1use html5ever::local_name;
8use js::context::JSContext;
9use malloc_size_of::malloc_size_of_is_0;
10use net_traits::request::Referrer;
11use servo_constellation_traits::{LoadData, LoadOrigin, NavigationHistoryBehavior};
12use style::str::HTML_SPACE_CHARACTERS;
13
14use crate::dom::bindings::inheritance::Castable;
15use crate::dom::bindings::refcounted::Trusted;
16use crate::dom::bindings::str::DOMString;
17use crate::dom::element::referrer_policy_for_element;
18use crate::dom::html::htmlanchorelement::HTMLAnchorElement;
19use crate::dom::html::htmlareaelement::HTMLAreaElement;
20use crate::dom::html::htmlformelement::HTMLFormElement;
21use crate::dom::html::htmllinkelement::HTMLLinkElement;
22use crate::dom::node::NodeTraits;
23use crate::dom::types::Element;
24use crate::navigation::navigate;
25
26bitflags::bitflags! {
27 #[derive(Clone, Copy, Debug, PartialEq)]
32 pub(crate) struct LinkRelations: u32 {
33 const ALTERNATE = 1;
35
36 const AUTHOR = 1 << 1;
38
39 const BOOKMARK = 1 << 2;
41
42 const CANONICAL = 1 << 3;
44
45 const DNS_PREFETCH = 1 << 4;
47
48 const EXPECT = 1 << 5;
50
51 const EXTERNAL = 1 << 6;
53
54 const HELP = 1 << 7;
56
57 const ICON = 1 << 8;
59
60 const LICENSE = 1 << 9;
62
63 const NEXT = 1 << 10;
65
66 const MANIFEST = 1 << 11;
68
69 const MODULE_PRELOAD = 1 << 12;
71
72 const NO_FOLLOW = 1 << 13;
74
75 const NO_OPENER = 1 << 14;
77
78 const NO_REFERRER = 1 << 15;
80
81 const OPENER = 1 << 16;
83
84 const PING_BACK = 1 << 17;
86
87 const PRECONNECT = 1 << 18;
89
90 const PREFETCH = 1 << 19;
92
93 const PRELOAD = 1 << 20;
95
96 const PREV = 1 << 21;
98
99 const PRIVACY_POLICY = 1 << 22;
101
102 const SEARCH = 1 << 23;
104
105 const STYLESHEET = 1 << 24;
107
108 const TAG = 1 << 25;
110
111 const TERMS_OF_SERVICE = 1 << 26;
113 }
114}
115
116impl LinkRelations {
117 pub(crate) const ALLOWED_LINK_RELATIONS: Self = Self::ALTERNATE
121 .union(Self::CANONICAL)
122 .union(Self::AUTHOR)
123 .union(Self::DNS_PREFETCH)
124 .union(Self::EXPECT)
125 .union(Self::HELP)
126 .union(Self::ICON)
127 .union(Self::MANIFEST)
128 .union(Self::MODULE_PRELOAD)
129 .union(Self::LICENSE)
130 .union(Self::NEXT)
131 .union(Self::PING_BACK)
132 .union(Self::PRECONNECT)
133 .union(Self::PREFETCH)
134 .union(Self::PRELOAD)
135 .union(Self::PREV)
136 .union(Self::PRIVACY_POLICY)
137 .union(Self::SEARCH)
138 .union(Self::STYLESHEET)
139 .union(Self::TERMS_OF_SERVICE);
140
141 pub(crate) const ALLOWED_ANCHOR_OR_AREA_RELATIONS: Self = Self::ALTERNATE
146 .union(Self::AUTHOR)
147 .union(Self::BOOKMARK)
148 .union(Self::EXTERNAL)
149 .union(Self::HELP)
150 .union(Self::LICENSE)
151 .union(Self::NEXT)
152 .union(Self::NO_FOLLOW)
153 .union(Self::NO_OPENER)
154 .union(Self::NO_REFERRER)
155 .union(Self::OPENER)
156 .union(Self::PREV)
157 .union(Self::PRIVACY_POLICY)
158 .union(Self::SEARCH)
159 .union(Self::TAG)
160 .union(Self::TERMS_OF_SERVICE);
161
162 pub(crate) const ALLOWED_FORM_RELATIONS: Self = Self::EXTERNAL
166 .union(Self::HELP)
167 .union(Self::LICENSE)
168 .union(Self::NEXT)
169 .union(Self::NO_FOLLOW)
170 .union(Self::NO_OPENER)
171 .union(Self::NO_REFERRER)
172 .union(Self::OPENER)
173 .union(Self::PREV)
174 .union(Self::SEARCH);
175
176 pub(crate) fn for_element(element: &Element) -> Self {
185 let rel = element.get_attribute_string_value(&local_name!("rel"));
186
187 let mut relations = rel
188 .map(|attribute| {
189 attribute
190 .split(HTML_SPACE_CHARACTERS)
191 .map(Self::from_single_keyword)
192 .collect()
193 })
194 .unwrap_or(Self::empty());
195
196 let has_legacy_author_relation = element
198 .get_attribute_string_value(&local_name!("rev"))
199 .is_some_and(|rev| rev == "made");
200 if has_legacy_author_relation {
201 relations |= Self::AUTHOR;
202 }
203
204 let allowed_relations = if element.is::<HTMLLinkElement>() {
205 Self::ALLOWED_LINK_RELATIONS
206 } else if element.is::<HTMLAnchorElement>() || element.is::<HTMLAreaElement>() {
207 Self::ALLOWED_ANCHOR_OR_AREA_RELATIONS
208 } else if element.is::<HTMLFormElement>() {
209 Self::ALLOWED_FORM_RELATIONS
210 } else {
211 Self::empty()
212 };
213
214 relations & allowed_relations
215 }
216
217 fn from_single_keyword(keyword: &str) -> Self {
221 if keyword.eq_ignore_ascii_case("alternate") {
222 Self::ALTERNATE
223 } else if keyword.eq_ignore_ascii_case("canonical") {
224 Self::CANONICAL
225 } else if keyword.eq_ignore_ascii_case("author") {
226 Self::AUTHOR
227 } else if keyword.eq_ignore_ascii_case("bookmark") {
228 Self::BOOKMARK
229 } else if keyword.eq_ignore_ascii_case("dns-prefetch") {
230 Self::DNS_PREFETCH
231 } else if keyword.eq_ignore_ascii_case("expect") {
232 Self::EXPECT
233 } else if keyword.eq_ignore_ascii_case("external") {
234 Self::EXTERNAL
235 } else if keyword.eq_ignore_ascii_case("help") {
236 Self::HELP
237 } else if keyword.eq_ignore_ascii_case("icon") ||
238 keyword.eq_ignore_ascii_case("shortcut icon") ||
239 keyword.eq_ignore_ascii_case("apple-touch-icon")
240 {
241 Self::ICON
245 } else if keyword.eq_ignore_ascii_case("manifest") {
246 Self::MANIFEST
247 } else if keyword.eq_ignore_ascii_case("modulepreload") {
248 Self::MODULE_PRELOAD
249 } else if keyword.eq_ignore_ascii_case("license") ||
250 keyword.eq_ignore_ascii_case("copyright")
251 {
252 Self::LICENSE
253 } else if keyword.eq_ignore_ascii_case("next") {
254 Self::NEXT
255 } else if keyword.eq_ignore_ascii_case("nofollow") {
256 Self::NO_FOLLOW
257 } else if keyword.eq_ignore_ascii_case("noopener") {
258 Self::NO_OPENER
259 } else if keyword.eq_ignore_ascii_case("noreferrer") {
260 Self::NO_REFERRER
261 } else if keyword.eq_ignore_ascii_case("opener") {
262 Self::OPENER
263 } else if keyword.eq_ignore_ascii_case("pingback") {
264 Self::PING_BACK
265 } else if keyword.eq_ignore_ascii_case("preconnect") {
266 Self::PRECONNECT
267 } else if keyword.eq_ignore_ascii_case("prefetch") {
268 Self::PREFETCH
269 } else if keyword.eq_ignore_ascii_case("preload") {
270 Self::PRELOAD
271 } else if keyword.eq_ignore_ascii_case("prev") || keyword.eq_ignore_ascii_case("previous") {
272 Self::PREV
273 } else if keyword.eq_ignore_ascii_case("privacy-policy") {
274 Self::PRIVACY_POLICY
275 } else if keyword.eq_ignore_ascii_case("search") {
276 Self::SEARCH
277 } else if keyword.eq_ignore_ascii_case("stylesheet") {
278 Self::STYLESHEET
279 } else if keyword.eq_ignore_ascii_case("tag") {
280 Self::TAG
281 } else if keyword.eq_ignore_ascii_case("terms-of-service") {
282 Self::TERMS_OF_SERVICE
283 } else {
284 Self::empty()
285 }
286 }
287
288 pub(crate) fn get_element_noopener(&self, target_attribute_value: Option<&DOMString>) -> bool {
290 if self.contains(Self::NO_OPENER) || self.contains(Self::NO_REFERRER) {
292 return true;
293 }
294
295 let target_is_blank =
298 target_attribute_value.is_some_and(|target| target.to_ascii_lowercase() == "_blank");
299 if !self.contains(Self::OPENER) && target_is_blank {
300 return true;
301 }
302
303 false
305 }
306}
307
308malloc_size_of_is_0!(LinkRelations);
309
310fn valid_navigable_target_name(target: &DOMString) -> bool {
312 if target.is_empty() {
316 return false;
317 }
318 if target.contains_tab_or_newline() && target.contains("\u{003C}") {
319 return false;
320 }
321 if target.starts_with('\u{005F}') {
322 return false;
323 }
324 true
325}
326
327pub(crate) fn valid_navigable_target_name_or_keyword(target: &DOMString) -> bool {
329 if valid_navigable_target_name(target) {
332 return true;
333 }
334 let target = target.to_ascii_lowercase();
335 target == "_blank" || target == "_self" || target == "_parent" || target == "_top"
336}
337
338pub(crate) fn get_element_target(
340 subject: &Element,
341 target: Option<DOMString>,
342) -> Option<DOMString> {
343 assert!(
344 subject.is::<HTMLAreaElement>() ||
345 subject.is::<HTMLAnchorElement>() ||
346 subject.is::<HTMLFormElement>()
347 );
348
349 let target = target.or_else(|| {
351 let element_target = subject.get_string_attribute(&local_name!("target"));
356 if valid_navigable_target_name_or_keyword(&element_target) {
357 Some(element_target)
358 } else {
359 subject
362 .owner_document()
363 .target_base_element()
364 .and_then(|base_element| {
365 let element = base_element.upcast::<Element>();
366 if element.has_attribute(&local_name!("target")) {
367 Some(element.get_string_attribute(&local_name!("target")))
368 } else {
369 None
370 }
371 })
372 }
373 });
374 if let Some(ref target) = target &&
376 target.contains_tab_or_newline() &&
377 target.contains("\u{003C}")
378 {
379 return Some("_blank".into());
380 }
381 target
383}
384
385pub(crate) fn follow_hyperlink(
387 cx: &mut JSContext,
388 subject: &Element,
389 relations: LinkRelations,
390 hyperlink_suffix: Option<String>,
391) {
392 if subject.cannot_navigate() {
394 return;
395 }
396
397 let document = subject.owner_document();
406 let target_attribute_value =
407 if subject.is::<HTMLAreaElement>() || subject.is::<HTMLAnchorElement>() {
408 if document
409 .event_handler()
410 .alternate_action_keyboard_modifier_active()
411 {
412 Some("_blank".into())
413 } else {
414 get_element_target(subject, None)
415 }
416 } else {
417 None
418 };
419
420 let noopener = relations.get_element_noopener(target_attribute_value.as_ref());
428
429 let window = document.window();
433 let source = document.browsing_context().unwrap();
434 let (maybe_chosen, history_handling) = match target_attribute_value {
435 Some(name) => {
436 let (maybe_chosen, new) = source.choose_browsing_context(cx, name, noopener);
437 let history_handling = if new {
438 NavigationHistoryBehavior::Replace
439 } else {
440 NavigationHistoryBehavior::Push
441 };
442 (maybe_chosen, history_handling)
443 },
444 None => (Some(window.window_proxy()), NavigationHistoryBehavior::Push),
445 };
446
447 let chosen = match maybe_chosen {
449 Some(proxy) => proxy,
450 None => return,
451 };
452
453 if let Some(target_document) = chosen.document() {
454 let target_window = target_document.window();
455 let mut href = subject
459 .get_attribute_string_value(&local_name!("href"))
460 .unwrap();
461
462 if let Some(suffix) = hyperlink_suffix {
464 href.push_str(&suffix);
465 }
466 let Ok(url) = document.encoding_parse_a_url(&href) else {
467 return;
468 };
469
470 let referrer_policy = referrer_policy_for_element(subject);
472
473 let referrer = if relations.contains(LinkRelations::NO_REFERRER) {
476 Referrer::NoReferrer
477 } else {
478 target_window.as_global_scope().get_referrer()
479 };
480
481 let secure = target_window.as_global_scope().is_secure_context();
485 let load_data = LoadData::new(
486 LoadOrigin::Script(document.origin().snapshot()),
487 url,
488 document.about_base_url(),
489 Some(window.pipeline_id()),
490 referrer,
491 referrer_policy,
492 Some(secure),
493 Some(document.insecure_requests_policy()),
494 document.has_trustworthy_ancestor_origin(),
495 document.creation_sandboxing_flag_set_considering_parent_iframe(),
496 );
497 let target = Trusted::new(target_window);
498 let task = task!(navigate_follow_hyperlink: move |cx| {
499 debug!("following hyperlink to {}", load_data.url);
500 navigate(cx, &target.root(), history_handling, false, load_data);
501 });
502 target_document
503 .owner_global()
504 .task_manager()
505 .dom_manipulation_task_source()
506 .queue(task);
507 };
508}