forked from mirrors/gecko-dev
30ca834b74
Given that we only support samesite lax/strict/none in our storage schema, it's useful to introduce a default value, as required by the spec. However, that would it hard to distinguish between none/lax when we switch the default. So, instead of doing that we use the peculiarities of our current schema to our advantage: There's a "sameSite" attribute and a "rawSameSite" attribute, where the latter is the literal value we received from the server. With this patch, we'll interpret the "sameSite" attribute based on the laxByDefault pref. This also has the advantage that various front-end code (e.g., in DevTools) is always reading the "sameSite" value of nsICookies. Differential Revision: https://phabricator.services.mozilla.com/D137460
82 lines
2.8 KiB
JavaScript
82 lines
2.8 KiB
JavaScript
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
Components.utils.importGlobalProperties(["URLSearchParams"]);
|
|
|
|
const stateTotalRequests = "total-request";
|
|
const stateCallback = "callback-response";
|
|
const stateTrackersWithCookie = "trackers-with-cookie";
|
|
const stateTrackersWithoutCookie = "trackers-without-cookie";
|
|
const stateReceivedTrackers = "received-trackers";
|
|
const stateResponseType = "response-tracker-with-cookie";
|
|
|
|
function reset() {
|
|
setState(stateCallback, "");
|
|
setState(stateTrackersWithCookie, "");
|
|
setState(stateTrackersWithoutCookie, "");
|
|
setState(stateReceivedTrackers, "");
|
|
setState(stateResponseType, "");
|
|
}
|
|
|
|
function handleRequest(aRequest, aResponse) {
|
|
let params = new URLSearchParams(aRequest.queryString);
|
|
|
|
// init the server and tell the server the total number requests to process
|
|
// server set the cookie
|
|
if (params.has("init")) {
|
|
setState(stateTotalRequests, params.get("init"));
|
|
|
|
aResponse.setStatusLine(aRequest.httpVersion, 200);
|
|
aResponse.setHeader("Content-Type", "text/plain", false);
|
|
|
|
// Prepare the cookie
|
|
aResponse.setHeader("Set-Cookie", "cookie=1234; SameSite=None; Secure");
|
|
aResponse.setHeader(
|
|
"Access-Control-Allow-Origin",
|
|
aRequest.getHeader("Origin"),
|
|
false
|
|
);
|
|
aResponse.setHeader("Access-Control-Allow-Credentials", "true", false);
|
|
aResponse.write("begin-test");
|
|
// register the callback response, the response will be fired after receiving
|
|
// all the request
|
|
} else if (params.has("callback")) {
|
|
aResponse.processAsync();
|
|
aResponse.setHeader("Content-Type", "text/plain", false);
|
|
aResponse.setHeader(
|
|
"Access-Control-Allow-Origin",
|
|
aRequest.getHeader("Origin"),
|
|
false
|
|
);
|
|
aResponse.setHeader("Access-Control-Allow-Credentials", "true", false);
|
|
|
|
setState(stateResponseType, params.get("callback"));
|
|
setObjectState(stateCallback, aResponse);
|
|
} else {
|
|
let count = parseInt(getState(stateReceivedTrackers) || 0) + 1;
|
|
setState(stateReceivedTrackers, count.toString());
|
|
|
|
let state = "";
|
|
if (aRequest.hasHeader("Cookie")) {
|
|
state = stateTrackersWithCookie;
|
|
} else {
|
|
state = stateTrackersWithoutCookie;
|
|
}
|
|
|
|
let ids = params.get("id").concat(",", getState(state));
|
|
setState(state, ids);
|
|
|
|
if (getState(stateTotalRequests) == getState(stateReceivedTrackers)) {
|
|
getObjectState(stateCallback, r => {
|
|
if (getState(stateResponseType) == "with-cookie") {
|
|
r.write(getState(stateTrackersWithCookie));
|
|
} else {
|
|
r.write(getState(stateTrackersWithoutCookie));
|
|
}
|
|
r.finish();
|
|
reset();
|
|
});
|
|
}
|
|
}
|
|
}
|