| OLD | NEW |
| 1 // Copyright 2015 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "extensions/renderer/extension_injection_host.h" | 5 #include "extensions/renderer/extension_injection_host.h" |
| 6 | 6 |
| 7 #include "content/public/renderer/render_frame.h" | 7 #include "content/public/renderer/render_frame.h" |
| 8 #include "extensions/common/constants.h" | 8 #include "extensions/common/constants.h" |
| 9 #include "extensions/common/extension_set.h" | 9 #include "extensions/common/extension_set.h" |
| 10 #include "extensions/common/manifest_handlers/csp_info.h" | 10 #include "extensions/common/manifest_handlers/csp_info.h" |
| (...skipping 39 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 50 content::RenderFrame* render_frame, | 50 content::RenderFrame* render_frame, |
| 51 int tab_id, | 51 int tab_id, |
| 52 bool is_declarative) const { | 52 bool is_declarative) const { |
| 53 // If we don't have a tab id, we have no UI surface to ask for user consent. | 53 // If we don't have a tab id, we have no UI surface to ask for user consent. |
| 54 // For now, we treat this as an automatic allow. | 54 // For now, we treat this as an automatic allow. |
| 55 if (tab_id == -1) | 55 if (tab_id == -1) |
| 56 return PermissionsData::ACCESS_ALLOWED; | 56 return PermissionsData::ACCESS_ALLOWED; |
| 57 | 57 |
| 58 blink::WebSecurityOrigin top_frame_security_origin = | 58 blink::WebSecurityOrigin top_frame_security_origin = |
| 59 render_frame->GetWebFrame()->top()->securityOrigin(); | 59 render_frame->GetWebFrame()->top()->securityOrigin(); |
| 60 // Only whitelisted extensions may run scripts on another extension's page. | |
| 61 if (top_frame_security_origin.protocol().utf8() == kExtensionScheme && | 60 if (top_frame_security_origin.protocol().utf8() == kExtensionScheme && |
| 62 top_frame_security_origin.host().utf8() != extension_->id() && | 61 top_frame_security_origin.host().utf8() != extension_->id()) |
| 63 !PermissionsData::CanExecuteScriptEverywhere(extension_)) | |
| 64 return PermissionsData::ACCESS_DENIED; | 62 return PermissionsData::ACCESS_DENIED; |
| 65 | 63 |
| 66 // Declarative user scripts use "page access" (from "permissions" section in | 64 // Declarative user scripts use "page access" (from "permissions" section in |
| 67 // manifest) whereas non-declarative user scripts use custom | 65 // manifest) whereas non-declarative user scripts use custom |
| 68 // "content script access" logic. | 66 // "content script access" logic. |
| 69 if (is_declarative) { | 67 if (is_declarative) { |
| 70 return extension_->permissions_data()->GetPageAccess( | 68 return extension_->permissions_data()->GetPageAccess( |
| 71 extension_, | 69 extension_, |
| 72 document_url, | 70 document_url, |
| 73 tab_id, | 71 tab_id, |
| (...skipping 13 matching lines...) Expand all Loading... |
| 87 // We notify the browser of any injection if the extension has no withheld | 85 // We notify the browser of any injection if the extension has no withheld |
| 88 // permissions (i.e., the permissions weren't restricted), but would have | 86 // permissions (i.e., the permissions weren't restricted), but would have |
| 89 // otherwise been affected by the scripts-require-action feature. | 87 // otherwise been affected by the scripts-require-action feature. |
| 90 return extension_->permissions_data()->withheld_permissions()->IsEmpty() && | 88 return extension_->permissions_data()->withheld_permissions()->IsEmpty() && |
| 91 PermissionsData::ScriptsMayRequireActionForExtension( | 89 PermissionsData::ScriptsMayRequireActionForExtension( |
| 92 extension_, | 90 extension_, |
| 93 extension_->permissions_data()->active_permissions().get()); | 91 extension_->permissions_data()->active_permissions().get()); |
| 94 } | 92 } |
| 95 | 93 |
| 96 } // namespace extensions | 94 } // namespace extensions |
| OLD | NEW |