RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-24 21:37:34 +00:00
Code Issues Activity Actions

LibWeb: Use proper origins in Request::has_redirect_tainted_origin()

Browse source 
URL::url_origin() is a globally available function now, so let's use it!
This commit is contained in:
Linus Groh 2022-10-31 18:04:11 +00:00
parent ec34d60e5c
commit a1de15498d
1 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
Userland/Libraries/LibWeb/Fetch/Infrastructure/HTTP/Requests.cpp
View file

@ -159,9 +159,11 @@ bool Request::has_redirect_tainted_origin() const
} }
// 2. If url’s origin is not same origin with lastURL’s origin and request’s origin is not same origin with lastURL’s origin, then return true. // 2. If url’s origin is not same origin with lastURL’s origin and request’s origin is not same origin with lastURL’s origin, then return true.
// FIXME: Actually use the given origins once we have https://url.spec.whatwg.org/#concept-url-origin. auto const* request_origin = m_origin.get_pointer<HTML::Origin>();
if (!HTML::Origin().is_same_origin(HTML::Origin()) && HTML::Origin().is_same_origin(HTML::Origin())) if (!URL::url_origin(url).is_same_origin(URL::url_origin(*last_url))
&& (request_origin == nullptr || !request_origin->is_same_origin(URL::url_origin(*last_url)))) {
return true; return true;
}
// 3. Set lastURL to url. // 3. Set lastURL to url.
last_url = url; last_url = url;