Implement Web Restrictions in WebView.

android_webview/renderer/aw_content_renderer_client.cc

 // Copyright 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "android_webview/renderer/aw_content_renderer_client.h"
 
 #include <vector>
 
 #include "android_webview/common/aw_resource.h"
 #include "android_webview/common/aw_switches.h"
 #include "android_webview/common/render_view_messages.h"
 #include "android_webview/common/url_constants.h"
 #include "android_webview/grit/aw_resources.h"
 #include "android_webview/grit/aw_strings.h"
 #include "android_webview/renderer/aw_content_settings_client.h"
 #include "android_webview/renderer/aw_key_systems.h"
 #include "android_webview/renderer/aw_message_port_client.h"
 #include "android_webview/renderer/aw_print_web_view_helper_delegate.h"
 #include "android_webview/renderer/aw_render_frame_ext.h"
 #include "android_webview/renderer/aw_render_view_ext.h"
 #include "android_webview/renderer/print_render_frame_observer.h"
 #include "base/command_line.h"
 #include "base/i18n/rtl.h"
 #include "base/message_loop/message_loop.h"
 #include "base/strings/string_util.h"
 #include "base/strings/utf_string_conversions.h"
 #include "components/autofill/content/renderer/autofill_agent.h"
 #include "components/autofill/content/renderer/password_autofill_agent.h"
 #include "components/printing/renderer/print_web_view_helper.h"
+#include "components/supervised_user_error_page/supervised_user_error_page.h"
+#include "components/supervised_user_error_page/supervised_user_gin_wrapper.h"
 #include "components/visitedlink/renderer/visitedlink_slave.h"
+#include "components/web_restrictions/interfaces/web_restrictions.mojom.h"
+#include "content/public/common/service_registry.h"
 #include "content/public/common/url_constants.h"
 #include "content/public/renderer/document_state.h"
 #include "content/public/renderer/navigation_state.h"
 #include "content/public/renderer/render_frame.h"
 #include "content/public/renderer/render_thread.h"
 #include "content/public/renderer/render_view.h"
 #include "net/base/escape.h"
 #include "net/base/net_errors.h"
 #include "third_party/WebKit/public/platform/WebString.h"
 #include "third_party/WebKit/public/platform/WebURL.h"
 #include "third_party/WebKit/public/platform/WebURLError.h"
 #include "third_party/WebKit/public/platform/WebURLRequest.h"
 #include "third_party/WebKit/public/web/WebFrame.h"
+#include "third_party/WebKit/public/web/WebLocalFrame.h"
 #include "third_party/WebKit/public/web/WebNavigationType.h"
 #include "third_party/WebKit/public/web/WebSecurityPolicy.h"
 #include "ui/base/l10n/l10n_util.h"
 #include "ui/base/resource/resource_bundle.h"
 #include "url/gurl.h"
 #include "url/url_constants.h"
 
 using content::RenderThread;
 
 namespace android_webview {
 
 AwContentRendererClient::AwContentRendererClient()
     : disable_page_visibility_(
-          base::CommandLine::ForCurrentProcess()
-              ->HasSwitch(switches::kDisablePageVisibility)) {}
+          base::CommandLine::ForCurrentProcess()->HasSwitch(
+              switches::kDisablePageVisibility)),
+      weak_ptr_factory_(this) {}
 
 AwContentRendererClient::~AwContentRendererClient() {
 }
 
 void AwContentRendererClient::RenderThreadStarted() {
   RenderThread* thread = RenderThread::Get();
   aw_render_thread_observer_.reset(new AwRenderThreadObserver);
   thread->AddObserver(aw_render_thread_observer_.get());
 
   visited_link_slave_.reset(new visitedlink::VisitedLinkSlave);
@@ skipping 95 matching lines @@
       render_view, std::unique_ptr<printing::PrintWebViewHelper::Delegate>(
                        new AwPrintWebViewHelperDelegate()));
 }
 
 bool AwContentRendererClient::HasErrorPage(int http_status_code,
                           std::string* error_domain) {
   return http_status_code >= 400;
 }
 
 void AwContentRendererClient::GetNavigationErrorStrings(
-    content::RenderFrame* /* render_frame */,
+    content::RenderFrame* render_frame,
     const blink::WebURLRequest& failed_request,
     const blink::WebURLError& error,
     std::string* error_html,
     base::string16* error_description) {
   if (error_html) {
-    std::string url =
-        net::EscapeForHTML(GURL(failed_request.url()).possibly_invalid_spec());
+    GURL gurl(failed_request.url());
+    std::string url = net::EscapeForHTML(gurl.possibly_invalid_spec());
     std::string err =
         base::UTF16ToUTF8(base::StringPiece16(error.localizedDescription));
 
     std::vector<std::string> replacements;
     replacements.push_back(
         l10n_util::GetStringUTF8(IDS_AW_WEBPAGE_NOT_AVAILABLE));
     if (err.empty()) {
       replacements.push_back(l10n_util::GetStringFUTF8(
           IDS_AW_WEBPAGE_TEMPORARILY_DOWN, base::UTF8ToUTF16(url)));
       replacements.push_back(l10n_util::GetStringUTF8(
           IDS_AW_WEBPAGE_TEMPORARILY_DOWN_SUGGESTIONS));
     } else {
       replacements.push_back(l10n_util::GetStringFUTF8(
           IDS_AW_WEBPAGE_CAN_NOT_BE_LOADED, base::UTF8ToUTF16(url)));
       replacements.push_back(err);
     }
     if (base::i18n::IsRTL())
       replacements.push_back("direction: rtl;");
     else
       replacements.push_back("");
     *error_html = base::ReplaceStringPlaceholders(
         ResourceBundle::GetSharedInstance().GetRawDataResource(
             IDR_AW_LOAD_ERROR_HTML),
         replacements, nullptr);
+    if (error.reason == net::ERR_BLOCKED_BY_ADMINISTRATOR) {

[Torne, 2016/04/20 16:12:33]

Is this kicking off an async request to get a better error page, and then
allowing the default error page to get rendered synchronously? It's not very
clear; maybe a comment? (or am I reading it wrong)

[aberent, 2016/06/08 09:47:41]

No longer applies. I have changed this get the error page details synchronously.
Anything else gives leaves too many openings for race conditions etc.

+      // This needs more information
+      render_frame->GetServiceRegistry()->ConnectToRemoteService(
+          mojo::GetProxy(&web_restrictions_service_));
+      web_restrictions_service_->GetResult(
+          mojo::String(url),
+          base::Bind(&AwContentRendererClient::OnWebRestrictionsDataReceived,
+                     weak_ptr_factory_.GetWeakPtr(), url, render_frame, error));
+    }
   }
   if (error_description) {
     if (error.localizedDescription.isEmpty())
       *error_description = base::ASCIIToUTF16(net::ErrorToString(error.reason));
     else
       *error_description = error.localizedDescription;
   }
 }
 
 unsigned long long AwContentRendererClient::VisitedLinkHash(
@@ skipping 38 matching lines @@
     const content::RenderFrame* render_frame,
     blink::WebPageVisibilityState* override_state) {
   if (disable_page_visibility_) {
     *override_state = blink::WebPageVisibilityStateVisible;
     return true;
   }
 
   return false;
 }
 
+void AwContentRendererClient::OnWebRestrictionsDataReceived(
+    const std::string& url,
+    content::RenderFrame* render_frame,
+    const blink::WebURLError& error,
+    web_restrictions::mojom::ClientResultPtr result) {
+  if (!result)
+    return;
+  std::string html_error =
+      supervised_user_error_page::BuildHtmlFromWebRestrictionsResult(
+          result, RenderThread::Get()->GetLocale());
+  if (result->intParams["Allow access requests"]) {
+    supervised_user_error_page::SupervisedUserGinWrapper::Install(
+        render_frame, url, web_restrictions_service_);
+  }
+  // Replace is always true, since this replaces the original error page
+  render_frame->GetWebFrame()->loadHTMLString(

[Torne, 2016/04/20 16:12:33]

Is this observable to the application? (other than by inspecting the DOM; I mean
does it trigger any callbacks in webview). I guess this doesn't count as a
navigation?

[aberent, 2016/06/08 09:47:41]

Removed since the error page is now built synchronously.

+      html_error, GURL(content::kUnreachableWebDataURL), error.unreachableURL,
+      true);
+}
+
 }  // namespace android_webview