Apply content-security-policy to chrome://net-internals.

chrome/browser/ui/webui/net_internals_ui.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/webui/net_internals_ui.h"
 
 #include <algorithm>
 #include <list>
 #include <string>
 #include <utility>
@@ skipping 14 matching lines @@
 #include "chrome/browser/browser_process.h"
 #include "chrome/browser/io_thread.h"
 #include "chrome/browser/net/chrome_net_log.h"
 #include "chrome/browser/net/connection_tester.h"
 #include "chrome/browser/net/passive_log_collector.h"
 #include "chrome/browser/net/url_fixer_upper.h"
 #include "chrome/browser/prefs/pref_member.h"
 #include "chrome/browser/prerender/prerender_manager.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/ui/webui/chrome_url_data_manager.h"
+#include "chrome/browser/ui/webui/chrome_web_ui_data_source.h"
 #include "chrome/common/chrome_notification_types.h"
 #include "chrome/common/chrome_paths.h"
 #include "chrome/common/chrome_version_info.h"
 #include "chrome/common/jstemplate_builder.h"
 #include "chrome/common/pref_names.h"
 #include "chrome/common/url_constants.h"
 #include "content/browser/browser_thread.h"
 #include "content/common/notification_details.h"
 #include "grit/generated_resources.h"
 #include "grit/net_internals_resources.h"
@@ skipping 77 matching lines @@
 
   dict->SetString("proxy_settings_experiment",
                   ConnectionTester::ProxySettingsExperimentDescription(
                       experiment.proxy_settings_experiment));
   dict->SetString("host_resolver_experiment",
                   ConnectionTester::HostResolverExperimentDescription(
                       experiment.host_resolver_experiment));
   return dict;
 }
 
-class NetInternalsHTMLSource : public ChromeURLDataManager::DataSource {
- public:
-  NetInternalsHTMLSource();
+ChromeWebUIDataSource* CreateNetInternalsHTMLSource() {
+  ChromeWebUIDataSource* source =
+      new ChromeWebUIDataSource(chrome::kChromeUINetInternalsHost);
 
-  // Called when the network layer has requested a resource underneath
-  // the path we registered.
-  virtual void StartDataRequest(const std::string& path,
-                                bool is_incognito,
-                                int request_id);
-  virtual std::string GetMimeType(const std::string&) const;
-
- private:
-  ~NetInternalsHTMLSource() {}
-  DISALLOW_COPY_AND_ASSIGN(NetInternalsHTMLSource);
-};
+  source->set_default_resource(IDR_NET_INTERNALS_INDEX_HTML);
+  source->add_resource_path("help.html", IDR_NET_INTERNALS_HELP_HTML);
+  source->add_resource_path("help.js", IDR_NET_INTERNALS_HELP_JS);
+  source->add_resource_path("index.js", IDR_NET_INTERNALS_INDEX_JS);
+  source->set_json_path("strings.js");
+  return source;
+}
 
 // This class receives javascript messages from the renderer.
 // Note that the WebUI infrastructure runs on the UI thread, therefore all of
 // this class's methods are expected to run on the UI thread.
 //
 // Since the network code we want to run lives on the IO thread, we proxy
 // almost everything over to NetInternalsMessageHandler::IOThreadImpl, which
 // runs on the IO thread.
 //
 // TODO(eroman): Can we start on the IO thread to begin with?
@@ skipping 286 matching lines @@
     }
   }
 
  private:
   scoped_refptr<IOThreadImpl> instance_;
   IOThreadImpl::MessageHandler method_;
 };
 
 ////////////////////////////////////////////////////////////////////////////////
 //
-// NetInternalsHTMLSource
-//
-////////////////////////////////////////////////////////////////////////////////
-
-NetInternalsHTMLSource::NetInternalsHTMLSource()
-    : DataSource(chrome::kChromeUINetInternalsHost, MessageLoop::current()) {
-}
-
-void NetInternalsHTMLSource::StartDataRequest(const std::string& path,
-                                              bool is_incognito,
-                                              int request_id) {
-  DictionaryValue localized_strings;
-  SetFontAndTextDirection(&localized_strings);
-
-  // The provided "path" may contain a fragment, or query section. We only
-  // care about the path itself, and will disregard anything else.
-  std::string filename =
-      GURL(std::string("chrome://net/") + path).path().substr(1);
-
-  // The source for the net internals page is flattened during compilation, so
-  // the only resource that should legitimately be requested is the main file.
-  // Note that users can type anything into the address bar, though, so we must
-  // handle arbitrary input.
-  if (filename.empty() || filename == "index.html") {
-    base::StringPiece html(
-        ResourceBundle::GetSharedInstance().GetRawDataResource(
-            IDR_NET_INTERNALS_INDEX_HTML));
-    std::string full_html(html.data(), html.size());
-    jstemplate_builder::AppendJsonHtml(&localized_strings, &full_html);
-    jstemplate_builder::AppendI18nTemplateSourceHtml(&full_html);
-    jstemplate_builder::AppendI18nTemplateProcessHtml(&full_html);
-    jstemplate_builder::AppendJsTemplateSourceHtml(&full_html);
-
-    SendResponse(request_id, base::RefCountedString::TakeString(&full_html));
-    return;
-  }
-
-  std::string data_string("<p style='color:red'>Failed to read resource" +
-      EscapeForHTML(filename) + "</p>");
-  SendResponse(request_id, base::RefCountedString::TakeString(&data_string));
-}
-
-std::string NetInternalsHTMLSource::GetMimeType(const std::string&) const {
-  return "text/html";
-}
-
-////////////////////////////////////////////////////////////////////////////////
-//
 // NetInternalsMessageHandler
 //
 ////////////////////////////////////////////////////////////////////////////////
 
 NetInternalsMessageHandler::NetInternalsMessageHandler() {}
 
 NetInternalsMessageHandler::~NetInternalsMessageHandler() {
   if (proxy_) {
     proxy_.get()->OnWebUIDeleted();
     // Notify the handler on the IO thread that the renderer is gone.
@@ skipping 1091 matching lines @@
     // Pass it as a string, since it may be too large to fit in an integer.
     constants_dict->SetString("timeTickOffset",
                               base::Int64ToString(tick_to_unix_time_ms));
   }
   return constants_dict;
 }
 
 NetInternalsUI::NetInternalsUI(TabContents* contents) : ChromeWebUI(contents) {
   AddMessageHandler((new NetInternalsMessageHandler())->Attach(this));
 
-  NetInternalsHTMLSource* html_source = new NetInternalsHTMLSource();
-
   // Set up the chrome://net-internals/ source.
-  GetProfile()->GetChromeURLDataManager()->AddDataSource(html_source);
+  GetProfile()->GetChromeURLDataManager()->AddDataSource(
+      CreateNetInternalsHTMLSource());
 }