blob: 52a0c4615bf33141a43ab1810ac7a2b0f9892125 [file] [log] [blame]
// Copyright 2015 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#import "ios/web/common/origin_util.h"
#include "base/stl_util.h"
#include "net/base/url_util.h"
#include "url/gurl.h"
#include "url/url_util.h"
#if !defined(__has_feature) || !__has_feature(objc_arc)
#error "This file requires ARC support."
namespace web {
bool IsOriginSecure(const GURL& url) {
if (url.SchemeIsCryptographic() || url.SchemeIsFile())
return true;
// TODO( Also consider inner origins of blob: URLs
// (ideally, by deleting this function altogether and instead reusing
// //services/network/public/cpp/is_potentially_trustworthy.h (possibly after
// moving it to a location that can be consumed by //ios).
if (url.SchemeIsFileSystem() && url.inner_url() &&
IsOriginSecure(*url.inner_url())) {
return true;
if (base::Contains(url::GetSecureSchemes(), url.scheme()))
return true;
if (net::IsLocalhost(url))
return true;
return false;
} // namespace web