66 lines
2.7 KiB
JavaScript
66 lines
2.7 KiB
JavaScript
|
import BrowserNavigationCrossOriginPolicyEnum from '../enums/BrowserNavigationCrossOriginPolicyEnum.js';
|
||
|
|
import DetachedBrowserFrame from '../detached-browser/DetachedBrowserFrame.js';
|
||
|
|
import * as PropertySymbol from '../../PropertySymbol.js';
|
||
|
|
/**
|
||
|
|
* Browser frame validator.
|
||
|
|
*/
|
||
|
|
export default class BrowserFrameValidator {
|
||
|
|
/**
|
||
|
|
* Returns true if the frame navigation complies with the cross origin policy.
|
||
|
|
*
|
||
|
|
* @param frame Frame.
|
||
|
|
* @param toURL URL.
|
||
|
|
* @returns True if the frame navigation complies with the cross origin policy.
|
||
|
|
*/
|
||
|
|
static validateCrossOriginPolicy(frame, toURL) {
|
||
|
|
const settings = frame.page.context.browser.settings;
|
||
|
|
let fromURL = frame.page.mainFrame.window.location;
|
||
|
|
if (frame[PropertySymbol.openerFrame]) {
|
||
|
|
fromURL = frame[PropertySymbol.openerFrame].window.location;
|
||
|
|
}
|
||
|
|
else if (frame.parentFrame) {
|
||
|
|
fromURL = frame.parentFrame.window.location;
|
||
|
|
}
|
||
|
|
if (settings.navigation.crossOriginPolicy === BrowserNavigationCrossOriginPolicyEnum.sameOrigin &&
|
||
|
|
fromURL.protocol !== 'about:' &&
|
||
|
|
toURL.protocol !== 'about:' &&
|
||
|
|
toURL.protocol !== 'javascript:' &&
|
||
|
|
fromURL.origin !== toURL.origin) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
if (settings.navigation.crossOriginPolicy ===
|
||
|
|
BrowserNavigationCrossOriginPolicyEnum.strictOrigin &&
|
||
|
|
fromURL.protocol === 'https:' &&
|
||
|
|
toURL.protocol === 'http:') {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
/**
|
||
|
|
* Returns true if navigation is allowed for the frame.
|
||
|
|
*
|
||
|
|
* @param frame Frame.
|
||
|
|
* @returns True if navigation is allowed for the frame.
|
||
|
|
*/
|
||
|
|
static validateFrameNavigation(frame) {
|
||
|
|
const settings = frame.page.context.browser.settings;
|
||
|
|
// When using the Window instance directly and not via the Browser API we should not navigate the browser frame.
|
||
|
|
if (frame instanceof DetachedBrowserFrame &&
|
||
|
|
frame.page.context === frame.page.context.browser.defaultContext &&
|
||
|
|
frame.page.context.pages[0] === frame.page &&
|
||
|
|
frame.page.mainFrame === frame) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
if (settings.navigation.disableMainFrameNavigation && frame.page.mainFrame === frame) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
if (settings.navigation.disableChildFrameNavigation && frame.page.mainFrame !== frame) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
if (settings.navigation.disableChildPageNavigation && !!frame[PropertySymbol.openerFrame]) {
|
||
|
|
return false;
|
||
|
|
}
|
||
|
|
return true;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
//# sourceMappingURL=BrowserFrameValidator.js.map
|