Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(288)

Side by Side Diff: chrome/browser/child_process_security_policy.h

Issue 113488: Rename RendererSecurityPolicy and move it to browser\. No code change. (Closed) Base URL: svn://chrome-svn/chrome/trunk/src/
Patch Set: '' Created 11 years, 7 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « chrome/browser/browser.vcproj ('k') | chrome/browser/child_process_security_policy.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #ifndef CHROME_BROWSER_RENDERER_HOST_RENDERER_SECURITY_POLICY_H_ 5 #ifndef CHROME_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_
6 #define CHROME_BROWSER_RENDERER_HOST_RENDERER_SECURITY_POLICY_H_ 6 #define CHROME_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_
7 7
8 #include <string> 8 #include <string>
9 #include <map> 9 #include <map>
10 #include <set> 10 #include <set>
11 11
12 #include "base/basictypes.h" 12 #include "base/basictypes.h"
13 #include "base/file_path.h" 13 #include "base/file_path.h"
14 #include "base/lock.h" 14 #include "base/lock.h"
15 #include "base/singleton.h" 15 #include "base/singleton.h"
16 16
17 class FilePath; 17 class FilePath;
18 class GURL; 18 class GURL;
19 19
20 // The RendererSecurityPolicy class is used to grant and revoke security 20 // The ChildProcessSecurityPolicy class is used to grant and revoke security
21 // capabilities for renderers. For example, it restricts whether a renderer 21 // capabilities for renderers. For example, it restricts whether a renderer
22 // is permmitted to loaded file:// URLs based on whether the renderer has ever 22 // is permmitted to loaded file:// URLs based on whether the renderer has ever
23 // been commanded to load file:// URLs by the browser. 23 // been commanded to load file:// URLs by the browser.
24 // 24 //
25 // RendererSecurityPolicy is a singleton that may be used on any thread. 25 // ChildProcessSecurityPolicy is a singleton that may be used on any thread.
26 // 26 //
27 class RendererSecurityPolicy { 27 class ChildProcessSecurityPolicy {
28 public: 28 public:
29 // Object can only be created through GetInstance() so the constructor is 29 // Object can only be created through GetInstance() so the constructor is
30 // private. 30 // private.
31 ~RendererSecurityPolicy(); 31 ~ChildProcessSecurityPolicy();
32 32
33 // There is one global RendererSecurityPolicy object for the entire browser 33 // There is one global ChildProcessSecurityPolicy object for the entire browse r
34 // processes. The object returned by this method may be accessed on any 34 // processes. The object returned by this method may be accessed on any
35 // thread. 35 // thread.
36 static RendererSecurityPolicy* GetInstance(); 36 static ChildProcessSecurityPolicy* GetInstance();
37 37
38 // Web-safe schemes can be requested by any renderer. Once a web-safe scheme 38 // Web-safe schemes can be requested by any renderer. Once a web-safe scheme
39 // has been registered, any renderer processes can request URLs with that 39 // has been registered, any renderer processes can request URLs with that
40 // scheme. There is no mechanism for revoking web-safe schemes. 40 // scheme. There is no mechanism for revoking web-safe schemes.
41 void RegisterWebSafeScheme(const std::string& scheme); 41 void RegisterWebSafeScheme(const std::string& scheme);
42 42
43 // Returns true iff |scheme| has been registered as a web-safe scheme. 43 // Returns true iff |scheme| has been registered as a web-safe scheme.
44 bool IsWebSafeScheme(const std::string& scheme); 44 bool IsWebSafeScheme(const std::string& scheme);
45 45
46 // Pseudo schemes are treated differently than other schemes because they 46 // Pseudo schemes are treated differently than other schemes because they
(...skipping 44 matching lines...) Expand 10 before | Expand all | Expand 10 after
91 // The browser should check this property before assuming the renderer is 91 // The browser should check this property before assuming the renderer is
92 // allowed to use DOMUIBindings. 92 // allowed to use DOMUIBindings.
93 bool HasDOMUIBindings(int renderer_id); 93 bool HasDOMUIBindings(int renderer_id);
94 94
95 private: 95 private:
96 class SecurityState; 96 class SecurityState;
97 97
98 typedef std::set<std::string> SchemeSet; 98 typedef std::set<std::string> SchemeSet;
99 typedef std::map<int, SecurityState*> SecurityStateMap; 99 typedef std::map<int, SecurityState*> SecurityStateMap;
100 100
101 // Obtain an instance of RendererSecurityPolicy via GetInstance(). 101 // Obtain an instance of ChildProcessSecurityPolicy via GetInstance().
102 RendererSecurityPolicy(); 102 ChildProcessSecurityPolicy();
103 friend struct DefaultSingletonTraits<RendererSecurityPolicy>; 103 friend struct DefaultSingletonTraits<ChildProcessSecurityPolicy>;
104 104
105 // You must acquire this lock before reading or writing any members of this 105 // You must acquire this lock before reading or writing any members of this
106 // class. You must not block while holding this lock. 106 // class. You must not block while holding this lock.
107 Lock lock_; 107 Lock lock_;
108 108
109 // These schemes are white-listed for all renderers. This set is protected 109 // These schemes are white-listed for all renderers. This set is protected
110 // by |lock_|. 110 // by |lock_|.
111 SchemeSet web_safe_schemes_; 111 SchemeSet web_safe_schemes_;
112 112
113 // These schemes do not actually represent retrievable URLs. For example, 113 // These schemes do not actually represent retrievable URLs. For example,
114 // the the URLs in the "about" scheme are aliases to other URLs. This set is 114 // the the URLs in the "about" scheme are aliases to other URLs. This set is
115 // protected by |lock_|. 115 // protected by |lock_|.
116 SchemeSet pseudo_schemes_; 116 SchemeSet pseudo_schemes_;
117 117
118 // This map holds a SecurityState for each renderer process. The key for the 118 // This map holds a SecurityState for each renderer process. The key for the
119 // map is the ID of the RenderProcessHost. The SecurityState objects are 119 // map is the ID of the RenderProcessHost. The SecurityState objects are
120 // owned by this object and are protected by |lock_|. References to them must 120 // owned by this object and are protected by |lock_|. References to them must
121 // not escape this class. 121 // not escape this class.
122 SecurityStateMap security_state_; 122 SecurityStateMap security_state_;
123 123
124 DISALLOW_COPY_AND_ASSIGN(RendererSecurityPolicy); 124 DISALLOW_COPY_AND_ASSIGN(ChildProcessSecurityPolicy);
125 }; 125 };
126 126
127 #endif // CHROME_BROWSER_RENDERER_HOST_RENDERER_SECURITY_POLICY_H_ 127 #endif // CHROME_BROWSER_CHILD_PROCESS_SECURITY_POLICY_H_
OLDNEW
« no previous file with comments | « chrome/browser/browser.vcproj ('k') | chrome/browser/child_process_security_policy.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698