Chromium Code Reviews| Index: content/browser/web_contents/web_contents_impl.cc |
| diff --git a/content/browser/web_contents/web_contents_impl.cc b/content/browser/web_contents/web_contents_impl.cc |
| index a14bf00b396de805ab673a83de700799769fe16d..978bc5947287d9ffc2de66bfb3543d1680a6dafd 100644 |
| --- a/content/browser/web_contents/web_contents_impl.cc |
| +++ b/content/browser/web_contents/web_contents_impl.cc |
| @@ -15,6 +15,8 @@ |
| #include "base/sys_info.h" |
| #include "base/time.h" |
| #include "base/utf_string_conversions.h" |
| +#include "content/browser/browser_plugin/browser_plugin_embedder.h" |
| +#include "content/browser/browser_plugin/browser_plugin_guest.h" |
| #include "content/browser/browser_plugin/old/old_browser_plugin_host.h" |
| #include "content/browser/child_process_security_policy_impl.h" |
| #include "content/browser/debugger/devtools_manager_impl.h" |
| @@ -35,6 +37,7 @@ |
| #include "content/browser/web_contents/interstitial_page_impl.h" |
| #include "content/browser/web_contents/navigation_entry_impl.h" |
| #include "content/browser/webui/web_ui_impl.h" |
| +#include "content/common/browser_plugin_messages.h" |
| #include "content/common/intents_messages.h" |
| #include "content/common/ssl_status_serialization.h" |
| #include "content/common/view_messages.h" |
| @@ -687,6 +690,8 @@ bool WebContentsImpl::OnMessageReceived(RenderViewHost* render_view_host, |
| IPC_MESSAGE_HANDLER(ViewHostMsg_WebUISend, OnWebUISend) |
| IPC_MESSAGE_HANDLER(ViewHostMsg_RequestPpapiBrokerPermission, |
| OnRequestPpapiBrokerPermission) |
| + IPC_MESSAGE_HANDLER(BrowserPluginHostMsg_NavigateGuest, |
| + OnBrowserPluginNavigateGuest) |
| IPC_MESSAGE_UNHANDLED(handled = false) |
| IPC_END_MESSAGE_MAP_EX() |
| message_source_ = NULL; |
| @@ -2274,6 +2279,27 @@ void WebContentsImpl::OnPpapiBrokerPermissionResult(int request_id, |
| result)); |
| } |
| +void WebContentsImpl::OnBrowserPluginNavigateGuest(int instance_id, |
| + int64 frame_id, |
| + const std::string& src, |
| + const gfx::Size& size) { |
| + // This is the first 'navigate' to a browser plugin, before WebContents has/is |
| + // an 'Embedder'; subsequent navigate messages for this WebContents will |
| + // be handled by the BrowserPluginEmbedderHelper of the embedder itself (this |
| + // also means any message from browser plugin renderer prior to NavigateGuest |
| + // which is not NavigateGuest will be ignored). Therefore |
| + // |browser_plugin_embedder_| should not be set. |
| + CHECK(!browser_plugin_embedder_.get()); |
| + |
| + browser_plugin_embedder_.reset( |
| + content::BrowserPluginEmbedder::Create(this, GetRenderViewHost())); |
| + browser_plugin_embedder_->NavigateGuest(GetRenderViewHost(), |
| + instance_id, |
| + frame_id, |
| + src, |
| + size); |
| +} |
| + |
| // Notifies the RenderWidgetHost instance about the fact that the page is |
| // loading, or done loading and calls the base implementation. |
| void WebContentsImpl::SetIsLoading(bool is_loading, |
| @@ -2430,6 +2456,11 @@ void WebContentsImpl::NotifySwapped() { |
| content::NOTIFICATION_WEB_CONTENTS_SWAPPED, |
| content::Source<WebContents>(this), |
| content::NotificationService::NoDetails()); |
| + |
| + // Ensure that the associated embedder gets cleared after a RenderViewHost |
| + // gets swapped, so we don't reuse the same embedder next time a |
| + // RenderViewHost is attached to this WebContents (for security concerns). |
| + RemoveSwappedOutBrowserPluginEmbedder(); |
|
awong
2012/09/06 19:55:26
Can we add a test asserting this behavior, both th
lazyboy
2012/09/07 19:33:19
Will this be a similar browsertest that we current
awong
2012/09/07 20:51:03
Yes, something like that. Is there already a test
lazyboy
2012/09/08 02:12:22
No there isn't. I'll be adding one soon.
On 2012/
|
| } |
| void WebContentsImpl::NotifyConnected() { |
| @@ -2475,6 +2506,13 @@ gfx::Rect WebContentsImpl::GetRootWindowResizerRect() const { |
| return gfx::Rect(); |
| } |
| +void WebContentsImpl::RemoveSwappedOutBrowserPluginEmbedder() { |
| + if (browser_plugin_embedder_.get() && |
| + !browser_plugin_embedder_->IsForRenderViewHost(GetRenderViewHost())) { |
|
awong
2012/09/06 19:55:26
Is there a case where you get a swapped signal, ha
lazyboy
2012/09/07 19:33:19
This is unnecessary it seems (I had way less idea
|
| + browser_plugin_embedder_.reset(); |
| + } |
| +} |
| + |
| void WebContentsImpl::RenderViewCreated(RenderViewHost* render_view_host) { |
| // Don't send notifications if we are just creating a swapped-out RVH for |
| // the opener chain. These won't be used for view-source or WebUI, so it's |
| @@ -3263,3 +3301,18 @@ void WebContentsImpl::GetBrowserPluginEmbedderInfo( |
| embedder_process_id); |
| } |
| } |
| + |
| +content::BrowserPluginGuest* WebContentsImpl::AssignBrowserPluginGuest( |
| + int instance_id) { |
| + browser_plugin_guest_.reset(content::BrowserPluginGuest::Create( |
| + instance_id, this, GetRenderViewHost())); |
| + return browser_plugin_guest_.get(); |
| +} |
| + |
| +content::BrowserPluginGuest* WebContentsImpl::GetBrowserPluginGuest() { |
| + return browser_plugin_guest_.get(); |
| +} |
| + |
| +content::BrowserPluginEmbedder* WebContentsImpl::GetBrowserPluginEmbedder() { |
| + return browser_plugin_embedder_.get(); |
| +} |