// Copyright 2015-2017 Parity Technologies (UK) Ltd. // This file is part of Parity. // Parity is free software: you can redistribute it and/or modify // it under the terms of the GNU General Public License as published by // the Free Software Foundation, either version 3 of the License, or // (at your option) any later version. // Parity is distributed in the hope that it will be useful, // but WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the // GNU General Public License for more details. // You should have received a copy of the GNU General Public License // along with Parity. If not, see . //! Hyper handlers implementations. mod auth; mod content; mod echo; mod fetch; mod redirect; mod streaming; pub use self::auth::AuthRequiredHandler; pub use self::content::ContentHandler; pub use self::echo::EchoHandler; pub use self::fetch::{ContentFetcherHandler, ContentValidator, FetchControl, ValidatorResponse}; pub use self::redirect::Redirection; pub use self::streaming::StreamingHandler; use url::Url; use hyper::{server, header, net, uri}; use address; /// Adds security-related headers to the Response. pub fn add_security_headers(headers: &mut header::Headers, embeddable_on: Option<(String, u16)>) { headers.set_raw("X-XSS-Protection", vec![b"1; mode=block".to_vec()]); headers.set_raw("X-Content-Type-Options", vec![b"nosniff".to_vec()]); // Embedding header: if let Some(embeddable_on) = embeddable_on { headers.set_raw( "X-Frame-Options", vec![format!("ALLOW-FROM http://{}", address(embeddable_on)).into_bytes()] ); } else { // TODO [ToDr] Should we be more strict here (DENY?)? headers.set_raw("X-Frame-Options", vec![b"SAMEORIGIN".to_vec()]); } } /// Extracts URL part from the Request. pub fn extract_url(req: &server::Request) -> Option { convert_uri_to_url(req.uri(), req.headers().get::()) } /// Extracts URL given URI and Host header. pub fn convert_uri_to_url(uri: &uri::RequestUri, host: Option<&header::Host>) -> Option { match *uri { uri::RequestUri::AbsoluteUri(ref url) => { match Url::from_generic_url(url.clone()) { Ok(url) => Some(url), _ => None, } }, uri::RequestUri::AbsolutePath { ref path, ref query } => { let query = match *query { Some(ref query) => format!("?{}", query), None => "".into(), }; // Attempt to prepend the Host header (mandatory in HTTP/1.1) let url_string = match host { Some(ref host) => { format!("http://{}:{}{}{}", host.hostname, host.port.unwrap_or(80), path, query) }, None => return None, }; match Url::parse(&url_string) { Ok(url) => Some(url), _ => None, } }, _ => None, } }