| OLD | NEW |
| 1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2006-2008 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "chrome/browser/extensions/extension_protocol.h" | 5 #include "chrome/browser/extensions/extension_protocol.h" |
| 6 | 6 |
| 7 #include "base/string_util.h" | 7 #include "base/string_util.h" |
| 8 #include "chrome/browser/net/chrome_url_request_context.h" | 8 #include "chrome/browser/net/chrome_url_request_context.h" |
| 9 #include "googleurl/src/url_util.h" | 9 #include "googleurl/src/url_util.h" |
| 10 #include "net/base/net_util.h" | 10 #include "net/base/net_util.h" |
| (...skipping 22 matching lines...) Expand all Loading... |
| 33 replacements.SetPathStr(new_path); | 33 replacements.SetPathStr(new_path); |
| 34 GURL file_url = extension_url.ReplaceComponents(replacements); | 34 GURL file_url = extension_url.ReplaceComponents(replacements); |
| 35 if (!file_url.is_valid()) | 35 if (!file_url.is_valid()) |
| 36 return FilePath(); | 36 return FilePath(); |
| 37 | 37 |
| 38 // Convert the result back to a FilePath. | 38 // Convert the result back to a FilePath. |
| 39 FilePath ret_val; | 39 FilePath ret_val; |
| 40 if (!net::FileURLToFilePath(file_url, &ret_val)) | 40 if (!net::FileURLToFilePath(file_url, &ret_val)) |
| 41 return FilePath(); | 41 return FilePath(); |
| 42 | 42 |
| 43 if (!file_util::AbsolutePath(&ret_val)) | |
| 44 return FilePath(); | |
| 45 | |
| 46 // Double-check that the path we ended up with is actually inside the | 43 // Double-check that the path we ended up with is actually inside the |
| 47 // extension root. | 44 // extension root. We can do this with a simple prefix match because: |
| 48 if (!extension_path.Contains(ret_val)) | 45 // a) We control the prefix on both sides, and they should match. |
| 46 // b) GURL normalizes things like "../" and "//" before it gets to us. |
| 47 if (ret_val.value().find(extension_path.value() + |
| 48 FilePath::kSeparators[0]) != 0) |
| 49 return FilePath(); | 49 return FilePath(); |
| 50 | 50 |
| 51 return ret_val; | 51 return ret_val; |
| 52 } | 52 } |
| 53 | 53 |
| 54 // Factory registered with URLRequest to create URLRequestJobs for extension:// | 54 // Factory registered with URLRequest to create URLRequestJobs for extension:// |
| 55 // URLs. | 55 // URLs. |
| 56 static URLRequestJob* CreateExtensionURLRequestJob(URLRequest* request, | 56 static URLRequestJob* CreateExtensionURLRequestJob(URLRequest* request, |
| 57 const std::string& scheme) { | 57 const std::string& scheme) { |
| 58 ChromeURLRequestContext* context = | 58 ChromeURLRequestContext* context = |
| (...skipping 28 matching lines...) Expand all Loading... |
| 87 void RegisterExtensionProtocols() { | 87 void RegisterExtensionProtocols() { |
| 88 // Being a standard scheme allows us to resolve relative paths. This is used | 88 // Being a standard scheme allows us to resolve relative paths. This is used |
| 89 // by extensions, but not by standalone user scripts. | 89 // by extensions, but not by standalone user scripts. |
| 90 url_util::AddStandardScheme(kExtensionURLScheme); | 90 url_util::AddStandardScheme(kExtensionURLScheme); |
| 91 | 91 |
| 92 URLRequest::RegisterProtocolFactory(kExtensionURLScheme, | 92 URLRequest::RegisterProtocolFactory(kExtensionURLScheme, |
| 93 &CreateExtensionURLRequestJob); | 93 &CreateExtensionURLRequestJob); |
| 94 URLRequest::RegisterProtocolFactory(kUserScriptURLScheme, | 94 URLRequest::RegisterProtocolFactory(kUserScriptURLScheme, |
| 95 &CreateUserScriptURLRequestJob); | 95 &CreateUserScriptURLRequestJob); |
| 96 } | 96 } |
| OLD | NEW |