Chromium Code Reviews| Index: chrome/renderer/extensions/extension_dispatcher.cc |
| diff --git a/chrome/renderer/extensions/extension_dispatcher.cc b/chrome/renderer/extensions/extension_dispatcher.cc |
| index 99635bc869f82d38ea8df097cd087d91ade587a4..ffffdaa92d932f4591141f706b4bf38541eb394c 100644 |
| --- a/chrome/renderer/extensions/extension_dispatcher.cc |
| +++ b/chrome/renderer/extensions/extension_dispatcher.cc |
| @@ -10,20 +10,32 @@ |
| #include "base/string_piece.h" |
| #include "chrome/common/child_process_logging.h" |
| #include "chrome/common/chrome_switches.h" |
| +#include "chrome/common/extensions/api/extension_api.h" |
| #include "chrome/common/extensions/extension.h" |
| #include "chrome/common/extensions/extension_messages.h" |
| #include "chrome/common/extensions/extension_permission_set.h" |
| #include "chrome/common/url_constants.h" |
| #include "chrome/renderer/chrome_render_process_observer.h" |
| #include "chrome/renderer/extensions/app_bindings.h" |
| +#include "chrome/renderer/extensions/chrome_private_custom_bindings.h" |
| #include "chrome/renderer/extensions/chrome_v8_context.h" |
| #include "chrome/renderer/extensions/chrome_v8_extension.h" |
| -#include "chrome/renderer/extensions/custom_bindings_util.h" |
| +#include "chrome/renderer/extensions/context_menus_custom_bindings.h" |
| #include "chrome/renderer/extensions/event_bindings.h" |
| +#include "chrome/renderer/extensions/experimental.socket_custom_bindings.h" |
| +#include "chrome/renderer/extensions/extension_custom_bindings.h" |
| #include "chrome/renderer/extensions/extension_groups.h" |
| +#include "chrome/renderer/extensions/file_browser_handler_custom_bindings.h" |
| +#include "chrome/renderer/extensions/file_browser_private_custom_bindings.h" |
| +#include "chrome/renderer/extensions/i18n_custom_bindings.h" |
| #include "chrome/renderer/extensions/miscellaneous_bindings.h" |
| +#include "chrome/renderer/extensions/page_actions_custom_bindings.h" |
| +#include "chrome/renderer/extensions/page_capture_custom_bindings.h" |
| #include "chrome/renderer/extensions/schema_generated_bindings.h" |
| +#include "chrome/renderer/extensions/tabs_custom_bindings.h" |
| +#include "chrome/renderer/extensions/tts_custom_bindings.h" |
| #include "chrome/renderer/extensions/user_script_slave.h" |
| +#include "chrome/renderer/extensions/web_request_custom_bindings.h" |
| #include "chrome/renderer/extensions/webstore_bindings.h" |
| #include "chrome/renderer/module_system.h" |
| #include "chrome/renderer/native_handler.h" |
| @@ -34,36 +46,17 @@ |
| #include "third_party/WebKit/Source/WebKit/chromium/public/WebDocument.h" |
| #include "third_party/WebKit/Source/WebKit/chromium/public/WebFrame.h" |
| #include "third_party/WebKit/Source/WebKit/chromium/public/WebSecurityPolicy.h" |
| +#include "third_party/WebKit/Source/WebKit/chromium/public/WebView.h" |
| #include "third_party/WebKit/Source/WebKit/chromium/public/platform/WebString.h" |
| #include "third_party/WebKit/Source/WebKit/chromium/public/platform/WebURLRequest.h" |
| -#include "third_party/WebKit/Source/WebKit/chromium/public/WebView.h" |
| #include "ui/base/resource/resource_bundle.h" |
| #include "v8/include/v8.h" |
| -#include "chrome/renderer/extensions/chrome_private_custom_bindings.h" |
| -#include "chrome/renderer/extensions/context_menus_custom_bindings.h" |
| -#include "chrome/renderer/extensions/experimental.socket_custom_bindings.h" |
| -#include "chrome/renderer/extensions/extension_custom_bindings.h" |
| -#include "chrome/renderer/extensions/file_browser_handler_custom_bindings.h" |
| -#include "chrome/renderer/extensions/file_browser_private_custom_bindings.h" |
| -#include "chrome/renderer/extensions/i18n_custom_bindings.h" |
| -#include "chrome/renderer/extensions/page_actions_custom_bindings.h" |
| -#include "chrome/renderer/extensions/page_capture_custom_bindings.h" |
| -#include "chrome/renderer/extensions/tabs_custom_bindings.h" |
| -#include "chrome/renderer/extensions/tts_custom_bindings.h" |
| -#include "chrome/renderer/extensions/web_request_custom_bindings.h" |
| - |
| namespace { |
| static const int64 kInitialExtensionIdleHandlerDelayMs = 5*1000; |
| static const int64 kMaxExtensionIdleHandlerDelayMs = 5*60*1000; |
| -ChromeV8Context::ContextType ExtensionGroupToContextType(int extension_group) { |
| - if (extension_group == EXTENSION_GROUP_CONTENT_SCRIPTS) |
| - return ChromeV8Context::CONTENT_SCRIPT; |
| - return ChromeV8Context::OTHER; |
| -} |
| - |
| } |
| using namespace extensions; |
| @@ -112,7 +105,6 @@ bool ExtensionDispatcher::OnControlMessageReceived( |
| IPC_MESSAGE_HANDLER(ExtensionMsg_SetScriptingWhitelist, |
| OnSetScriptingWhitelist) |
| IPC_MESSAGE_HANDLER(ExtensionMsg_ActivateExtension, OnActivateExtension) |
| - IPC_MESSAGE_HANDLER(ExtensionMsg_ActivateApplication, OnActivateApplication) |
| IPC_MESSAGE_HANDLER(ExtensionMsg_UpdatePermissions, OnUpdatePermissions) |
| IPC_MESSAGE_HANDLER(ExtensionMsg_UpdateUserScripts, OnUpdateUserScripts) |
| IPC_MESSAGE_HANDLER(ExtensionMsg_UsingWebRequestAPI, OnUsingWebRequestAPI) |
| @@ -256,12 +248,6 @@ void ExtensionDispatcher::OnSetScriptingWhitelist( |
| Extension::SetScriptingWhitelist(extension_ids); |
| } |
| -bool ExtensionDispatcher::IsApplicationActive( |
| - const std::string& extension_id) const { |
| - return active_application_ids_.find(extension_id) != |
| - active_application_ids_.end(); |
| -} |
| - |
| bool ExtensionDispatcher::IsExtensionActive( |
| const std::string& extension_id) const { |
| return active_extension_ids_.find(extension_id) != |
| @@ -296,27 +282,6 @@ bool ExtensionDispatcher::AllowScriptExtension( |
| return true; |
| } |
| -bool ExtensionDispatcher::AllowCustomAPI(WebFrame* frame, |
| - const std::string& custom_binding_api_name, |
| - int world_id) { |
| - std::string extension_id = GetExtensionID(frame, world_id); |
| - const Extension* extension = extensions_.GetByID(extension_id); |
| - if (!extension) { |
| - // This can happen when a resource is blocked due to CSP; a valid |
| - // chrome-extension:// URL is navigated to, so it passes the initial |
| - // checks, but the URL gets changed to "chrome-extension://invalid" |
| - // afterwards (see chrome_content_renderer_client.cc). An extension |
| - // page still gets loaded, just for the extension with ID "invalid", |
| - // which of course isn't found so GetById extension will be NULL. |
| - // |
| - // Reference: http://crbug.com/111614. |
| - CHECK_EQ("invalid", extension_id); |
| - return false; |
| - } |
| - return custom_bindings_util::AllowAPIInjection( |
| - custom_binding_api_name, *extension, this); |
| -} |
| - |
| base::StringPiece GetResource(int resource_id) { |
| return ResourceBundle::GetSharedInstance().GetRawDataResource(resource_id); |
| } |
| @@ -368,43 +333,40 @@ class PrintNativeHandler : public NativeHandler { |
| class ContextInfoNativeHandler : public NativeHandler { |
| public: |
| explicit ContextInfoNativeHandler(ExtensionDispatcher* extension_dispatcher, |
| - bool is_bindings_allowed, |
| - WebFrame* frame, |
| - int world_id) |
| + const std::string& extension_id, |
| + const GURL& url, |
| + Feature::Context context_type) |
| : extension_dispatcher_(extension_dispatcher), |
| - is_bindings_allowed_(is_bindings_allowed), |
| - frame_(frame), |
| - world_id_(world_id) { |
| - RouteFunction("IsBindingsAllowed", |
| - base::Bind(&ContextInfoNativeHandler::IsBindingsAllowed, |
| - base::Unretained(this))); |
| + extension_id_(extension_id), |
| + url_(url), |
| + context_type_(context_type) { |
| RouteFunction("IsAPIAllowed", |
| base::Bind(&ContextInfoNativeHandler::IsAPIAllowed, |
| base::Unretained(this))); |
| } |
| - v8::Handle<v8::Value> IsBindingsAllowed(const v8::Arguments& args) { |
| - return v8::Boolean::New(is_bindings_allowed_); |
| - } |
| - |
| v8::Handle<v8::Value> IsAPIAllowed(const v8::Arguments& args) { |
| - std::string custom_api_name = *v8::String::AsciiValue(args[0]->ToString()); |
| - return v8::Boolean::New(extension_dispatcher_->AllowCustomAPI( |
| - frame_, custom_api_name, world_id_)); |
| + std::string api_name = *v8::String::AsciiValue(args[0]->ToString()); |
| + |
| + // The extension or URL might not exist / be valid, but one of them must |
| + // be for GetAPIsForContext (which depends on the context type). |
| + const Extension* extension = |
| + extension_dispatcher_->extensions()->GetByID(extension_id_); |
| + scoped_ptr<std::set<std::string> > allowed_apis = |
| + ExtensionAPI::GetInstance()->GetAPIsForContext( |
| + context_type_, extension, url_); |
| + return v8::Boolean::New(!!allowed_apis->count(api_name)); |
| } |
| private: |
| ExtensionDispatcher* extension_dispatcher_; |
| - bool is_bindings_allowed_; |
| - WebFrame* frame_; |
| - int world_id_; |
| + std::string extension_id_; |
| + GURL url_; |
| + extensions::Feature::Context context_type_; |
| }; |
| void ExtensionDispatcher::RegisterNativeHandlers(ModuleSystem* module_system, |
| - ChromeV8Context* context, |
| - bool is_bindings_allowed) { |
| - module_system->RegisterNativeHandler("app", |
| - scoped_ptr<NativeHandler>(new AppBindings(this, context))); |
| + ChromeV8Context* context) { |
| module_system->RegisterNativeHandler("webstore", |
| scoped_ptr<NativeHandler>(new WebstoreBindings(this, context))); |
| module_system->RegisterNativeHandler("event_bindings", |
| @@ -415,6 +377,8 @@ void ExtensionDispatcher::RegisterNativeHandlers(ModuleSystem* module_system, |
| scoped_ptr<NativeHandler>(SchemaGeneratedBindings::Get(this))); |
| // Custom bindings. |
| + module_system->RegisterNativeHandler("app", |
| + scoped_ptr<NativeHandler>(new AppBindings(this, context))); |
| module_system->RegisterNativeHandler("chrome_private", |
| scoped_ptr<NativeHandler>( |
| new ChromePrivateCustomBindings(this))); |
| @@ -445,7 +409,6 @@ void ExtensionDispatcher::RegisterNativeHandlers(ModuleSystem* module_system, |
| } |
| void ExtensionDispatcher::PopulateSourceMap() { |
| - source_map_.RegisterSource("app", IDR_APP_BINDINGS_JS); |
| source_map_.RegisterSource("webstore", IDR_WEBSTORE_BINDINGS_JS); |
| source_map_.RegisterSource("event_bindings", IDR_EVENT_BINDINGS_JS); |
| source_map_.RegisterSource("miscellaneous_bindings", |
| @@ -456,7 +419,8 @@ void ExtensionDispatcher::PopulateSourceMap() { |
| source_map_.RegisterSource("apitest", IDR_EXTENSION_APITEST_JS); |
| source_map_.RegisterSource("setup_bindings", IDR_SETUP_BINDINGS_JS); |
| - // Custom bindings. |
| + // Custom bindings. |
| + source_map_.RegisterSource("app", IDR_APP_CUSTOM_BINDINGS_JS); |
| source_map_.RegisterSource("browserAction", |
| IDR_BROWSER_ACTION_CUSTOM_BINDINGS_JS); |
| source_map_.RegisterSource("chromePrivate", |
| @@ -498,22 +462,32 @@ void ExtensionDispatcher::DidCreateScriptContext( |
| // TODO(koz): If the caller didn't pass extension_group, use the last value. |
| if (extension_group == -1) |
| extension_group = g_hack_extension_group; |
| + |
| + std::string extension_id = GetExtensionID(frame, world_id); |
| + ExtensionURLInfo url_info(frame->document().securityOrigin(), |
| + UserScriptSlave::GetDataSourceURLForFrame(frame)); |
| + Feature::Context context_type = |
| + ClassifyJavaScriptContext(extension_id, extension_group, url_info); |
| + |
| + // Sanity checking - |
| + // |
| + // This can happen when a resource is blocked due to CSP; a valid |
| + // chrome-extension:// URL is navigated to, so it passes the initial checks, |
| + // but the URL gets changed to "chrome-extension://invalid" afterwards (see |
| + // chrome_content_renderer_client.cc). An extension page still gets loaded, |
| + // just for the extension with ID "invalid", which of course isn't found so |
| + // GetById extension will be NULL. |
| + // |
| + // Reference: http://crbug.com/111614. |
| + if (extension_id == "invalid") |
| + CHECK_EQ(Feature::UNSPECIFIED_CONTEXT, context_type); |
| + |
| ChromeV8Context* context = |
| - new ChromeV8Context( |
| - v8_context, |
| - frame, |
| - GetExtensionID(frame, world_id), |
| - ExtensionGroupToContextType(extension_group)); |
| + new ChromeV8Context(v8_context, frame, extension_id, context_type); |
| v8_context_set_.Add(context); |
| - bool is_bindings_allowed = |
| - context->context_type() == ChromeV8Context::CONTENT_SCRIPT || |
| - extensions_.ExtensionBindingsAllowed(ExtensionURLInfo( |
| - frame->document().securityOrigin(), |
| - UserScriptSlave::GetDataSourceURLForFrame(frame))); |
| - |
| ModuleSystem* module_system = new ModuleSystem(&source_map_); |
| - RegisterNativeHandlers(module_system, context, is_bindings_allowed); |
| + RegisterNativeHandlers(module_system, context); |
| module_system->RegisterNativeHandler("chrome_hidden", |
| scoped_ptr<NativeHandler>(new ChromeHiddenNativeHandler())); |
| @@ -521,14 +495,11 @@ void ExtensionDispatcher::DidCreateScriptContext( |
| scoped_ptr<NativeHandler>(new PrintNativeHandler())); |
| module_system->RegisterNativeHandler("context_info", |
| scoped_ptr<NativeHandler>(new ContextInfoNativeHandler( |
| - this, |
| - is_bindings_allowed, |
| - frame, |
| - world_id))); |
| + this, extension_id, url_info.url(), context_type))); |
| context->set_module_system(scoped_ptr<ModuleSystem>(module_system)); |
| - const Extension* extension = extensions_.GetByID(context->extension_id()); |
| + const Extension* extension = extensions_.GetByID(extension_id); |
| int manifest_version = 1; |
| if (extension) |
| manifest_version = extension->manifest_version(); |
| @@ -570,16 +541,12 @@ void ExtensionDispatcher::WillReleaseScriptContext( |
| } |
| void ExtensionDispatcher::SetTestExtensionId(const std::string& id) { |
| + CHECK(!id.empty()); |
| test_extension_id_ = id; |
| } |
| bool ExtensionDispatcher::IsTestExtensionId(const std::string& id) { |
| - return id == test_extension_id_; |
| -} |
| - |
| -void ExtensionDispatcher::OnActivateApplication( |
| - const std::string& extension_id) { |
| - active_application_ids_.insert(extension_id); |
| + return !test_extension_id_.empty() && id == test_extension_id_; |
| } |
| void ExtensionDispatcher::OnActivateExtension( |
| @@ -709,3 +676,22 @@ void ExtensionDispatcher::OnShouldClose(const std::string& extension_id, |
| RenderThread::Get()->Send( |
| new ExtensionHostMsg_ShouldCloseAck(extension_id, sequence_id)); |
| } |
| + |
| +Feature::Context ExtensionDispatcher::ClassifyJavaScriptContext( |
| + const std::string& extension_id, |
| + int extension_group, |
| + const ExtensionURLInfo& url_info) { |
| + if (extension_group == EXTENSION_GROUP_CONTENT_SCRIPTS) |
| + return Feature::CONTENT_SCRIPT_CONTEXT; |
| + |
| + if (IsExtensionActive(extension_id)) |
| + return Feature::PRIVILEGED_CONTEXT; |
| + |
| + if (extensions_.ExtensionBindingsAllowed(url_info)) |
| + return Feature::UNPRIVILEGED_CONTEXT; |
|
Aaron Boodman
2012/03/06 01:17:21
OK, but this name is terrible. After this CL, can
not at google - send to devlin
2012/03/06 03:53:00
Yep. Added TODO to feature.h
Does s/PRIVILEGED/BL
Aaron Boodman
2012/03/06 08:18:12
Yes.
|
| + |
| + if (url_info.url().is_valid()) |
| + return Feature::WEB_PAGE_CONTEXT; |
| + |
| + return Feature::UNSPECIFIED_CONTEXT; |
| +} |