = self.policy_container;
776 request.is_internal_request = self.is_internal_request;
777 request
778 }
779
780 pub fn keep_alive_body_length(&self) -> u64 {
782 assert!(self.keep_alive);
783 self.body.body_length() as u64
784 }
785}
786
787#[derive(Clone, MallocSizeOf)]
790pub struct Request {
791 pub id: RequestId,
795 pub preload_id: Option<PreloadId>,
796 pub method: Method,
798 pub local_urls_only: bool,
800 pub headers: HeaderMap,
802 pub unsafe_request: bool,
804 pub body: Option<RequestBody>,
806 pub reload_navigation: bool,
809 pub history_navigation: bool,
812 pub client: Option<RequestClient>,
814 pub traversable_for_user_prompts: TraversableForUserPrompts,
816 pub target_webview_id: Option<WebViewId>,
817 pub keep_alive: bool,
819 pub service_workers_mode: ServiceWorkersMode,
821 pub initiator: Initiator,
823 pub destination: Destination,
825 pub origin: Origin,
828 pub referrer: Referrer,
830 pub referrer_policy: ReferrerPolicy,
832 pub pipeline_id: Option<PipelineId>,
833 pub synchronous: bool,
835 pub mode: RequestMode,
837 pub use_cors_preflight: bool,
839 pub credentials_mode: CredentialsMode,
841 pub use_url_credentials: bool,
843 pub cache_mode: CacheMode,
845 pub redirect_mode: RedirectMode,
847 pub integrity_metadata: String,
849 pub cryptographic_nonce_metadata: String,
851 pub url_list: Vec<UrlWithBlobClaim>,
853 pub redirect_count: u32,
855 pub response_tainting: ResponseTainting,
857 pub parser_metadata: ParserMetadata,
859 pub policy_container: RequestPolicyContainer,
861 pub crash: Option<String>,
863 pub is_internal_request: InternalRequest,
865}
866
867impl Request {
868 pub fn new(
869 id: RequestId,
870 url: UrlWithBlobClaim,
871 origin: Option<Origin>,
872 referrer: Referrer,
873 pipeline_id: Option<PipelineId>,
874 webview_id: Option<WebViewId>,
875 ) -> Request {
876 Request {
877 id,
878 preload_id: None,
879 method: Method::GET,
880 local_urls_only: false,
881 headers: HeaderMap::new(),
882 unsafe_request: false,
883 body: None,
884 reload_navigation: false,
885 history_navigation: false,
886 client: None,
887 traversable_for_user_prompts: TraversableForUserPrompts::Client,
888 keep_alive: false,
889 service_workers_mode: ServiceWorkersMode::All,
890 initiator: Initiator::None,
891 destination: Destination::None,
892 origin: origin.unwrap_or(Origin::Client),
893 referrer,
894 referrer_policy: ReferrerPolicy::EmptyString,
895 pipeline_id,
896 target_webview_id: webview_id,
897 synchronous: false,
898 mode: RequestMode::NoCors,
899 use_cors_preflight: false,
900 credentials_mode: CredentialsMode::CredentialsSameOrigin,
901 use_url_credentials: false,
902 cache_mode: CacheMode::Default,
903 redirect_mode: RedirectMode::Follow,
904 integrity_metadata: String::new(),
905 cryptographic_nonce_metadata: String::new(),
906 url_list: vec![url],
907 parser_metadata: ParserMetadata::Default,
908 redirect_count: 0,
909 response_tainting: ResponseTainting::Basic,
910 policy_container: RequestPolicyContainer::Client,
911 is_internal_request: Default::default(),
912 crash: None,
913 }
914 }
915
916 pub fn url(&self) -> ServoUrl {
918 self.url_list.first().unwrap().url()
919 }
920
921 pub fn url_with_blob_claim(&self) -> UrlWithBlobClaim {
922 self.url_list.first().unwrap().clone()
923 }
924
925 pub fn original_url(&self) -> ServoUrl {
926 match self.mode {
927 RequestMode::WebSocket {
928 protocols: _,
929 ref original_url,
930 } => original_url.clone(),
931 _ => self.url(),
932 }
933 }
934
935 pub fn current_url(&self) -> ServoUrl {
937 self.current_url_with_blob_claim().url()
938 }
939
940 pub fn current_url_with_blob_claim(&self) -> UrlWithBlobClaim {
942 self.url_list.last().unwrap().clone()
943 }
944
945 pub fn current_url_mut(&mut self) -> &mut ServoUrl {
947 self.url_list.last_mut().unwrap()
948 }
949
950 pub fn is_navigation_request(&self) -> bool {
952 matches!(
953 self.destination,
954 Destination::Document |
955 Destination::Embed |
956 Destination::Frame |
957 Destination::IFrame |
958 Destination::Object
959 )
960 }
961
962 pub fn is_subresource_request(&self) -> bool {
964 matches!(
965 self.destination,
966 Destination::Audio |
967 Destination::Font |
968 Destination::Image |
969 Destination::Manifest |
970 Destination::Script |
971 Destination::Style |
972 Destination::Track |
973 Destination::Video |
974 Destination::Xslt |
975 Destination::None
976 )
977 }
978
979 pub fn timing_type(&self) -> ResourceTimingType {
980 if self.is_navigation_request() {
981 ResourceTimingType::Navigation
982 } else {
983 ResourceTimingType::Resource
984 }
985 }
986
987 pub fn populate_request_from_client(&mut self) {
989 if self.traversable_for_user_prompts == TraversableForUserPrompts::Client {
991 self.traversable_for_user_prompts = TraversableForUserPrompts::NoTraversable;
993 if self.client.is_some() {
995 self.traversable_for_user_prompts =
1000 TraversableForUserPrompts::TraversableNavigable(Default::default());
1001 }
1002 }
1003 if self.origin == Origin::Client {
1005 let Some(client) = self.client.as_ref() else {
1006 unreachable!();
1008 };
1009 self.origin = client.origin.clone();
1011 }
1012 if matches!(self.policy_container, RequestPolicyContainer::Client) {
1014 if let Some(client) = self.client.as_ref() {
1017 self.policy_container =
1018 RequestPolicyContainer::PolicyContainer(client.policy_container.clone());
1019 } else {
1020 self.policy_container =
1022 RequestPolicyContainer::PolicyContainer(PolicyContainer::default());
1023 }
1024 }
1025 }
1026
1027 pub fn keep_alive_body_length(&self) -> u64 {
1029 assert!(self.keep_alive);
1030 self.body.body_length() as u64
1031 }
1032
1033 pub fn total_request_length(&self) -> usize {
1035 let mut total_request_length = self.url()[..Position::AfterQuery].len();
1037 total_request_length += self
1039 .referrer
1040 .to_url()
1041 .map(|url| url.as_str().len())
1042 .unwrap_or_default();
1043 total_request_length += self.headers.total_size();
1046 total_request_length += self.body.body_length();
1048 total_request_length
1050 }
1051
1052 pub fn redirect_taint_for_request(&self) -> RedirectTaint {
1054 let Origin::Origin(request_origin) = &self.origin else {
1056 unreachable!("origin cannot be \"client\" at this point in time");
1057 };
1058
1059 let mut last_url = None;
1061
1062 let mut taint = RedirectTaint::SameOrigin;
1064
1065 for url in &self.url_list {
1067 let Some(last_url) = &mut last_url else {
1069 last_url = Some(url);
1070 continue;
1071 };
1072
1073 if !is_same_site(&url.origin(), &last_url.origin()) &&
1076 !is_same_site(request_origin, &last_url.origin())
1077 {
1078 return RedirectTaint::CrossSite;
1079 }
1080
1081 if url.origin() != last_url.origin() && *request_origin != last_url.origin() {
1084 taint = RedirectTaint::SameSite;
1085 }
1086
1087 *last_url = url;
1089 }
1090
1091 taint
1093 }
1094}
1095
1096impl Referrer {
1097 pub fn to_url(&self) -> Option<&ServoUrl> {
1098 match *self {
1099 Referrer::NoReferrer => None,
1100 Referrer::Client(ref url) => Some(url),
1101 Referrer::ReferrerUrl(ref url) => Some(url),
1102 }
1103 }
1104}
1105
1106fn is_cors_unsafe_request_header_byte(value: &u8) -> bool {
1110 matches!(value,
1111 0x00..=0x08 |
1112 0x10..=0x19 |
1113 0x22 |
1114 0x28 |
1115 0x29 |
1116 0x3A |
1117 0x3C |
1118 0x3E |
1119 0x3F |
1120 0x40 |
1121 0x5B |
1122 0x5C |
1123 0x5D |
1124 0x7B |
1125 0x7D |
1126 0x7F
1127 )
1128}
1129
1130fn is_cors_safelisted_request_accept(value: &[u8]) -> bool {
1133 !(value.iter().any(is_cors_unsafe_request_header_byte))
1134}
1135
1136fn is_cors_safelisted_language(value: &[u8]) -> bool {
1139 value.iter().all(|&x| {
1140 matches!(x,
1141 0x30..=0x39 |
1142 0x41..=0x5A |
1143 0x61..=0x7A |
1144 0x20 |
1145 0x2A |
1146 0x2C |
1147 0x2D |
1148 0x2E |
1149 0x3B |
1150 0x3D
1151 )
1152 })
1153}
1154
1155pub fn is_cors_safelisted_request_content_type(value: &[u8]) -> bool {
1158 if value.iter().any(is_cors_unsafe_request_header_byte) {
1160 return false;
1161 }
1162 let value_string = if let Ok(s) = std::str::from_utf8(value) {
1164 s
1165 } else {
1166 return false;
1167 };
1168 let value_mime_result: Result<Mime, _> = value_string.parse();
1169 match value_mime_result {
1170 Err(_) => false, Ok(value_mime) => match (value_mime.type_(), value_mime.subtype()) {
1172 (mime::APPLICATION, mime::WWW_FORM_URLENCODED) |
1173 (mime::MULTIPART, mime::FORM_DATA) |
1174 (mime::TEXT, mime::PLAIN) => true,
1175 _ => false, },
1177 }
1178}
1179
1180pub fn is_cors_safelisted_request_header<N: AsRef<str>, V: AsRef<[u8]>>(
1184 name: &N,
1185 value: &V,
1186) -> bool {
1187 let name: &str = name.as_ref();
1188 let value: &[u8] = value.as_ref();
1189 if value.len() > 128 {
1190 return false;
1191 }
1192 match name {
1193 "accept" => is_cors_safelisted_request_accept(value),
1194 "accept-language" | "content-language" => is_cors_safelisted_language(value),
1195 "content-type" => is_cors_safelisted_request_content_type(value),
1196 "range" => is_cors_safelisted_request_range(value),
1197 _ => false,
1198 }
1199}
1200
1201pub fn is_cors_safelisted_request_range(value: &[u8]) -> bool {
1202 if let Ok(value_str) = std::str::from_utf8(value) {
1203 return validate_range_header(value_str);
1204 }
1205 false
1206}
1207
1208fn validate_range_header(value: &str) -> bool {
1209 let trimmed = value.trim();
1210 if !trimmed.starts_with("bytes=") {
1211 return false;
1212 }
1213
1214 if let Some(range) = trimmed.strip_prefix("bytes=") {
1215 let mut parts = range.split('-');
1216 let start = parts.next();
1217 let end = parts.next();
1218
1219 if let Some(start) = start &&
1220 let Ok(start_num) = start.parse::<u64>()
1221 {
1222 return match end {
1223 Some(e) if !e.is_empty() => {
1224 e.parse::<u64>().is_ok_and(|end_num| start_num <= end_num)
1225 },
1226 _ => true,
1227 };
1228 }
1229 }
1230 false
1231}
1232
1233pub fn is_cors_safelisted_method(method: &Method) -> bool {
1235 matches!(*method, Method::GET | Method::HEAD | Method::POST)
1236}
1237
1238pub fn is_cors_non_wildcard_request_header_name(name: &HeaderName) -> bool {
1240 name == AUTHORIZATION
1241}
1242
1243pub fn get_cors_unsafe_header_names(headers: &HeaderMap) -> Vec<HeaderName> {
1245 let mut unsafe_names: Vec<&HeaderName> = vec![];
1247 let mut potentillay_unsafe_names: Vec<&HeaderName> = vec![];
1249 let mut safelist_value_size = 0;
1251
1252 for (name, value) in headers.iter() {
1254 if !is_cors_safelisted_request_header(&name, &value) {
1255 unsafe_names.push(name);
1256 } else {
1257 potentillay_unsafe_names.push(name);
1258 safelist_value_size += value.as_ref().len();
1259 }
1260 }
1261
1262 if safelist_value_size > 1024 {
1264 unsafe_names.extend_from_slice(&potentillay_unsafe_names);
1265 }
1266
1267 convert_header_names_to_sorted_lowercase_set(unsafe_names)
1269}
1270
1271pub fn convert_header_names_to_sorted_lowercase_set(
1273 header_names: Vec<&HeaderName>,
1274) -> Vec<HeaderName> {
1275 let mut ordered_set = header_names.to_vec();
1278 ordered_set.sort_by(|a, b| a.as_str().partial_cmp(b.as_str()).unwrap());
1279 ordered_set.dedup();
1280 ordered_set.into_iter().cloned().collect()
1281}
1282
1283pub fn create_request_body_with_content(content: String) -> RequestBody {
1284 let content_bytes = GenericSharedMemory::from_vec(content.into_bytes());
1285 let content_len = content_bytes.len();
1286
1287 let (chunk_request_sender, chunk_request_receiver) = ipc::channel().unwrap();
1288 ROUTER.add_typed_route(
1289 chunk_request_receiver,
1290 Box::new(move |message| {
1291 let request = message.unwrap();
1292 if let BodyChunkRequest::Connect(sender) = request {
1293 let _ = sender.send(BodyChunkResponse::Chunk(content_bytes.clone()));
1294 let _ = sender.send(BodyChunkResponse::Done);
1295 }
1296 }),
1297 );
1298
1299 RequestBody::new(chunk_request_sender, BodySource::Object, Some(content_len))
1300}