Issue #1975 - Implement Origin header CSRF mitigation.

Backported from Mozilla bug 446344.
This commit is contained in:
Job Bautista 2022-07-25 18:56:46 +08:00 committed by roytam1
commit faa778ec9d
6 changed files with 82 additions and 15 deletions

View file

@ -319,6 +319,8 @@ public:
public: /* Necko internal use only... */
bool IsNavigation();
static bool IsReferrerSchemeAllowed(nsIURI *aReferrer);
// Return whether upon a redirect code of httpStatus for method, the
// request method should be rewritten to GET.
static bool ShouldRewriteRedirectToGET(uint32_t httpStatus,