website-page-frame/src/native/chain-links/WebsitePageFrameResourceResponsePreparation.js

This library provides a way to allow browser based programs to have cross parent to child window communication through code.

/*
 *    This library provides an alternative in app browser to webview by removing specific restrictions placed upon iframe and more.
 *    Copyright (C) 2019  Ryan Molyneux
 *
 *    This program is free software: you can redistribute it and/or modify
 *    it under the terms of the GNU General Public License as published by
 *    the Free Software Foundation, either version 3 of the License, or
 *    (at your option) any later version.
 *
 *    This program is distributed in the hope that it will be useful,
 *    but WITHOUT ANY WARRANTY; without even the implied warranty of
 *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *    GNU General Public License for more details.
 *
 *    You should have received a copy of the GNU General Public License
 *    along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */


var ResponsePreparationChainLink = require("./ResponsePreparationChainLink.js").ResponsePreparationChainLink;
var TaskChainBuilder = require("../../general/builders/TaskChainBuilder.js").TaskChainBuilder;
var RemoveXFrameOptionsChainLink = require("./RemoveXFrameOptionsChainLink.js").RemoveXFrameOptionsChainLink;
var AddFileSchemaToFrameAnscestorsChainLink = require("./AddFileSchemaToFrameAnscestorsChainLink.js").AddFileSchemaToFrameAnscestorsChainLink;

function WebsitePageFrameResourceResponsePreparation() {

    ResponsePreparationChainLink.call(this);

    var taskChainBuilder = new TaskChainBuilder();

    taskChainBuilder.attachChainLink(new RemoveXFrameOptionsChainLink());
    taskChainBuilder.attachChainLink(new AddFileSchemaToFrameAnscestorsChainLink());

    this.setTaskChain(taskChainBuilder);

}

WebsitePageFrameResourceResponsePreparation.prototype = Object.create(ResponsePreparationChainLink.prototype);
WebsitePageFrameResourceResponsePreparation.prototype.constructor = WebsitePageFrameResourceResponsePreparation;

WebsitePageFrameResourceResponsePreparation.prototype.checkIfResponsible = function(request, response, cache) {

    var isResponsible = false;
    var contentType = response.getHeaderMap().get("content-type");

    if ( (response.getStatusCode() === 200 || response.getStatusCode() === 404)
      && contentType != undefined
      && contentType.includes("text/html")) {

        var requestUrlSplit = request.getUrl().split("/", 3);
        var requestBaseUrl = requestUrlSplit[0] + "//" + requestUrlSplit[2];
        var responseHeaderMap = response.getHeaderMap();
        var responseCspFrameAnscestors = "";
        var websitePageFrameCurrentOrigin = cache.get("website-page-frame-origin");


        if ( responseHeaderMap.has("content-security-policy")
          && responseHeaderMap.get("content-security-policy").includes("frame-ancestors")) {

            responseCspFrameAnscestors = responseHeaderMap.get("content-security-policy")
                                                          .split("frame-ancestors")[1]
                                                          .split(";")[0];
        }

        if ( websitePageFrameCurrentOrigin !== undefined
          && requestBaseUrl === websitePageFrameCurrentOrigin
          || responseCspFrameAnscestors.includes(websitePageFrameCurrentOrigin) ) {

            isResponsible = true;

        }

    }

    return isResponsible;

}

exports.WebsitePageFrameResourceResponsePreparation = WebsitePageFrameResourceResponsePreparation;