| OLD | NEW |
| (Empty) |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #ifndef COMPONENTS_POLICY_CORE_COMMON_URL_BLACKLIST_MANAGER_H_ | |
| 6 #define COMPONENTS_POLICY_CORE_COMMON_URL_BLACKLIST_MANAGER_H_ | |
| 7 | |
| 8 #include <map> | |
| 9 #include <string> | |
| 10 | |
| 11 #include "base/basictypes.h" | |
| 12 #include "base/callback_forward.h" | |
| 13 #include "base/compiler_specific.h" | |
| 14 #include "base/containers/hash_tables.h" | |
| 15 #include "base/memory/ref_counted.h" | |
| 16 #include "base/memory/scoped_ptr.h" | |
| 17 #include "base/memory/weak_ptr.h" | |
| 18 #include "base/prefs/pref_change_registrar.h" | |
| 19 #include "components/policy/policy_export.h" | |
| 20 #include "components/url_matcher/url_matcher.h" | |
| 21 #include "url/gurl.h" | |
| 22 | |
| 23 class PrefService; | |
| 24 | |
| 25 namespace base { | |
| 26 class ListValue; | |
| 27 class SequencedTaskRunner; | |
| 28 } | |
| 29 | |
| 30 namespace net { | |
| 31 class URLRequest; | |
| 32 } | |
| 33 | |
| 34 namespace user_prefs { | |
| 35 class PrefRegistrySyncable; | |
| 36 } | |
| 37 | |
| 38 namespace policy { | |
| 39 | |
| 40 // Contains a set of filters to block and allow certain URLs, and matches GURLs | |
| 41 // against this set. The filters are currently kept in memory. | |
| 42 class POLICY_EXPORT URLBlacklist { | |
| 43 public: | |
| 44 // This is meant to be bound to URLFixerUpper::SegmentURL. See that function | |
| 45 // for documentation on the parameters and return value. | |
| 46 typedef std::string (*SegmentURLCallback)(const std::string&, | |
| 47 url_parse::Parsed*); | |
| 48 | |
| 49 explicit URLBlacklist(SegmentURLCallback segment_url); | |
| 50 virtual ~URLBlacklist(); | |
| 51 | |
| 52 // Allows or blocks URLs matching one of the filters, depending on |allow|. | |
| 53 void AddFilters(bool allow, const base::ListValue* filters); | |
| 54 | |
| 55 // URLs matching one of the |filters| will be blocked. The filter format is | |
| 56 // documented at | |
| 57 // http://www.chromium.org/administrators/url-blacklist-filter-format. | |
| 58 void Block(const base::ListValue* filters); | |
| 59 | |
| 60 // URLs matching one of the |filters| will be allowed. If a URL is both | |
| 61 // Blocked and Allowed, Allow takes precedence. | |
| 62 void Allow(const base::ListValue* filters); | |
| 63 | |
| 64 // Returns true if the URL is blocked. | |
| 65 bool IsURLBlocked(const GURL& url) const; | |
| 66 | |
| 67 // Returns the number of items in the list. | |
| 68 size_t Size() const; | |
| 69 | |
| 70 // Splits a URL filter into its components. A GURL isn't used because these | |
| 71 // can be invalid URLs e.g. "google.com". | |
| 72 // Returns false if the URL couldn't be parsed. | |
| 73 // The |host| is preprocessed so it can be passed to URLMatcher for the | |
| 74 // appropriate condition. | |
| 75 // The optional username and password are ignored. | |
| 76 // |match_subdomains| specifies whether the filter should include subdomains | |
| 77 // of the hostname (if it is one.) | |
| 78 // |port| is 0 if none is explicitly defined. | |
| 79 // |path| does not include query parameters. | |
| 80 static bool FilterToComponents(SegmentURLCallback segment_url, | |
| 81 const std::string& filter, | |
| 82 std::string* scheme, | |
| 83 std::string* host, | |
| 84 bool* match_subdomains, | |
| 85 uint16* port, | |
| 86 std::string* path); | |
| 87 | |
| 88 // Creates a condition set that can be used with the |url_matcher|. |id| needs | |
| 89 // to be a unique number that will be returned by the |url_matcher| if the URL | |
| 90 // matches that condition set. | |
| 91 static scoped_refptr<url_matcher::URLMatcherConditionSet> CreateConditionSet( | |
| 92 url_matcher::URLMatcher* url_matcher, | |
| 93 url_matcher::URLMatcherConditionSet::ID id, | |
| 94 const std::string& scheme, | |
| 95 const std::string& host, | |
| 96 bool match_subdomains, | |
| 97 uint16 port, | |
| 98 const std::string& path); | |
| 99 | |
| 100 private: | |
| 101 struct FilterComponents; | |
| 102 | |
| 103 // Returns true if |lhs| takes precedence over |rhs|. | |
| 104 static bool FilterTakesPrecedence(const FilterComponents& lhs, | |
| 105 const FilterComponents& rhs); | |
| 106 | |
| 107 SegmentURLCallback segment_url_; | |
| 108 url_matcher::URLMatcherConditionSet::ID id_; | |
| 109 std::map<url_matcher::URLMatcherConditionSet::ID, FilterComponents> filters_; | |
| 110 scoped_ptr<url_matcher::URLMatcher> url_matcher_; | |
| 111 | |
| 112 DISALLOW_COPY_AND_ASSIGN(URLBlacklist); | |
| 113 }; | |
| 114 | |
| 115 // Tracks the blacklist policies for a given profile, and updates it on changes. | |
| 116 // | |
| 117 // This class interacts with both the UI thread, where notifications of pref | |
| 118 // changes are received from, and the IO thread, which owns it (in the | |
| 119 // ProfileIOData) and checks for blacklisted URLs (from ChromeNetworkDelegate). | |
| 120 // | |
| 121 // It must be constructed on the UI thread, to set up |ui_weak_ptr_factory_| and | |
| 122 // the prefs listeners. | |
| 123 // | |
| 124 // ShutdownOnUIThread must be called from UI before destruction, to release | |
| 125 // the prefs listeners on the UI thread. This is done from ProfileIOData. | |
| 126 // | |
| 127 // Update tasks from the UI thread can post safely to the IO thread, since the | |
| 128 // destruction order of Profile and ProfileIOData guarantees that if this | |
| 129 // exists in UI, then a potential destruction on IO will come after any task | |
| 130 // posted to IO from that method on UI. This is used to go through IO before | |
| 131 // the actual update starts, and grab a WeakPtr. | |
| 132 class POLICY_EXPORT URLBlacklistManager { | |
| 133 public: | |
| 134 // Returns true if the blacklist should be skipped for |url|. | |
| 135 typedef bool (*SkipBlacklistCallback)(const GURL& url); | |
| 136 | |
| 137 // Must be constructed on the UI thread. | |
| 138 // |background_task_runner| is used to build the blacklist in a background | |
| 139 // thread. | |
| 140 // |io_task_runner| must be backed by the IO thread. | |
| 141 // |segment_url| is used to break a URL spec into its components. | |
| 142 URLBlacklistManager( | |
| 143 PrefService* pref_service, | |
| 144 const scoped_refptr<base::SequencedTaskRunner>& background_task_runner, | |
| 145 const scoped_refptr<base::SequencedTaskRunner>& io_task_runner, | |
| 146 URLBlacklist::SegmentURLCallback segment_url, | |
| 147 SkipBlacklistCallback skip_blacklist); | |
| 148 virtual ~URLBlacklistManager(); | |
| 149 | |
| 150 // Must be called on the UI thread, before destruction. | |
| 151 void ShutdownOnUIThread(); | |
| 152 | |
| 153 // Returns true if |url| is blocked by the current blacklist. Must be called | |
| 154 // from the IO thread. | |
| 155 bool IsURLBlocked(const GURL& url) const; | |
| 156 | |
| 157 // Returns true if |request| is blocked by the current blacklist. | |
| 158 // Only main frame and sub frame requests may be blocked; other sub resources | |
| 159 // or background downloads (e.g. extensions updates, sync, etc) are not | |
| 160 // filtered. The sync signin page is also not filtered. | |
| 161 // Must be called from the IO thread. | |
| 162 bool IsRequestBlocked(const net::URLRequest& request) const; | |
| 163 | |
| 164 // Replaces the current blacklist. Must be called on the IO thread. | |
| 165 // Virtual for testing. | |
| 166 virtual void SetBlacklist(scoped_ptr<URLBlacklist> blacklist); | |
| 167 | |
| 168 // Registers the preferences related to blacklisting in the given PrefService. | |
| 169 static void RegisterProfilePrefs(user_prefs::PrefRegistrySyncable* registry); | |
| 170 | |
| 171 protected: | |
| 172 // Used to delay updating the blacklist while the preferences are | |
| 173 // changing, and execute only one update per simultaneous prefs changes. | |
| 174 void ScheduleUpdate(); | |
| 175 | |
| 176 // Updates the blacklist using the current preference values. | |
| 177 // Virtual for testing. | |
| 178 virtual void Update(); | |
| 179 | |
| 180 // Starts the blacklist update on the IO thread, using the filters in | |
| 181 // |block| and |allow|. Protected for testing. | |
| 182 void UpdateOnIO(scoped_ptr<base::ListValue> block, | |
| 183 scoped_ptr<base::ListValue> allow); | |
| 184 | |
| 185 private: | |
| 186 // --------- | |
| 187 // UI thread | |
| 188 // --------- | |
| 189 | |
| 190 // Used to post update tasks to the UI thread. | |
| 191 base::WeakPtrFactory<URLBlacklistManager> ui_weak_ptr_factory_; | |
| 192 | |
| 193 // Used to track the policies and update the blacklist on changes. | |
| 194 PrefChangeRegistrar pref_change_registrar_; | |
| 195 PrefService* pref_service_; // Weak. | |
| 196 | |
| 197 // Used to post tasks to a background thread. | |
| 198 scoped_refptr<base::SequencedTaskRunner> background_task_runner_; | |
| 199 | |
| 200 // Used to post tasks to the IO thread. | |
| 201 scoped_refptr<base::SequencedTaskRunner> io_task_runner_; | |
| 202 | |
| 203 // Used to break a URL into its components. | |
| 204 URLBlacklist::SegmentURLCallback segment_url_; | |
| 205 | |
| 206 // Used to optionally skip blacklisting for some URLs. | |
| 207 SkipBlacklistCallback skip_blacklist_; | |
| 208 | |
| 209 // --------- | |
| 210 // IO thread | |
| 211 // --------- | |
| 212 | |
| 213 // Used to get |weak_ptr_| to self on the IO thread. | |
| 214 base::WeakPtrFactory<URLBlacklistManager> io_weak_ptr_factory_; | |
| 215 | |
| 216 // Used to post tasks to the UI thread. | |
| 217 scoped_refptr<base::SequencedTaskRunner> ui_task_runner_; | |
| 218 | |
| 219 // The current blacklist. | |
| 220 scoped_ptr<URLBlacklist> blacklist_; | |
| 221 | |
| 222 DISALLOW_COPY_AND_ASSIGN(URLBlacklistManager); | |
| 223 }; | |
| 224 | |
| 225 } // namespace policy | |
| 226 | |
| 227 #endif // COMPONENTS_POLICY_CORE_COMMON_URL_BLACKLIST_MANAGER_H_ | |
| OLD | NEW |