ios/web/common/origin_util.mm

// Copyright 2015 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#import "ios/web/common/origin_util.h"

#include "base/stl_util.h"
#include "net/base/url_util.h"
#include "url/gurl.h"
#include "url/url_util.h"

#if !defined(__has_feature) || !__has_feature(objc_arc)
#error "This file requires ARC support."
#endif

namespace web {

bool IsOriginSecure(const GURL& url) {
  if (url.SchemeIsCryptographic() || url.SchemeIsFile())
    return true;

  // TODO(crbug.com/939077): Also consider inner origins of blob: URLs
  // (ideally, by deleting this function altogether and instead reusing
  // //services/network/public/cpp/is_potentially_trustworthy.h (possibly after
  // moving it to a location that can be consumed by //ios).
  if (url.SchemeIsFileSystem() && url.inner_url() &&
      IsOriginSecure(*url.inner_url())) {
    return true;
  }

  if (base::ContainsValue(url::GetSecureSchemes(), url.scheme()))
    return true;

  if (net::IsLocalhost(url))
    return true;

  return false;
}

}  // namespace web