Accept any string for currency code in PaymentRequest.

third_party/WebKit/Source/modules/payments/PaymentsValidators.cpp

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "modules/payments/PaymentsValidators.h"
 
 #include "bindings/core/v8/ScriptRegexp.h"
 #include "wtf/text/StringImpl.h"
 
 namespace blink {
 
+// We limit the maximum length of the currency code to 2048 bytes for security reasons.
+static const int maxCurrencyCodeLength = 2048;
+
 bool PaymentsValidators::isValidCurrencyCodeFormat(const String& code, String* optionalErrorMessage)
 {
-    if (ScriptRegexp("^[A-Z]{3}$", TextCaseSensitive).match(code) == 0)
+    if (code.length() <= maxCurrencyCodeLength)
         return true;
 
     if (optionalErrorMessage)
-        *optionalErrorMessage = "'" + code + "' is not a valid ISO 4217 currency code, should be 3 upper case letters [A-Z]";
+        *optionalErrorMessage = "The currency code should be at most 2048 characters long";
 
     return false;
 }
 
 bool PaymentsValidators::isValidAmountFormat(const String& amount, String* optionalErrorMessage)
 {
     if (ScriptRegexp("^-?[0-9]+(\\.[0-9]+)?$", TextCaseSensitive).match(amount) == 0)
         return true;
 
     if (optionalErrorMessage)
-        *optionalErrorMessage = "'" + amount + "' is not a valid ISO 20022 CurrencyAnd30Amount";
+        *optionalErrorMessage = "'" + amount + "' is not a valid amount format";
 
     return false;
 }
 
 bool PaymentsValidators::isValidCountryCodeFormat(const String& code, String* optionalErrorMessage)
 {
     if (ScriptRegexp("^[A-Z]{2}$", TextCaseSensitive).match(code) == 0)
         return true;
 
     if (optionalErrorMessage)
@@ skipping 39 matching lines @@
         if (optionalErrorMessage)
             *optionalErrorMessage = "If language code is empty, then script code should also be empty";
 
         return false;
     }
 
     return true;
 }
 
 } // namespace blink