components/autofill/core/common/autofill_data_validation.cc

// Copyright 2014 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "components/autofill/core/common/autofill_data_validation.h"

#include "components/autofill/core/common/form_data.h"
#include "components/autofill/core/common/form_field_data.h"
#include "components/autofill/core/common/password_form_fill_data.h"
#include "url/gurl.h"

namespace autofill {

const size_t kMaxDataLength = 1024;

// Allow enough space for all countries (roughly 300 distinct values) and all
// timezones (roughly 400 distinct values), plus some extra wiggle room.
const size_t kMaxListSize = 512;

bool IsValidString(const std::string& str) {
  return str.size() <= kMaxDataLength;
}

bool IsValidString16(const base::string16& str) {
  return str.size() <= kMaxDataLength;
}

bool IsValidGURL(const GURL& url) {
  return url.is_empty() || url.is_valid();
}

bool IsValidFormFieldData(const FormFieldData& field) {
  return IsValidString16(field.label) &&
         IsValidString16(field.name) &&
         IsValidString16(field.value) &&
         IsValidString(field.form_control_type) &&
         IsValidString(field.autocomplete_attribute) &&
         IsValidString16Vector(field.option_contents);
}

bool IsValidFormData(const FormData& form) {
  if (!IsValidString16(form.name) ||
      !IsValidGURL(form.origin) ||
      !IsValidGURL(form.action))
    return false;

  if (form.fields.size() > kMaxListSize)
    return false;

  for (const FormFieldData& field : form.fields) {
    if (!IsValidFormFieldData(field))
      return false;
  }

  return true;
}

bool IsValidPasswordFormFillData(const PasswordFormFillData& form) {
  if (!IsValidString16(form.name) || !IsValidGURL(form.origin) ||
      !IsValidGURL(form.action) || !IsValidFormFieldData(form.username_field) ||
      !IsValidFormFieldData(form.password_field) ||
      !IsValidString(form.preferred_realm)) {
    return false;
  }

  for (const auto& it : form.additional_logins) {
    if (!IsValidString16(it.first) ||
        !IsValidString16(it.second.password) ||
        !IsValidString(it.second.realm))
      return false;
  }

  return true;
}

bool IsValidString16Vector(const std::vector<base::string16>& v) {
  if (v.size() > kMaxListSize)
    return false;

  for (const base::string16& str : v) {
    if (!IsValidString16(str))
      return false;
  }

  return true;
}

bool IsValidFormDataVector(const std::vector<FormData>& v) {
  if (v.size() > kMaxListSize)
    return false;

  for (const FormData& form : v) {
    if (!IsValidFormData(form))
      return false;
  }

  return true;
}

}  // namespace autofill