| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "content/browser/renderer_host/render_view_host_impl.h" | 5 #include "content/browser/renderer_host/render_view_host_impl.h" |
| 6 | 6 |
| 7 #include <set> | 7 #include <set> |
| 8 #include <string> | 8 #include <string> |
| 9 #include <utility> | 9 #include <utility> |
| 10 #include <vector> | 10 #include <vector> |
| (...skipping 50 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 61 #include "content/public/common/url_constants.h" | 61 #include "content/public/common/url_constants.h" |
| 62 #include "content/public/common/url_utils.h" | 62 #include "content/public/common/url_utils.h" |
| 63 #include "net/base/net_util.h" | 63 #include "net/base/net_util.h" |
| 64 #include "net/url_request/url_request_context_getter.h" | 64 #include "net/url_request/url_request_context_getter.h" |
| 65 #include "third_party/skia/include/core/SkBitmap.h" | 65 #include "third_party/skia/include/core/SkBitmap.h" |
| 66 #include "ui/gfx/image/image_skia.h" | 66 #include "ui/gfx/image/image_skia.h" |
| 67 #include "ui/gfx/native_widget_types.h" | 67 #include "ui/gfx/native_widget_types.h" |
| 68 #include "ui/shell_dialogs/selected_file_info.h" | 68 #include "ui/shell_dialogs/selected_file_info.h" |
| 69 #include "ui/snapshot/snapshot.h" | 69 #include "ui/snapshot/snapshot.h" |
| 70 #include "webkit/fileapi/isolated_context.h" | 70 #include "webkit/fileapi/isolated_context.h" |
| 71 #include "webkit/glue/glue_serialize.h" | |
| 72 #include "webkit/glue/webdropdata.h" | 71 #include "webkit/glue/webdropdata.h" |
| 73 #include "webkit/glue/webkit_glue.h" | 72 #include "webkit/glue/webkit_glue.h" |
| 74 | 73 |
| 75 #if defined(OS_WIN) | 74 #if defined(OS_WIN) |
| 76 #include "base/win/windows_version.h" | 75 #include "base/win/windows_version.h" |
| 77 #include "third_party/WebKit/Source/WebKit/chromium/public/win/WebScreenInfoFact
ory.h" | 76 #include "third_party/WebKit/Source/WebKit/chromium/public/win/WebScreenInfoFact
ory.h" |
| 78 #elif defined(OS_MACOSX) | 77 #elif defined(OS_MACOSX) |
| 79 #include "content/browser/renderer_host/popup_menu_helper_mac.h" | 78 #include "content/browser/renderer_host/popup_menu_helper_mac.h" |
| 80 #elif defined(OS_ANDROID) | 79 #elif defined(OS_ANDROID) |
| 81 #include "media/base/android/media_player_manager.h" | 80 #include "media/base/android/media_player_manager.h" |
| (...skipping 1146 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 1228 for (std::vector<GURL>::iterator it(validated_params.redirects.begin()); | 1227 for (std::vector<GURL>::iterator it(validated_params.redirects.begin()); |
| 1229 it != validated_params.redirects.end(); ++it) { | 1228 it != validated_params.redirects.end(); ++it) { |
| 1230 FilterURL(policy, process, false, &(*it)); | 1229 FilterURL(policy, process, false, &(*it)); |
| 1231 } | 1230 } |
| 1232 FilterURL(policy, process, true, &validated_params.searchable_form_url); | 1231 FilterURL(policy, process, true, &validated_params.searchable_form_url); |
| 1233 FilterURL(policy, process, true, &validated_params.password_form.origin); | 1232 FilterURL(policy, process, true, &validated_params.password_form.origin); |
| 1234 FilterURL(policy, process, true, &validated_params.password_form.action); | 1233 FilterURL(policy, process, true, &validated_params.password_form.action); |
| 1235 | 1234 |
| 1236 // Without this check, the renderer can trick the browser into using | 1235 // Without this check, the renderer can trick the browser into using |
| 1237 // filenames it can't access in a future session restore. | 1236 // filenames it can't access in a future session restore. |
| 1238 if (!CanAccessFilesOfSerializedState(validated_params.content_state)) { | 1237 if (!CanAccessFilesOfPageState(validated_params.page_state)) { |
| 1239 GetProcess()->ReceivedBadMessage(); | 1238 GetProcess()->ReceivedBadMessage(); |
| 1240 return; | 1239 return; |
| 1241 } | 1240 } |
| 1242 | 1241 |
| 1243 delegate_->DidNavigate(this, validated_params); | 1242 delegate_->DidNavigate(this, validated_params); |
| 1244 } | 1243 } |
| 1245 | 1244 |
| 1246 void RenderViewHostImpl::OnUpdateState(int32 page_id, | 1245 void RenderViewHostImpl::OnUpdateState(int32 page_id, const PageState& state) { |
| 1247 const std::string& state) { | |
| 1248 // Without this check, the renderer can trick the browser into using | 1246 // Without this check, the renderer can trick the browser into using |
| 1249 // filenames it can't access in a future session restore. | 1247 // filenames it can't access in a future session restore. |
| 1250 if (!CanAccessFilesOfSerializedState(state)) { | 1248 if (!CanAccessFilesOfPageState(state)) { |
| 1251 GetProcess()->ReceivedBadMessage(); | 1249 GetProcess()->ReceivedBadMessage(); |
| 1252 return; | 1250 return; |
| 1253 } | 1251 } |
| 1254 | 1252 |
| 1255 delegate_->UpdateState(this, page_id, state); | 1253 delegate_->UpdateState(this, page_id, state); |
| 1256 } | 1254 } |
| 1257 | 1255 |
| 1258 void RenderViewHostImpl::OnUpdateTitle( | 1256 void RenderViewHostImpl::OnUpdateTitle( |
| 1259 int32 page_id, | 1257 int32 page_id, |
| 1260 const string16& title, | 1258 const string16& title, |
| (...skipping 806 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 2067 // can cause navigations to be ignored in OnNavigate. | 2065 // can cause navigations to be ignored in OnNavigate. |
| 2068 is_waiting_for_beforeunload_ack_ = false; | 2066 is_waiting_for_beforeunload_ack_ = false; |
| 2069 is_waiting_for_unload_ack_ = false; | 2067 is_waiting_for_unload_ack_ = false; |
| 2070 has_timed_out_on_unload_ = false; | 2068 has_timed_out_on_unload_ = false; |
| 2071 } | 2069 } |
| 2072 | 2070 |
| 2073 void RenderViewHostImpl::ClearPowerSaveBlockers() { | 2071 void RenderViewHostImpl::ClearPowerSaveBlockers() { |
| 2074 STLDeleteValues(&power_save_blockers_); | 2072 STLDeleteValues(&power_save_blockers_); |
| 2075 } | 2073 } |
| 2076 | 2074 |
| 2077 bool RenderViewHostImpl::CanAccessFilesOfSerializedState( | 2075 bool RenderViewHostImpl::CanAccessFilesOfPageState( |
| 2078 const std::string& state) const { | 2076 const PageState& state) const { |
| 2079 ChildProcessSecurityPolicyImpl* policy = | 2077 ChildProcessSecurityPolicyImpl* policy = |
| 2080 ChildProcessSecurityPolicyImpl::GetInstance(); | 2078 ChildProcessSecurityPolicyImpl::GetInstance(); |
| 2081 const std::vector<base::FilePath>& file_paths = | 2079 |
| 2082 webkit_glue::FilePathsFromHistoryState(state); | 2080 const std::vector<base::FilePath>& file_paths = state.GetReferencedFiles(); |
| 2083 for (std::vector<base::FilePath>::const_iterator file = file_paths.begin(); | 2081 for (std::vector<base::FilePath>::const_iterator file = file_paths.begin(); |
| 2084 file != file_paths.end(); ++file) { | 2082 file != file_paths.end(); ++file) { |
| 2085 if (!policy->CanReadFile(GetProcess()->GetID(), *file)) | 2083 if (!policy->CanReadFile(GetProcess()->GetID(), *file)) |
| 2086 return false; | 2084 return false; |
| 2087 } | 2085 } |
| 2088 return true; | 2086 return true; |
| 2089 } | 2087 } |
| 2090 | 2088 |
| 2091 } // namespace content | 2089 } // namespace content |
| OLD | NEW |