XMLHttpRequest.open(). For xmlextras, r=heikki, sr=jband. For caps, r=bzbarsky, sr=jst 147754 - Add same-origin check to XMLSerializer. Patch by jst. r=mstoltz, sr=jband 113351 - Add same-origin check to XSL Include. Patch by peterv and jst, r=mstoltz, sr=rpotts 135267 - Add same-origin check to stylesheets included via LINK tags. r=dveditz, sr=scc git-svn-id: svn://10.0.0.236/trunk@123373 18797224-902f-48f8-a5cc-f745e15eee43
236 lines
7.2 KiB
C++
236 lines
7.2 KiB
C++
/* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
|
|
/* ***** BEGIN LICENSE BLOCK *****
|
|
* Version: NPL 1.1/GPL 2.0/LGPL 2.1
|
|
*
|
|
* The contents of this file are subject to the Netscape Public License
|
|
* Version 1.1 (the "License"); you may not use this file except in
|
|
* compliance with the License. You may obtain a copy of the License at
|
|
* http://www.mozilla.org/NPL/
|
|
*
|
|
* Software distributed under the License is distributed on an "AS IS" basis,
|
|
* WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
|
|
* for the specific language governing rights and limitations under the
|
|
* License.
|
|
*
|
|
* The Original Code is mozilla.org code.
|
|
*
|
|
* The Initial Developer of the Original Code is
|
|
* Netscape Communications Corporation.
|
|
* Portions created by the Initial Developer are Copyright (C) 1998-2000
|
|
* the Initial Developer. All Rights Reserved.
|
|
*
|
|
* Contributor(s):
|
|
* Mitch Stoltz <mstoltz@netscape.com>
|
|
*
|
|
*
|
|
* Alternatively, the contents of this file may be used under the terms of
|
|
* either the GNU General Public License Version 2 or later (the "GPL"), or
|
|
* the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
|
|
* in which case the provisions of the GPL or the LGPL are applicable instead
|
|
* of those above. If you wish to allow use of your version of this file only
|
|
* under the terms of either the GPL or the LGPL, and not to allow others to
|
|
* use your version of this file under the terms of the NPL, indicate your
|
|
* decision by deleting the provisions above and replace them with the notice
|
|
* and other provisions required by the GPL or the LGPL. If you do not delete
|
|
* the provisions above, a recipient may use your version of this file under
|
|
* the terms of any one of the NPL, the GPL or the LGPL.
|
|
*
|
|
* ***** END LICENSE BLOCK ***** */
|
|
|
|
/*describes principals for use in signed scripts*/
|
|
#include "nsCertificatePrincipal.h"
|
|
#include "prmem.h"
|
|
#include "nsCOMPtr.h"
|
|
#include "nsReadableUtils.h"
|
|
#include "nsCRT.h"
|
|
|
|
static NS_DEFINE_IID(kICertificatePrincipalIID, NS_ICERTIFICATEPRINCIPAL_IID);
|
|
|
|
NS_IMPL_QUERY_INTERFACE3_CI(nsCertificatePrincipal,
|
|
nsICertificatePrincipal,
|
|
nsIPrincipal,
|
|
nsISerializable)
|
|
NS_IMPL_CI_INTERFACE_GETTER3(nsCertificatePrincipal,
|
|
nsICertificatePrincipal,
|
|
nsIPrincipal,
|
|
nsISerializable)
|
|
|
|
NSBASEPRINCIPALS_ADDREF(nsCertificatePrincipal);
|
|
NSBASEPRINCIPALS_RELEASE(nsCertificatePrincipal);
|
|
|
|
//////////////////////////////////////////////////
|
|
// Methods implementing nsICertificatePrincipal //
|
|
//////////////////////////////////////////////////
|
|
NS_IMETHODIMP
|
|
nsCertificatePrincipal::GetCertificateID(char** aCertificateID)
|
|
{
|
|
*aCertificateID = nsCRT::strdup(mCertificateID);
|
|
return *aCertificateID ? NS_OK : NS_ERROR_OUT_OF_MEMORY;
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsCertificatePrincipal::GetCommonName(char** aCommonName)
|
|
{
|
|
*aCommonName = nsCRT::strdup(mCommonName);
|
|
return *aCommonName ? NS_OK : NS_ERROR_OUT_OF_MEMORY;
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsCertificatePrincipal::SetCommonName(const char* aCommonName)
|
|
{
|
|
PR_FREEIF(mCommonName);
|
|
mCommonName = nsCRT::strdup(aCommonName);
|
|
return mCommonName ? NS_OK : NS_ERROR_OUT_OF_MEMORY;
|
|
}
|
|
|
|
///////////////////////////////////////
|
|
// Methods implementing nsIPrincipal //
|
|
///////////////////////////////////////
|
|
NS_IMETHODIMP
|
|
nsCertificatePrincipal::CanEnableCapability(const char *capability,
|
|
PRInt16 *result)
|
|
{
|
|
if(NS_FAILED(nsBasePrincipal::CanEnableCapability(capability, result)))
|
|
return NS_ERROR_FAILURE;
|
|
if (*result == nsIPrincipal::ENABLE_UNKNOWN)
|
|
*result = ENABLE_WITH_USER_PERMISSION;
|
|
return NS_OK;
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsCertificatePrincipal::ToString(char **result)
|
|
{
|
|
return GetCertificateID(result);
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsCertificatePrincipal::ToUserVisibleString(char **result)
|
|
{
|
|
return GetCommonName(result);
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsCertificatePrincipal::GetPreferences(char** aPrefName, char** aID,
|
|
char** aGrantedList, char** aDeniedList)
|
|
{
|
|
if (!mPrefName) {
|
|
nsCAutoString s;
|
|
s.Assign("capability.principal.certificate.p");
|
|
s.AppendInt(mCapabilitiesOrdinal++);
|
|
s.Append(".id");
|
|
mPrefName = ToNewCString(s);
|
|
}
|
|
return nsBasePrincipal::GetPreferences(aPrefName, aID,
|
|
aGrantedList, aDeniedList);
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsCertificatePrincipal::Equals(nsIPrincipal * other, PRBool * result)
|
|
{
|
|
*result = PR_FALSE;
|
|
if (this == other) {
|
|
*result = PR_TRUE;
|
|
return NS_OK;
|
|
}
|
|
if (!other)
|
|
return NS_OK;
|
|
nsresult rv;
|
|
nsCOMPtr<nsICertificatePrincipal> otherCertificate =
|
|
do_QueryInterface(other, &rv);
|
|
if (NS_FAILED(rv))
|
|
return NS_OK;
|
|
//-- Compare cert ID's
|
|
char* otherID;
|
|
rv = otherCertificate->GetCertificateID(&otherID);
|
|
if (NS_FAILED(rv))
|
|
{
|
|
PR_FREEIF(otherID);
|
|
return rv;
|
|
}
|
|
*result = (PL_strcmp(mCertificateID, otherID) == 0);
|
|
PR_FREEIF(otherID);
|
|
return NS_OK;
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsCertificatePrincipal::HashValue(PRUint32 *result)
|
|
{
|
|
char* str;
|
|
if (NS_FAILED(ToString(&str)) || !str) return NS_ERROR_FAILURE;
|
|
*result = nsCRT::HashCode(str, nsnull);
|
|
nsCRT::free(str);
|
|
return NS_OK;
|
|
}
|
|
|
|
//////////////////////////////////////////
|
|
// Methods implementing nsISerializable //
|
|
//////////////////////////////////////////
|
|
|
|
NS_IMETHODIMP
|
|
nsCertificatePrincipal::Read(nsIObjectInputStream* aStream)
|
|
{
|
|
nsresult rv;
|
|
|
|
rv = nsBasePrincipal::Read(aStream);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
rv = aStream->ReadStringZ(&mCertificateID);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
rv = NS_ReadOptionalStringZ(aStream, &mCommonName);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
return NS_OK;
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsCertificatePrincipal::Write(nsIObjectOutputStream* aStream)
|
|
{
|
|
nsresult rv;
|
|
|
|
rv = nsBasePrincipal::Write(aStream);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
rv = aStream->WriteStringZ(mCertificateID);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
rv = NS_WriteOptionalStringZ(aStream, mCommonName);
|
|
if (NS_FAILED(rv)) return rv;
|
|
|
|
return NS_OK;
|
|
}
|
|
|
|
/////////////////////////////////////////////
|
|
// Constructor, Destructor, initialization //
|
|
/////////////////////////////////////////////
|
|
nsresult
|
|
nsCertificatePrincipal::InitFromPersistent(const char* aPrefName, const char* aCertID,
|
|
const char* aGrantedList, const char* aDeniedList)
|
|
{
|
|
if (NS_FAILED(Init(aCertID)))
|
|
return NS_ERROR_FAILURE;
|
|
|
|
return nsBasePrincipal::InitFromPersistent(aPrefName, aCertID,
|
|
aGrantedList, aDeniedList);
|
|
}
|
|
|
|
NS_IMETHODIMP
|
|
nsCertificatePrincipal::Init(const char* aCertificateID)
|
|
{
|
|
mCertificateID = nsCRT::strdup(aCertificateID);
|
|
if (!mCertificateID) return NS_ERROR_OUT_OF_MEMORY;
|
|
return NS_OK;
|
|
}
|
|
|
|
nsCertificatePrincipal::nsCertificatePrincipal() : mCertificateID(nsnull),
|
|
mCommonName(nsnull)
|
|
{
|
|
NS_INIT_ISUPPORTS();
|
|
}
|
|
|
|
nsCertificatePrincipal::~nsCertificatePrincipal()
|
|
{
|
|
PR_FREEIF(mCertificateID);
|
|
PR_FREEIF(mCommonName);
|
|
}
|