Transitively keep track of an isolated world's children scripts and worlds.

third_party/WebKit/Source/bindings/core/v8/DOMWrapperWorld.h

 /*
  * Copyright (C) 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
@@ skipping 17 matching lines @@
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */
 
 #ifndef DOMWrapperWorld_h
 #define DOMWrapperWorld_h
 
 #include "bindings/core/v8/ScriptState.h"
 #include "core/CoreExport.h"
 #include "platform/weborigin/SecurityOrigin.h"
 #include "wtf/MainThread.h"
+#include "wtf/OwnPtr.h"
 #include "wtf/PassRefPtr.h"
 #include "wtf/RefCounted.h"
 #include "wtf/RefPtr.h"
 #include <v8.h>
 
 namespace blink {
 
 class DOMDataStore;
 
 enum WorldIdConstants {
     MainWorldId = 0,
     // Embedder isolated worlds can use IDs in [1, 1<<29).
     EmbedderWorldIdLimit = (1 << 29),
     PrivateScriptIsolatedWorldId,
     IsolatedWorldIdLimit,
     WorkerWorldId,
     TestingWorldId,
 };
 
 class DOMObjectHolderBase;
 template<typename T> class DOMObjectHolder;
 
 // This class represent a collection of DOM wrappers for a specific world.
 class CORE_EXPORT DOMWrapperWorld : public RefCounted<DOMWrapperWorld> {
 public:
+    class OriginWorldScope {
+        WTF_MAKE_NONCOPYABLE(OriginWorldScope);
+
+    public:
+        explicit OriginWorldScope(PassRefPtr<DOMWrapperWorld> originWorld)
+            : m_hasPushed(false)
+        {
+            ASSERT(isMainThread());
+            if (originWorld) {
+                DOMWrapperWorld::originWorldStack().append(originWorld);
+                m_hasPushed = true;
+            }
+        }
+
+        ~OriginWorldScope()
+        {
+            ASSERT(isMainThread());
+            // "Pop" the origin world to avoid tainting the entire document.
+            if (m_hasPushed) {
+                DOMWrapperWorld::originWorldStack().removeLast();
+            }
+        }
+
+    private:
+        bool m_hasPushed;
+    };
+
     static PassRefPtr<DOMWrapperWorld> create(v8::Isolate*, int worldId = -1, int extensionGroup = -1);
 
     static const int mainWorldExtensionGroup = 0;
     static const int privateScriptIsolatedWorldExtensionGroup = 1;
     static PassRefPtr<DOMWrapperWorld> ensureIsolatedWorld(v8::Isolate*, int worldId, int extensionGroup);
     ~DOMWrapperWorld();
     void dispose();
 
     static bool isolatedWorldsExist() { return isolatedWorldCount; }
     static void allWorldsInMainThread(Vector<RefPtr<DOMWrapperWorld>>& worlds);
@@ skipping 35 matching lines @@
     // FIXME: Right now, resource injection simply bypasses the main world's
     // DOM. More work is necessary to allow the isolated world's policy to be
     // applied correctly.
     static void setIsolatedWorldContentSecurityPolicy(int worldId, const String& policy);
     bool isolatedWorldHasContentSecurityPolicy();
 
     bool isMainWorld() const { return m_worldId == MainWorldId; }
     bool isPrivateScriptIsolatedWorld() const { return m_worldId == PrivateScriptIsolatedWorldId; }
     bool isWorkerWorld() const { return m_worldId == WorkerWorldId; }
     bool isIsolatedWorld() const { return MainWorldId < m_worldId  && m_worldId < IsolatedWorldIdLimit; }
+    DOMWrapperWorld* originWorld()
+    {
+        if (isIsolatedWorld())
+            return this;
+        if (isMainThread() && !originWorldStack().isEmpty())
+            return originWorldStack().last().get();
+        return nullptr;
+    };
+    bool isOfIsolatedWorldOrigin() const
+    {
+        ASSERT(isMainThread());
+        return isIsolatedWorld() ? true : originWorldStack().isEmpty() ? false : originWorldStack().last().get()->isIsolatedWorld();
+    };
 
     int worldId() const { return m_worldId; }
     int extensionGroup() const { return m_extensionGroup; }
+
     DOMDataStore& domDataStore() const { return *m_domDataStore; }
 
     static void setWorldOfInitializingWindow(DOMWrapperWorld* world)
     {
         ASSERT(isMainThread());
         worldOfInitializingWindow = world;
     }
 
 public:
     template<typename T>
     void registerDOMObjectHolder(v8::Isolate*, T*, v8::Local<v8::Value>);
 
 private:
     DOMWrapperWorld(v8::Isolate*, int worldId, int extensionGroup);
 
+    static Vector<RefPtr<DOMWrapperWorld>>& originWorldStack();
+
     static void weakCallbackForDOMObjectHolder(const v8::WeakCallbackInfo<DOMObjectHolderBase>&);
     void registerDOMObjectHolderInternal(PassOwnPtr<DOMObjectHolderBase>);
     void unregisterDOMObjectHolder(DOMObjectHolderBase*);
 
     static unsigned isolatedWorldCount;
     static DOMWrapperWorld* worldOfInitializingWindow;
 
     const int m_worldId;
     const int m_extensionGroup;
     OwnPtr<DOMDataStore> m_domDataStore;
     HashSet<OwnPtr<DOMObjectHolderBase>> m_domObjectHolders;
 };
 
 } // namespace blink
 
 #endif // DOMWrapperWorld_h