dom/security/SRIMetadata.h
author Csoregi Natalia <ncsoregi@mozilla.com>
Wed, 01 Dec 2021 22:45:29 +0200
changeset 600787 d7af815713793a815d1a10a9cb097c7d6261fa2e
parent 529342 a553897c1972a9545af04c76e41c4051de136974
permissions -rw-r--r--
Backed out changeset c730f6ed4350 (bug 1743809) for causing failures on MediaRecorder-peerconnection.https.html. a=backout

/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

#ifndef mozilla_dom_SRIMetadata_h
#define mozilla_dom_SRIMetadata_h

#include "nsTArray.h"
#include "nsString.h"
#include "SRICheck.h"

namespace mozilla {
namespace dom {

class SRIMetadata final {
  friend class SRICheck;

 public:
  static const uint32_t MAX_ALTERNATE_HASHES = 256;
  static const int8_t UNKNOWN_ALGORITHM = -1;

  /**
   * Create an empty metadata object.
   */
  SRIMetadata() : mAlgorithmType(UNKNOWN_ALGORITHM), mEmpty(true) {}

  /**
   * Split a string token into the components of an SRI metadata
   * attribute.
   */
  explicit SRIMetadata(const nsACString& aToken);

  /**
   * Returns true when this object's hash algorithm is weaker than the
   * other object's hash algorithm.
   */
  bool operator<(const SRIMetadata& aOther) const;

  /**
   * Not implemented. Should not be used.
   */
  bool operator>(const SRIMetadata& aOther) const;

  /**
   * Add another metadata's hash to this one.
   */
  SRIMetadata& operator+=(const SRIMetadata& aOther);

  /**
   * Returns true when the two metadata use the same hash algorithm.
   */
  bool operator==(const SRIMetadata& aOther) const;

  bool IsEmpty() const { return mEmpty; }
  bool IsMalformed() const { return mHashes.IsEmpty() || mAlgorithm.IsEmpty(); }
  bool IsAlgorithmSupported() const {
    return mAlgorithmType != UNKNOWN_ALGORITHM;
  }
  bool IsValid() const { return !IsMalformed() && IsAlgorithmSupported(); }

  uint32_t HashCount() const { return mHashes.Length(); }
  void GetHash(uint32_t aIndex, nsCString* outHash) const;
  void GetAlgorithm(nsCString* outAlg) const { *outAlg = mAlgorithm; }
  void GetHashType(int8_t* outType, uint32_t* outLength) const;

  const nsString& GetIntegrityString() const { return mIntegrityString; }

  // Return true if:
  // * this SRI is empty
  // * the other SRI has a stronger hash algorithm
  // * the other SRI has the same hash algorithm and also the same set of values
  // otherwise, return false.
  //
  // This method simply checks if the other SRI is stronger or identical to this
  // one, so that a load that has been checked against that other SRI has the
  // same or higher level of trust than this SRI provides.
  bool CanTrustBeDelegatedTo(const SRIMetadata& aOther) const;

 private:
  CopyableTArray<nsCString> mHashes;
  nsString mIntegrityString;
  nsCString mAlgorithm;
  int8_t mAlgorithmType;
  bool mEmpty;
};

}  // namespace dom
}  // namespace mozilla

#endif  // mozilla_dom_SRIMetadata_h