Enforce capability spec renderer <--> browser

content/browser/mojo/mojo_shell_context.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/mojo/mojo_shell_context.h"
 
 #include <memory>
 #include <string>
 #include <utility>
 
 #include "base/bind.h"
+#include "base/json/json_reader.h"
 #include "base/lazy_instance.h"
 #include "base/macros.h"
 #include "base/memory/ptr_util.h"
 #include "base/single_thread_task_runner.h"
 #include "content/browser/gpu/gpu_process_host.h"
 #include "content/common/mojo/constants.h"
 #include "content/common/mojo/mojo_shell_connection_impl.h"
 #include "content/grit/content_resources.h"
 #include "content/public/browser/browser_thread.h"
 #include "content/public/browser/content_browser_client.h"
@@ skipping 72 matching lines @@
   shell::mojom::ServiceFactoryPtr service_factory;
   BrowserThread::PostTask(
       BrowserThread::IO, FROM_HERE,
       base::Bind(&RequestGpuServiceFactory,
                  base::Passed(GetProxy(&service_factory))));
   service_factory->CreateService(std::move(request), service_name);
 }
 
 #endif  // ENABLE_MOJO_MEDIA_IN_GPU_PROCESS
 
+void MergeDictionary(base::DictionaryValue* target,

[Tom Sepez, 2016/09/12 16:53:16]

Nit: Maybe this should be a base::DictionaryValue method.  I wonder how many
other places we do something like this in the codbase?

[Tom Sepez, 2016/09/12 16:54:27]

Can we write a unit test for this?  Might be easier to do so if it were in base?

+                     const base::DictionaryValue* source) {
+  for (base::DictionaryValue::Iterator it(*source); !it.IsAtEnd();
+       it.Advance()) {
+    const base::Value* merge_value = &it.value();
+    // Check whether we have to merge dictionaries.
+    if (merge_value->IsType(base::Value::TYPE_DICTIONARY)) {
+      base::DictionaryValue* sub_dict;
+      if (target->GetDictionaryWithoutPathExpansion(it.key(), &sub_dict)) {
+        MergeDictionary(
+            sub_dict,
+            static_cast<const base::DictionaryValue*>(merge_value));
+        continue;
+      }
+    }
+    if (merge_value->IsType(base::Value::TYPE_LIST)) {
+      const base::ListValue* merge_list = nullptr;
+      if (merge_value->GetAsList(&merge_list)) {
+        base::ListValue* target_list = nullptr;
+        DCHECK(target->GetListWithoutPathExpansion(it.key(), &target_list));
+        for (size_t k = 0; k < target_list->GetSize(); ++k) {
+          std::string value;
+          DCHECK(target_list->GetString(k, &value));
+        }
+        for (size_t i = 0; i < merge_list->GetSize(); ++i) {
+          std::string value;
+          DCHECK(merge_list->GetString(i, &value));
+          target_list->AppendString(value);
+        }
+      }
+    } else {
+      // All other cases: Make a copy and hook it up.
+      target->SetWithoutPathExpansion(it.key(), merge_value->DeepCopy());
+    }
+  }
+}
+
 // A ManifestProvider which resolves application names to builtin manifest
 // resources for the catalog service to consume.
 class BuiltinManifestProvider : public catalog::ManifestProvider {
  public:
   BuiltinManifestProvider() {}
   ~BuiltinManifestProvider() override {}
 
   void AddManifests(std::unique_ptr<
       ContentBrowserClient::MojoApplicationManifestMap> manifests) {
     DCHECK(!manifests_);
     manifests_ = std::move(manifests);
   }
 
   void AddManifestResource(const std::string& name, int resource_id) {
     std::string contents = GetContentClient()->GetDataResource(
         resource_id, ui::ScaleFactor::SCALE_FACTOR_NONE).as_string();
     DCHECK(!contents.empty());
 
     DCHECK(manifests_);
     auto result = manifests_->insert(std::make_pair(name, contents));
     DCHECK(result.second) << "Duplicate manifest entry: " << name;
   }
 
  private:
   // catalog::ManifestProvider:
-  bool GetApplicationManifest(const base::StringPiece& name,
-                              std::string* manifest_contents) override {
-    auto manifest_it = manifests_->find(name.as_string());
-    if (manifest_it != manifests_->end()) {
-      *manifest_contents = manifest_it->second;
-      DCHECK(!manifest_contents->empty());
-      return true;
+  std::unique_ptr<base::Value> GetManifest(const std::string& name) override {
+    auto manifest_it = manifests_->find(name);
+    std::unique_ptr<base::Value> manifest_root;
+    if (manifest_it != manifests_->end())
+      manifest_root = base::JSONReader::Read(manifest_it->second);
+
+    base::DictionaryValue* manifest_dictionary = nullptr;
+    if (manifest_root && !manifest_root->GetAsDictionary(&manifest_dictionary))
+      return nullptr;
+
+    std::unique_ptr<base::Value> overlay_root =
+        GetContentClient()->browser()->GetServiceManifestOverlay(name);
+    if (overlay_root) {
+      if (!manifest_root) {
+        manifest_root = std::move(overlay_root);
+      } else {
+        base::DictionaryValue* overlay_dictionary = nullptr;
+        if (overlay_root->GetAsDictionary(&overlay_dictionary))
+          MergeDictionary(manifest_dictionary, overlay_dictionary);
+      }
     }
-    return false;
+    return manifest_root;
   }
 
   std::unique_ptr<ContentBrowserClient::MojoApplicationManifestMap> manifests_;
 
   DISALLOW_COPY_AND_ASSIGN(BuiltinManifestProvider);
 };
 
 }  // namespace
 
 // State which lives on the IO thread and drives the ServiceManager.
@@ skipping 148 matching lines @@
     in_process_context_->ShutDown();
 }
 
 // static
 shell::Connector* MojoShellContext::GetConnectorForIOThread() {
   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
   return g_io_thread_connector.Get().get();
 }
 
 }  // namespace content