third_party/WebKit/Source/platform/loader/fetch/FetchUtils.h

// Copyright 2014 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef FetchUtils_h
#define FetchUtils_h

#include "platform/PlatformExport.h"
#include "platform/wtf/Allocator.h"
#include "platform/wtf/Forward.h"
#include "public/platform/WebURLRequest.h"

namespace blink {

class HTTPHeaderMap;

class PLATFORM_EXPORT FetchUtils {
  STATIC_ONLY(FetchUtils);

 public:
  static bool IsCORSSafelistedMethod(const String& method);
  static bool IsCORSSafelistedHeader(const AtomicString& name,
                                     const AtomicString& value);
  static bool IsCORSSafelistedContentType(const AtomicString& media_type);
  static bool IsForbiddenMethod(const String& method);
  static bool IsForbiddenHeaderName(const String& name);
  static bool IsForbiddenResponseHeaderName(const String& name);
  static AtomicString NormalizeMethod(const AtomicString& method);
  static String NormalizeHeaderValue(const String& value);
  static bool ContainsOnlyCORSSafelistedHeaders(const HTTPHeaderMap&);
  static bool ContainsOnlyCORSSafelistedOrForbiddenHeaders(
      const HTTPHeaderMap&);

  // https://fetch.spec.whatwg.org/#ok-status aka a successful 2xx status
  // code, https://tools.ietf.org/html/rfc7231#section-6.3 . We opt to use
  // the Fetch term in naming the predicate.
  static bool IsOkStatus(int status) { return status >= 200 && status < 300; }

  // Used by e.g. the CORS check algorithm to check if the FetchCredentialsMode
  // should be treated as equivalent to "include" in the Fetch spec.
  static bool ShouldTreatCredentialsModeAsInclude(
      WebURLRequest::FetchCredentialsMode credentials_mode) {
    return credentials_mode == WebURLRequest::kFetchCredentialsModeInclude ||
           credentials_mode == WebURLRequest::kFetchCredentialsModePassword;
  }
};

}  // namespace blink

#endif