| Index: chrome/renderer/extensions/extension_dispatcher.cc
|
| diff --git a/chrome/renderer/extensions/extension_dispatcher.cc b/chrome/renderer/extensions/extension_dispatcher.cc
|
| index 99635bc869f82d38ea8df097cd087d91ade587a4..ffffdaa92d932f4591141f706b4bf38541eb394c 100644
|
| --- a/chrome/renderer/extensions/extension_dispatcher.cc
|
| +++ b/chrome/renderer/extensions/extension_dispatcher.cc
|
| @@ -10,20 +10,32 @@
|
| #include "base/string_piece.h"
|
| #include "chrome/common/child_process_logging.h"
|
| #include "chrome/common/chrome_switches.h"
|
| +#include "chrome/common/extensions/api/extension_api.h"
|
| #include "chrome/common/extensions/extension.h"
|
| #include "chrome/common/extensions/extension_messages.h"
|
| #include "chrome/common/extensions/extension_permission_set.h"
|
| #include "chrome/common/url_constants.h"
|
| #include "chrome/renderer/chrome_render_process_observer.h"
|
| #include "chrome/renderer/extensions/app_bindings.h"
|
| +#include "chrome/renderer/extensions/chrome_private_custom_bindings.h"
|
| #include "chrome/renderer/extensions/chrome_v8_context.h"
|
| #include "chrome/renderer/extensions/chrome_v8_extension.h"
|
| -#include "chrome/renderer/extensions/custom_bindings_util.h"
|
| +#include "chrome/renderer/extensions/context_menus_custom_bindings.h"
|
| #include "chrome/renderer/extensions/event_bindings.h"
|
| +#include "chrome/renderer/extensions/experimental.socket_custom_bindings.h"
|
| +#include "chrome/renderer/extensions/extension_custom_bindings.h"
|
| #include "chrome/renderer/extensions/extension_groups.h"
|
| +#include "chrome/renderer/extensions/file_browser_handler_custom_bindings.h"
|
| +#include "chrome/renderer/extensions/file_browser_private_custom_bindings.h"
|
| +#include "chrome/renderer/extensions/i18n_custom_bindings.h"
|
| #include "chrome/renderer/extensions/miscellaneous_bindings.h"
|
| +#include "chrome/renderer/extensions/page_actions_custom_bindings.h"
|
| +#include "chrome/renderer/extensions/page_capture_custom_bindings.h"
|
| #include "chrome/renderer/extensions/schema_generated_bindings.h"
|
| +#include "chrome/renderer/extensions/tabs_custom_bindings.h"
|
| +#include "chrome/renderer/extensions/tts_custom_bindings.h"
|
| #include "chrome/renderer/extensions/user_script_slave.h"
|
| +#include "chrome/renderer/extensions/web_request_custom_bindings.h"
|
| #include "chrome/renderer/extensions/webstore_bindings.h"
|
| #include "chrome/renderer/module_system.h"
|
| #include "chrome/renderer/native_handler.h"
|
| @@ -34,36 +46,17 @@
|
| #include "third_party/WebKit/Source/WebKit/chromium/public/WebDocument.h"
|
| #include "third_party/WebKit/Source/WebKit/chromium/public/WebFrame.h"
|
| #include "third_party/WebKit/Source/WebKit/chromium/public/WebSecurityPolicy.h"
|
| +#include "third_party/WebKit/Source/WebKit/chromium/public/WebView.h"
|
| #include "third_party/WebKit/Source/WebKit/chromium/public/platform/WebString.h"
|
| #include "third_party/WebKit/Source/WebKit/chromium/public/platform/WebURLRequest.h"
|
| -#include "third_party/WebKit/Source/WebKit/chromium/public/WebView.h"
|
| #include "ui/base/resource/resource_bundle.h"
|
| #include "v8/include/v8.h"
|
|
|
| -#include "chrome/renderer/extensions/chrome_private_custom_bindings.h"
|
| -#include "chrome/renderer/extensions/context_menus_custom_bindings.h"
|
| -#include "chrome/renderer/extensions/experimental.socket_custom_bindings.h"
|
| -#include "chrome/renderer/extensions/extension_custom_bindings.h"
|
| -#include "chrome/renderer/extensions/file_browser_handler_custom_bindings.h"
|
| -#include "chrome/renderer/extensions/file_browser_private_custom_bindings.h"
|
| -#include "chrome/renderer/extensions/i18n_custom_bindings.h"
|
| -#include "chrome/renderer/extensions/page_actions_custom_bindings.h"
|
| -#include "chrome/renderer/extensions/page_capture_custom_bindings.h"
|
| -#include "chrome/renderer/extensions/tabs_custom_bindings.h"
|
| -#include "chrome/renderer/extensions/tts_custom_bindings.h"
|
| -#include "chrome/renderer/extensions/web_request_custom_bindings.h"
|
| -
|
| namespace {
|
|
|
| static const int64 kInitialExtensionIdleHandlerDelayMs = 5*1000;
|
| static const int64 kMaxExtensionIdleHandlerDelayMs = 5*60*1000;
|
|
|
| -ChromeV8Context::ContextType ExtensionGroupToContextType(int extension_group) {
|
| - if (extension_group == EXTENSION_GROUP_CONTENT_SCRIPTS)
|
| - return ChromeV8Context::CONTENT_SCRIPT;
|
| - return ChromeV8Context::OTHER;
|
| -}
|
| -
|
| }
|
|
|
| using namespace extensions;
|
| @@ -112,7 +105,6 @@ bool ExtensionDispatcher::OnControlMessageReceived(
|
| IPC_MESSAGE_HANDLER(ExtensionMsg_SetScriptingWhitelist,
|
| OnSetScriptingWhitelist)
|
| IPC_MESSAGE_HANDLER(ExtensionMsg_ActivateExtension, OnActivateExtension)
|
| - IPC_MESSAGE_HANDLER(ExtensionMsg_ActivateApplication, OnActivateApplication)
|
| IPC_MESSAGE_HANDLER(ExtensionMsg_UpdatePermissions, OnUpdatePermissions)
|
| IPC_MESSAGE_HANDLER(ExtensionMsg_UpdateUserScripts, OnUpdateUserScripts)
|
| IPC_MESSAGE_HANDLER(ExtensionMsg_UsingWebRequestAPI, OnUsingWebRequestAPI)
|
| @@ -256,12 +248,6 @@ void ExtensionDispatcher::OnSetScriptingWhitelist(
|
| Extension::SetScriptingWhitelist(extension_ids);
|
| }
|
|
|
| -bool ExtensionDispatcher::IsApplicationActive(
|
| - const std::string& extension_id) const {
|
| - return active_application_ids_.find(extension_id) !=
|
| - active_application_ids_.end();
|
| -}
|
| -
|
| bool ExtensionDispatcher::IsExtensionActive(
|
| const std::string& extension_id) const {
|
| return active_extension_ids_.find(extension_id) !=
|
| @@ -296,27 +282,6 @@ bool ExtensionDispatcher::AllowScriptExtension(
|
| return true;
|
| }
|
|
|
| -bool ExtensionDispatcher::AllowCustomAPI(WebFrame* frame,
|
| - const std::string& custom_binding_api_name,
|
| - int world_id) {
|
| - std::string extension_id = GetExtensionID(frame, world_id);
|
| - const Extension* extension = extensions_.GetByID(extension_id);
|
| - if (!extension) {
|
| - // This can happen when a resource is blocked due to CSP; a valid
|
| - // chrome-extension:// URL is navigated to, so it passes the initial
|
| - // checks, but the URL gets changed to "chrome-extension://invalid"
|
| - // afterwards (see chrome_content_renderer_client.cc). An extension
|
| - // page still gets loaded, just for the extension with ID "invalid",
|
| - // which of course isn't found so GetById extension will be NULL.
|
| - //
|
| - // Reference: http://crbug.com/111614.
|
| - CHECK_EQ("invalid", extension_id);
|
| - return false;
|
| - }
|
| - return custom_bindings_util::AllowAPIInjection(
|
| - custom_binding_api_name, *extension, this);
|
| -}
|
| -
|
| base::StringPiece GetResource(int resource_id) {
|
| return ResourceBundle::GetSharedInstance().GetRawDataResource(resource_id);
|
| }
|
| @@ -368,43 +333,40 @@ class PrintNativeHandler : public NativeHandler {
|
| class ContextInfoNativeHandler : public NativeHandler {
|
| public:
|
| explicit ContextInfoNativeHandler(ExtensionDispatcher* extension_dispatcher,
|
| - bool is_bindings_allowed,
|
| - WebFrame* frame,
|
| - int world_id)
|
| + const std::string& extension_id,
|
| + const GURL& url,
|
| + Feature::Context context_type)
|
| : extension_dispatcher_(extension_dispatcher),
|
| - is_bindings_allowed_(is_bindings_allowed),
|
| - frame_(frame),
|
| - world_id_(world_id) {
|
| - RouteFunction("IsBindingsAllowed",
|
| - base::Bind(&ContextInfoNativeHandler::IsBindingsAllowed,
|
| - base::Unretained(this)));
|
| + extension_id_(extension_id),
|
| + url_(url),
|
| + context_type_(context_type) {
|
| RouteFunction("IsAPIAllowed",
|
| base::Bind(&ContextInfoNativeHandler::IsAPIAllowed,
|
| base::Unretained(this)));
|
| }
|
|
|
| - v8::Handle<v8::Value> IsBindingsAllowed(const v8::Arguments& args) {
|
| - return v8::Boolean::New(is_bindings_allowed_);
|
| - }
|
| -
|
| v8::Handle<v8::Value> IsAPIAllowed(const v8::Arguments& args) {
|
| - std::string custom_api_name = *v8::String::AsciiValue(args[0]->ToString());
|
| - return v8::Boolean::New(extension_dispatcher_->AllowCustomAPI(
|
| - frame_, custom_api_name, world_id_));
|
| + std::string api_name = *v8::String::AsciiValue(args[0]->ToString());
|
| +
|
| + // The extension or URL might not exist / be valid, but one of them must
|
| + // be for GetAPIsForContext (which depends on the context type).
|
| + const Extension* extension =
|
| + extension_dispatcher_->extensions()->GetByID(extension_id_);
|
| + scoped_ptr<std::set<std::string> > allowed_apis =
|
| + ExtensionAPI::GetInstance()->GetAPIsForContext(
|
| + context_type_, extension, url_);
|
| + return v8::Boolean::New(!!allowed_apis->count(api_name));
|
| }
|
|
|
| private:
|
| ExtensionDispatcher* extension_dispatcher_;
|
| - bool is_bindings_allowed_;
|
| - WebFrame* frame_;
|
| - int world_id_;
|
| + std::string extension_id_;
|
| + GURL url_;
|
| + extensions::Feature::Context context_type_;
|
| };
|
|
|
| void ExtensionDispatcher::RegisterNativeHandlers(ModuleSystem* module_system,
|
| - ChromeV8Context* context,
|
| - bool is_bindings_allowed) {
|
| - module_system->RegisterNativeHandler("app",
|
| - scoped_ptr<NativeHandler>(new AppBindings(this, context)));
|
| + ChromeV8Context* context) {
|
| module_system->RegisterNativeHandler("webstore",
|
| scoped_ptr<NativeHandler>(new WebstoreBindings(this, context)));
|
| module_system->RegisterNativeHandler("event_bindings",
|
| @@ -415,6 +377,8 @@ void ExtensionDispatcher::RegisterNativeHandlers(ModuleSystem* module_system,
|
| scoped_ptr<NativeHandler>(SchemaGeneratedBindings::Get(this)));
|
|
|
| // Custom bindings.
|
| + module_system->RegisterNativeHandler("app",
|
| + scoped_ptr<NativeHandler>(new AppBindings(this, context)));
|
| module_system->RegisterNativeHandler("chrome_private",
|
| scoped_ptr<NativeHandler>(
|
| new ChromePrivateCustomBindings(this)));
|
| @@ -445,7 +409,6 @@ void ExtensionDispatcher::RegisterNativeHandlers(ModuleSystem* module_system,
|
| }
|
|
|
| void ExtensionDispatcher::PopulateSourceMap() {
|
| - source_map_.RegisterSource("app", IDR_APP_BINDINGS_JS);
|
| source_map_.RegisterSource("webstore", IDR_WEBSTORE_BINDINGS_JS);
|
| source_map_.RegisterSource("event_bindings", IDR_EVENT_BINDINGS_JS);
|
| source_map_.RegisterSource("miscellaneous_bindings",
|
| @@ -456,7 +419,8 @@ void ExtensionDispatcher::PopulateSourceMap() {
|
| source_map_.RegisterSource("apitest", IDR_EXTENSION_APITEST_JS);
|
| source_map_.RegisterSource("setup_bindings", IDR_SETUP_BINDINGS_JS);
|
|
|
| - // Custom bindings.
|
| + // Custom bindings.
|
| + source_map_.RegisterSource("app", IDR_APP_CUSTOM_BINDINGS_JS);
|
| source_map_.RegisterSource("browserAction",
|
| IDR_BROWSER_ACTION_CUSTOM_BINDINGS_JS);
|
| source_map_.RegisterSource("chromePrivate",
|
| @@ -498,22 +462,32 @@ void ExtensionDispatcher::DidCreateScriptContext(
|
| // TODO(koz): If the caller didn't pass extension_group, use the last value.
|
| if (extension_group == -1)
|
| extension_group = g_hack_extension_group;
|
| +
|
| + std::string extension_id = GetExtensionID(frame, world_id);
|
| + ExtensionURLInfo url_info(frame->document().securityOrigin(),
|
| + UserScriptSlave::GetDataSourceURLForFrame(frame));
|
| + Feature::Context context_type =
|
| + ClassifyJavaScriptContext(extension_id, extension_group, url_info);
|
| +
|
| + // Sanity checking -
|
| + //
|
| + // This can happen when a resource is blocked due to CSP; a valid
|
| + // chrome-extension:// URL is navigated to, so it passes the initial checks,
|
| + // but the URL gets changed to "chrome-extension://invalid" afterwards (see
|
| + // chrome_content_renderer_client.cc). An extension page still gets loaded,
|
| + // just for the extension with ID "invalid", which of course isn't found so
|
| + // GetById extension will be NULL.
|
| + //
|
| + // Reference: http://crbug.com/111614.
|
| + if (extension_id == "invalid")
|
| + CHECK_EQ(Feature::UNSPECIFIED_CONTEXT, context_type);
|
| +
|
| ChromeV8Context* context =
|
| - new ChromeV8Context(
|
| - v8_context,
|
| - frame,
|
| - GetExtensionID(frame, world_id),
|
| - ExtensionGroupToContextType(extension_group));
|
| + new ChromeV8Context(v8_context, frame, extension_id, context_type);
|
| v8_context_set_.Add(context);
|
|
|
| - bool is_bindings_allowed =
|
| - context->context_type() == ChromeV8Context::CONTENT_SCRIPT ||
|
| - extensions_.ExtensionBindingsAllowed(ExtensionURLInfo(
|
| - frame->document().securityOrigin(),
|
| - UserScriptSlave::GetDataSourceURLForFrame(frame)));
|
| -
|
| ModuleSystem* module_system = new ModuleSystem(&source_map_);
|
| - RegisterNativeHandlers(module_system, context, is_bindings_allowed);
|
| + RegisterNativeHandlers(module_system, context);
|
|
|
| module_system->RegisterNativeHandler("chrome_hidden",
|
| scoped_ptr<NativeHandler>(new ChromeHiddenNativeHandler()));
|
| @@ -521,14 +495,11 @@ void ExtensionDispatcher::DidCreateScriptContext(
|
| scoped_ptr<NativeHandler>(new PrintNativeHandler()));
|
| module_system->RegisterNativeHandler("context_info",
|
| scoped_ptr<NativeHandler>(new ContextInfoNativeHandler(
|
| - this,
|
| - is_bindings_allowed,
|
| - frame,
|
| - world_id)));
|
| + this, extension_id, url_info.url(), context_type)));
|
|
|
| context->set_module_system(scoped_ptr<ModuleSystem>(module_system));
|
|
|
| - const Extension* extension = extensions_.GetByID(context->extension_id());
|
| + const Extension* extension = extensions_.GetByID(extension_id);
|
| int manifest_version = 1;
|
| if (extension)
|
| manifest_version = extension->manifest_version();
|
| @@ -570,16 +541,12 @@ void ExtensionDispatcher::WillReleaseScriptContext(
|
| }
|
|
|
| void ExtensionDispatcher::SetTestExtensionId(const std::string& id) {
|
| + CHECK(!id.empty());
|
| test_extension_id_ = id;
|
| }
|
|
|
| bool ExtensionDispatcher::IsTestExtensionId(const std::string& id) {
|
| - return id == test_extension_id_;
|
| -}
|
| -
|
| -void ExtensionDispatcher::OnActivateApplication(
|
| - const std::string& extension_id) {
|
| - active_application_ids_.insert(extension_id);
|
| + return !test_extension_id_.empty() && id == test_extension_id_;
|
| }
|
|
|
| void ExtensionDispatcher::OnActivateExtension(
|
| @@ -709,3 +676,22 @@ void ExtensionDispatcher::OnShouldClose(const std::string& extension_id,
|
| RenderThread::Get()->Send(
|
| new ExtensionHostMsg_ShouldCloseAck(extension_id, sequence_id));
|
| }
|
| +
|
| +Feature::Context ExtensionDispatcher::ClassifyJavaScriptContext(
|
| + const std::string& extension_id,
|
| + int extension_group,
|
| + const ExtensionURLInfo& url_info) {
|
| + if (extension_group == EXTENSION_GROUP_CONTENT_SCRIPTS)
|
| + return Feature::CONTENT_SCRIPT_CONTEXT;
|
| +
|
| + if (IsExtensionActive(extension_id))
|
| + return Feature::PRIVILEGED_CONTEXT;
|
| +
|
| + if (extensions_.ExtensionBindingsAllowed(url_info))
|
| + return Feature::UNPRIVILEGED_CONTEXT;
|
| +
|
| + if (url_info.url().is_valid())
|
| + return Feature::WEB_PAGE_CONTEXT;
|
| +
|
| + return Feature::UNSPECIFIED_CONTEXT;
|
| +}
|
|
|