Allow dynamic updating of authentication policies

net/http/http_log_util.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/http/http_log_util.h"
 
 #include "base/strings/string_number_conversions.h"
 #include "base/strings/string_util.h"
 #include "base/strings/stringprintf.h"
 #include "net/http/http_auth_challenge_tokenizer.h"
+#include "net/http/http_auth_scheme.h"
 #include "net/http/http_util.h"
 
 namespace net {
 
 namespace {
 
 bool ShouldRedactChallenge(HttpAuthChallengeTokenizer* challenge) {
   // Ignore lines with commas, as they may contain lists of schemes, and
   // the information we want to hide is Base64 encoded, so has no commas.
   if (challenge->challenge_text().find(',') != std::string::npos)
     return false;
 
   std::string scheme = base::ToLowerASCII(challenge->scheme());
   // Invalid input.
   if (scheme.empty())
     return false;
 
   // Ignore Basic and Digest authentication challenges, as they contain
   // public information.
-  if (scheme == "basic" || scheme == "digest")
+  if (scheme == kBasicAuthScheme || scheme == kDigestAuthScheme)
     return false;
 
   return true;
 }
 
 }  // namespace
 
 std::string ElideHeaderValueForNetLog(NetLogCaptureMode capture_mode,
                                       const std::string& header,
                                       const std::string& value) {
@@ skipping 39 matching lines @@
   // chrome/browser/resources/net_internals/log_view_painter.js.
   if (capture_mode.include_cookies_and_credentials()) {
     return debug_data.as_string();
   }
 
   return std::string("[") + base::SizeTToString(debug_data.size()) +
          std::string(" bytes were stripped]");
 }
 
 }  // namespace net