OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "chrome/browser/extensions/extension_protocols.h" | 5 #include "chrome/browser/extensions/extension_protocols.h" |
6 | 6 |
7 #include <algorithm> | 7 #include <algorithm> |
8 | 8 |
9 #include "base/base64.h" | 9 #include "base/base64.h" |
10 #include "base/compiler_specific.h" | 10 #include "base/compiler_specific.h" |
11 #include "base/file_util.h" | 11 #include "base/file_util.h" |
12 #include "base/files/file_path.h" | 12 #include "base/files/file_path.h" |
13 #include "base/format_macros.h" | 13 #include "base/format_macros.h" |
14 #include "base/logging.h" | 14 #include "base/logging.h" |
15 #include "base/memory/weak_ptr.h" | 15 #include "base/memory/weak_ptr.h" |
16 #include "base/message_loop/message_loop.h" | 16 #include "base/message_loop/message_loop.h" |
17 #include "base/path_service.h" | 17 #include "base/path_service.h" |
18 #include "base/sha1.h" | 18 #include "base/sha1.h" |
19 #include "base/strings/string_number_conversions.h" | 19 #include "base/strings/string_number_conversions.h" |
20 #include "base/strings/string_util.h" | 20 #include "base/strings/string_util.h" |
21 #include "base/strings/stringprintf.h" | 21 #include "base/strings/stringprintf.h" |
22 #include "base/strings/utf_string_conversions.h" | 22 #include "base/strings/utf_string_conversions.h" |
23 #include "base/threading/sequenced_worker_pool.h" | 23 #include "base/threading/sequenced_worker_pool.h" |
24 #include "base/threading/thread_restrictions.h" | 24 #include "base/threading/thread_restrictions.h" |
25 #include "build/build_config.h" | 25 #include "build/build_config.h" |
26 #include "chrome/browser/extensions/extension_info_map.h" | 26 #include "chrome/browser/extensions/extension_info_map.h" |
| 27 #include "chrome/browser/extensions/extension_renderer_state.h" |
27 #include "chrome/browser/extensions/image_loader.h" | 28 #include "chrome/browser/extensions/image_loader.h" |
28 #include "chrome/common/chrome_paths.h" | 29 #include "chrome/common/chrome_paths.h" |
29 #include "chrome/common/extensions/background_info.h" | 30 #include "chrome/common/extensions/background_info.h" |
30 #include "chrome/common/extensions/csp_handler.h" | 31 #include "chrome/common/extensions/csp_handler.h" |
31 #include "chrome/common/extensions/extension.h" | 32 #include "chrome/common/extensions/extension.h" |
32 #include "chrome/common/extensions/extension_file_util.h" | 33 #include "chrome/common/extensions/extension_file_util.h" |
33 #include "chrome/common/extensions/incognito_handler.h" | 34 #include "chrome/common/extensions/incognito_handler.h" |
34 #include "chrome/common/extensions/manifest_handlers/icons_handler.h" | 35 #include "chrome/common/extensions/manifest_handlers/icons_handler.h" |
35 #include "chrome/common/extensions/manifest_handlers/shared_module_info.h" | 36 #include "chrome/common/extensions/manifest_handlers/shared_module_info.h" |
36 #include "chrome/common/extensions/manifest_url_handler.h" | 37 #include "chrome/common/extensions/manifest_url_handler.h" |
37 #include "chrome/common/extensions/web_accessible_resources_handler.h" | 38 #include "chrome/common/extensions/web_accessible_resources_handler.h" |
| 39 #include "chrome/common/extensions/webview_handler.h" |
38 #include "chrome/common/url_constants.h" | 40 #include "chrome/common/url_constants.h" |
39 #include "content/public/browser/browser_thread.h" | 41 #include "content/public/browser/browser_thread.h" |
40 #include "content/public/browser/resource_request_info.h" | 42 #include "content/public/browser/resource_request_info.h" |
41 #include "extensions/common/constants.h" | 43 #include "extensions/common/constants.h" |
42 #include "extensions/common/extension_resource.h" | 44 #include "extensions/common/extension_resource.h" |
43 #include "grit/component_extension_resources_map.h" | 45 #include "grit/component_extension_resources_map.h" |
44 #include "net/base/mime_util.h" | 46 #include "net/base/mime_util.h" |
45 #include "net/base/net_errors.h" | 47 #include "net/base/net_errors.h" |
46 #include "net/http/http_request_headers.h" | 48 #include "net/http/http_request_headers.h" |
47 #include "net/http/http_response_headers.h" | 49 #include "net/http/http_response_headers.h" |
(...skipping 313 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
361 // the resource is explicitly accessible or fits in a set of exception cases. | 363 // the resource is explicitly accessible or fits in a set of exception cases. |
362 // Note: This allows a case where two extensions execute in the same renderer | 364 // Note: This allows a case where two extensions execute in the same renderer |
363 // process to request each other's resources. We can't do a more precise | 365 // process to request each other's resources. We can't do a more precise |
364 // check, since the renderer can lie about which extension has made the | 366 // check, since the renderer can lie about which extension has made the |
365 // request. | 367 // request. |
366 if (extension_info_map->process_map().Contains( | 368 if (extension_info_map->process_map().Contains( |
367 request->url().host(), info->GetChildID())) { | 369 request->url().host(), info->GetChildID())) { |
368 return true; | 370 return true; |
369 } | 371 } |
370 | 372 |
| 373 // Extensions with webview: allow loading certain resources by guest renderers |
| 374 // with privileged partition IDs as specified in the manifest file. |
| 375 ExtensionRendererState* renderer_state = |
| 376 ExtensionRendererState::GetInstance(); |
| 377 ExtensionRendererState::WebViewInfo webview_info; |
| 378 bool is_guest = renderer_state->GetWebViewInfo(info->GetChildID(), |
| 379 info->GetRouteID(), |
| 380 &webview_info); |
| 381 std::string resource_path = request->url().path(); |
| 382 if (is_guest && |
| 383 extensions::WebviewInfo::IsResourceWebviewAccessible( |
| 384 extension, webview_info.partition_id, resource_path)) { |
| 385 return true; |
| 386 } |
| 387 |
371 if (!content::PageTransitionIsWebTriggerable(info->GetPageTransition())) | 388 if (!content::PageTransitionIsWebTriggerable(info->GetPageTransition())) |
372 return false; | 389 return false; |
373 | 390 |
374 // The following checks require that we have an actual extension object. If we | 391 // The following checks require that we have an actual extension object. If we |
375 // don't have it, allow the request handling to continue with the rest of the | 392 // don't have it, allow the request handling to continue with the rest of the |
376 // checks. | 393 // checks. |
377 if (!extension) | 394 if (!extension) |
378 return true; | 395 return true; |
379 | 396 |
380 // Disallow loading of packaged resources for hosted apps. We don't allow | 397 // Disallow loading of packaged resources for hosted apps. We don't allow |
(...skipping 191 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
572 send_cors_header); | 589 send_cors_header); |
573 } | 590 } |
574 | 591 |
575 } // namespace | 592 } // namespace |
576 | 593 |
577 net::URLRequestJobFactory::ProtocolHandler* CreateExtensionProtocolHandler( | 594 net::URLRequestJobFactory::ProtocolHandler* CreateExtensionProtocolHandler( |
578 bool is_incognito, | 595 bool is_incognito, |
579 ExtensionInfoMap* extension_info_map) { | 596 ExtensionInfoMap* extension_info_map) { |
580 return new ExtensionProtocolHandler(is_incognito, extension_info_map); | 597 return new ExtensionProtocolHandler(is_incognito, extension_info_map); |
581 } | 598 } |
OLD | NEW |