/* * Copyright (C) 1999 Lars Knoll (knoll@kde.org) * (C) 1999 Antti Koivisto (koivisto@kde.org) * (C) 2001 Dirk Mueller (mueller@kde.org) * Copyright (C) 2004, 2005, 2006, 2007, 2008 Apple Inc. All rights reserved. * Copyright (C) 2006 Samuel Weinig (sam@webkit.org) * Copyright (C) 2008, 2009 Torch Mobile Inc. All rights reserved. (http://www.torchmobile.com/) * * This library is free software; you can redistribute it and/or * modify it under the terms of the GNU Library General Public * License as published by the Free Software Foundation; either * version 2 of the License, or (at your option) any later version. * * This library is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU * Library General Public License for more details. * * You should have received a copy of the GNU Library General Public License * along with this library; see the file COPYING.LIB. If not, write to * the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, * Boston, MA 02110-1301, USA. */ #include "config.h" #include "DOMImplementation.h" #include "ContentType.h" #include "CSSStyleSheet.h" #include "DocumentType.h" #include "Element.h" #include "ExceptionCode.h" #include "Frame.h" #include "FrameLoader.h" #include "FrameLoaderClient.h" #include "FTPDirectoryDocument.h" #include "HTMLDocument.h" #include "HTMLHeadElement.h" #include "HTMLTitleElement.h" #include "Image.h" #include "ImageDocument.h" #include "MainFrame.h" #include "MediaDocument.h" #include "MediaList.h" #include "MIMETypeRegistry.h" #include "Page.h" #include "PluginData.h" #include "PluginDocument.h" #include "SVGDocument.h" #include "SVGNames.h" #include "SecurityOrigin.h" #include "SecurityOriginPolicy.h" #include "Settings.h" #include "StyleSheetContents.h" #include "SubframeLoader.h" #include "Text.h" #include "TextDocument.h" #include "XMLDocument.h" #include "XMLNames.h" #include #include namespace WebCore { using namespace HTMLNames; typedef HashSet FeatureSet; static void addString(FeatureSet& set, const char* string) { set.add(string); } #if ENABLE(VIDEO) class DOMImplementationSupportsTypeClient : public MediaPlayerSupportsTypeClient { public: DOMImplementationSupportsTypeClient(bool needsHacks, const String& host) : m_needsHacks(needsHacks) , m_host(host) { } private: virtual bool mediaPlayerNeedsSiteSpecificHacks() const override { return m_needsHacks; } virtual String mediaPlayerDocumentHost() const override { return m_host; } bool m_needsHacks; String m_host; }; #endif static bool isSupportedSVG10Feature(const String& feature, const String& version) { if (!version.isEmpty() && version != "1.0") return false; static bool initialized = false; static NeverDestroyed svgFeatures; if (!initialized) { #if ENABLE(SVG_FONTS) addString(svgFeatures, "svg"); addString(svgFeatures, "svg.static"); #endif // addString(svgFeatures, "svg.animation"); // addString(svgFeatures, "svg.dynamic"); // addString(svgFeatures, "svg.dom.animation"); // addString(svgFeatures, "svg.dom.dynamic"); #if ENABLE(SVG_FONTS) addString(svgFeatures, "dom"); addString(svgFeatures, "dom.svg"); addString(svgFeatures, "dom.svg.static"); #endif // addString(svgFeatures, "svg.all"); // addString(svgFeatures, "dom.svg.all"); initialized = true; } return feature.startsWith("org.w3c.", false) && svgFeatures.get().contains(feature.right(feature.length() - 8)); } static bool isSupportedSVG11Feature(const String& feature, const String& version) { if (!version.isEmpty() && version != "1.1") return false; static bool initialized = false; static NeverDestroyed svgFeatures; if (!initialized) { // Sadly, we cannot claim to implement any of the SVG 1.1 generic feature sets // lack of Font and Filter support. // http://bugs.webkit.org/show_bug.cgi?id=15480 #if ENABLE(SVG_FONTS) addString(svgFeatures, "SVG"); addString(svgFeatures, "SVGDOM"); addString(svgFeatures, "SVG-static"); addString(svgFeatures, "SVGDOM-static"); #endif addString(svgFeatures, "SVG-animation"); addString(svgFeatures, "SVGDOM-animation"); // addString(svgFeatures, "SVG-dynamic); // addString(svgFeatures, "SVGDOM-dynamic); addString(svgFeatures, "CoreAttribute"); addString(svgFeatures, "Structure"); addString(svgFeatures, "BasicStructure"); addString(svgFeatures, "ContainerAttribute"); addString(svgFeatures, "ConditionalProcessing"); addString(svgFeatures, "Image"); addString(svgFeatures, "Style"); addString(svgFeatures, "ViewportAttribute"); addString(svgFeatures, "Shape"); addString(svgFeatures, "Text"); addString(svgFeatures, "BasicText"); addString(svgFeatures, "PaintAttribute"); addString(svgFeatures, "BasicPaintAttribute"); addString(svgFeatures, "OpacityAttribute"); addString(svgFeatures, "GraphicsAttribute"); addString(svgFeatures, "BaseGraphicsAttribute"); addString(svgFeatures, "Marker"); // addString(svgFeatures, "ColorProfile"); // requires color-profile, bug 6037 addString(svgFeatures, "Gradient"); addString(svgFeatures, "Pattern"); addString(svgFeatures, "Clip"); addString(svgFeatures, "BasicClip"); addString(svgFeatures, "Mask"); addString(svgFeatures, "Filter"); addString(svgFeatures, "BasicFilter"); addString(svgFeatures, "DocumentEventsAttribute"); addString(svgFeatures, "GraphicalEventsAttribute"); // addString(svgFeatures, "AnimationEventsAttribute"); addString(svgFeatures, "Cursor"); addString(svgFeatures, "Hyperlinking"); addString(svgFeatures, "XlinkAttribute"); addString(svgFeatures, "ExternalResourcesRequired"); addString(svgFeatures, "View"); addString(svgFeatures, "Script"); addString(svgFeatures, "Animation"); #if ENABLE(SVG_FONTS) addString(svgFeatures, "Font"); addString(svgFeatures, "BasicFont"); #endif addString(svgFeatures, "Extensibility"); initialized = true; } return feature.startsWith("http://www.w3.org/tr/svg11/feature#", false) && svgFeatures.get().contains(feature.right(feature.length() - 35)); } DOMImplementation::DOMImplementation(Document& document) : m_document(document) { } bool DOMImplementation::hasFeature(const String& feature, const String& version) { if (feature.startsWith("http://www.w3.org/TR/SVG", false) || feature.startsWith("org.w3c.dom.svg", false) || feature.startsWith("org.w3c.svg", false)) { // FIXME: SVG 2.0 support? return isSupportedSVG10Feature(feature, version) || isSupportedSVG11Feature(feature, version); } // FIXME: SVG specifications // and // say that we should return true for the feature "SVGZoomEvents". return true; } RefPtr DOMImplementation::createDocumentType(const String& qualifiedName, const String& publicId, const String& systemId, ExceptionCode& ec) { String prefix, localName; if (!Document::parseQualifiedName(qualifiedName, prefix, localName, ec)) return 0; return DocumentType::create(m_document, qualifiedName, publicId, systemId); } DOMImplementation* DOMImplementation::getInterface(const String& /*feature*/) { return 0; } RefPtr DOMImplementation::createDocument(const String& namespaceURI, const String& qualifiedName, DocumentType* doctype, ExceptionCode& ec) { RefPtr doc; if (namespaceURI == SVGNames::svgNamespaceURI) doc = SVGDocument::create(0, URL()); else if (namespaceURI == HTMLNames::xhtmlNamespaceURI) doc = XMLDocument::createXHTML(0, URL()); else doc = XMLDocument::create(0, URL()); doc->setSecurityOriginPolicy(m_document.securityOriginPolicy()); RefPtr documentElement; if (!qualifiedName.isEmpty()) { documentElement = doc->createElementNS(namespaceURI, qualifiedName, ec); if (ec) return 0; } if (doctype) doc->appendChild(*doctype); if (documentElement) doc->appendChild(documentElement.releaseNonNull()); return doc; } Ref DOMImplementation::createCSSStyleSheet(const String&, const String& media, ExceptionCode&) { // FIXME: Title should be set. // FIXME: Media could have wrong syntax, in which case we should generate an exception. Ref sheet = CSSStyleSheet::create(StyleSheetContents::create()); sheet->setMediaQueries(MediaQuerySet::createAllowingDescriptionSyntax(media)); return sheet; } static inline bool isValidXMLMIMETypeChar(UChar c) { // Valid characters per RFCs 3023 and 2045: // 0-9a-zA-Z_-+~!$^{}|.%'`#&* return isASCIIAlphanumeric(c) || c == '!' || c == '#' || c == '$' || c == '%' || c == '&' || c == '\'' || c == '*' || c == '+' || c == '-' || c == '.' || c == '^' || c == '_' || c == '`' || c == '{' || c == '|' || c == '}' || c == '~'; } bool DOMImplementation::isXMLMIMEType(const String& mimeType) { // FIXME: Can we move this logic to MIMETypeRegistry and have this just be a single function call? if (equalLettersIgnoringASCIICase(mimeType, "text/xml") || equalLettersIgnoringASCIICase(mimeType, "application/xml") || equalLettersIgnoringASCIICase(mimeType, "text/xsl")) return true; if (!mimeType.endsWith("+xml", false)) return false; size_t slashPosition = mimeType.find('/'); // Take into account the '+xml' ending of mimeType. if (slashPosition == notFound || !slashPosition || slashPosition == mimeType.length() - 5) return false; // Again, mimeType ends with '+xml', no need to check the validity of that substring. size_t mimeLength = mimeType.length(); for (size_t i = 0; i < mimeLength - 4; ++i) { if (!isValidXMLMIMETypeChar(mimeType[i]) && i != slashPosition) return false; } return true; } bool DOMImplementation::isTextMIMEType(const String& mimeType) { // FIXME: Can we move this logic to MIMETypeRegistry and have this just be a single function call? return MIMETypeRegistry::isSupportedJavaScriptMIMEType(mimeType) || equalLettersIgnoringASCIICase(mimeType, "application/json") // Render JSON as text/plain. || (mimeType.startsWith("text/", false) && !equalLettersIgnoringASCIICase(mimeType, "text/html") && !equalLettersIgnoringASCIICase(mimeType, "text/xml") && !equalLettersIgnoringASCIICase(mimeType, "text/xsl")); } Ref DOMImplementation::createHTMLDocument(const String& title) { auto document = HTMLDocument::create(nullptr, URL()); document->open(); document->write(""); if (!title.isNull()) { auto titleElement = HTMLTitleElement::create(titleTag, document); titleElement->appendChild(document->createTextNode(title)); ASSERT(document->head()); document->head()->appendChild(WTFMove(titleElement)); } document->setSecurityOriginPolicy(m_document.securityOriginPolicy()); return document; } Ref DOMImplementation::createDocument(const String& type, Frame* frame, const URL& url) { // Plugins cannot take HTML and XHTML from us, and we don't even need to initialize the plugin database for those. if (type == "text/html") return HTMLDocument::create(frame, url); if (type == "application/xhtml+xml") return XMLDocument::createXHTML(frame, url); #if ENABLE(FTPDIR) // Plugins cannot take FTP from us either if (type == "application/x-ftp-directory") return FTPDirectoryDocument::create(frame, url); #endif // If we want to useImageDocumentForSubframePDF, we'll let that override plugin support. if (frame && !frame->isMainFrame() && MIMETypeRegistry::isPDFMIMEType(type) && frame->settings().useImageDocumentForSubframePDF()) return ImageDocument::create(*frame, url); PluginData* pluginData = nullptr; PluginData::AllowedPluginTypes allowedPluginTypes = PluginData::OnlyApplicationPlugins; if (frame && frame->page()) { if (frame->loader().subframeLoader().allowPlugins()) allowedPluginTypes = PluginData::AllPlugins; pluginData = &frame->page()->pluginData(); } // PDF is one image type for which a plugin can override built-in support. // We do not want QuickTime to take over all image types, obviously. if (MIMETypeRegistry::isPDFOrPostScriptMIMEType(type) && pluginData && pluginData->supportsWebVisibleMimeType(type, allowedPluginTypes)) return PluginDocument::create(frame, url); if (Image::supportsType(type)) return ImageDocument::create(*frame, url); #if ENABLE(VIDEO) // Check to see if the type can be played by our MediaPlayer, if so create a MediaDocument // Key system is not applicable here. DOMImplementationSupportsTypeClient client(frame && frame->settings().needsSiteSpecificQuirks(), url.host()); MediaEngineSupportParameters parameters; parameters.type = type; parameters.url = url; if (MediaPlayer::supportsType(parameters, &client)) return MediaDocument::create(frame, url); #endif // Everything else except text/plain can be overridden by plugins. In particular, Adobe SVG Viewer should be used for SVG, if installed. // Disallowing plug-ins to use text/plain prevents plug-ins from hijacking a fundamental type that the browser is expected to handle, // and also serves as an optimization to prevent loading the plug-in database in the common case. if (type != "text/plain" && ((pluginData && pluginData->supportsWebVisibleMimeType(type, allowedPluginTypes)) || (frame && frame->loader().client().shouldAlwaysUsePluginDocument(type)))) return PluginDocument::create(frame, url); if (isTextMIMEType(type)) return TextDocument::create(frame, url); if (type == "image/svg+xml") return SVGDocument::create(frame, url); if (isXMLMIMEType(type)) return XMLDocument::create(frame, url); return HTMLDocument::create(frame, url); } }