eliott/servo
1
0
Fork 0
mirror of https://github.com/servo/servo synced 2026-04-27 18:07:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

script: Implement base-uri CSP check (#42272)

Browse Source 
Testing: `./mach test-wpt /content-security-policy/base-uri`
Fixes: #42261

Signed-off-by: WaterWhisperer <waterwhisperer24@qq.com>
This commit is contained in:
WaterWhisperer
2026-02-02 01:03:23 +08:00
committed by GitHub
parent b6a1761198
commit f405ddeaf7
6 changed files with 39 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
components/script/dom/html/htmlbaseelement.rs
View File

@@ -15,8 +15,10 @@ use crate::dom::bindings::root::DomRoot;
use crate::dom::bindings::str::DOMString;
use crate::dom::document::Document;
use crate::dom::element::{AttributeMutation, Element};
use crate::dom::globalscope::GlobalScope;
use crate::dom::html::htmlelement::HTMLElement;
use crate::dom::node::{BindContext, Node, NodeTraits, UnbindContext};
use crate::dom::security::csp::CspReporting;
use crate::dom::virtualmethods::VirtualMethods;
use crate::script_runtime::CanGc;
@@ -79,9 +81,15 @@ impl HTMLBaseElement {
// urlRecord is failure;
url_record.as_ref().is_none_or(|url_record|
// urlRecord's scheme is "data" or "javascript"; or
url_record.scheme() == "data" || url_record.scheme() == "javascript")
// running Is base allowed for Document? on urlRecord and document returns "Blocked",
// TODO
url_record.scheme() == "data" || url_record.scheme() == "javascript"
// running Is base allowed for Document? on urlRecord and document returns "Blocked",
|| !document
.get_csp_list()
.is_base_allowed_for_document(
document.window().upcast::<GlobalScope>(),
&url_record.clone().into_url(),
&document.origin().immutable().clone().into_url_origin(),
))
{
// then set element's frozen base URL to document's fallback base URL and return.
*self.frozen_base_url.borrow_mut() = Some(document_fallback_url);