Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(57)

Side by Side Diff: content/browser/renderer_host/render_widget_helper.cc

Issue 2506183002: Make window.open() IPCs be frame-based (Closed)
Patch Set: Rebase. Created 3 years, 11 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "content/browser/renderer_host/render_widget_helper.h" 5 #include "content/browser/renderer_host/render_widget_helper.h"
6 6
7 #include "base/bind.h" 7 #include "base/bind.h"
8 #include "base/bind_helpers.h" 8 #include "base/bind_helpers.h"
9 #include "base/lazy_instance.h" 9 #include "base/lazy_instance.h"
10 #include "base/posix/eintr_wrapper.h" 10 #include "base/posix/eintr_wrapper.h"
11 #include "base/threading/thread.h" 11 #include "base/threading/thread.h"
12 #include "base/threading/thread_restrictions.h" 12 #include "base/threading/thread_restrictions.h"
13 #include "content/browser/dom_storage/session_storage_namespace_impl.h" 13 #include "content/browser/dom_storage/session_storage_namespace_impl.h"
14 #include "content/browser/frame_host/render_frame_host_impl.h"
14 #include "content/browser/loader/resource_dispatcher_host_impl.h" 15 #include "content/browser/loader/resource_dispatcher_host_impl.h"
15 #include "content/browser/renderer_host/render_process_host_impl.h" 16 #include "content/browser/renderer_host/render_process_host_impl.h"
16 #include "content/browser/renderer_host/render_view_host_impl.h" 17 #include "content/browser/renderer_host/render_view_host_impl.h"
17 #include "content/common/view_messages.h" 18 #include "content/common/view_messages.h"
18 19
19 namespace content { 20 namespace content {
20 namespace { 21 namespace {
21 22
22 typedef std::map<int, RenderWidgetHelper*> WidgetHelperMap; 23 typedef std::map<int, RenderWidgetHelper*> WidgetHelperMap;
23 base::LazyInstance<WidgetHelperMap> g_widget_helpers = 24 base::LazyInstance<WidgetHelperMap> g_widget_helpers =
(...skipping 59 matching lines...) Expand 10 before | Expand all | Expand 10 after
83 } 84 }
84 85
85 void RenderWidgetHelper::OnResumeDeferredNavigation( 86 void RenderWidgetHelper::OnResumeDeferredNavigation(
86 const GlobalRequestID& request_id) { 87 const GlobalRequestID& request_id) {
87 resource_dispatcher_host_->ResumeDeferredNavigation(request_id); 88 resource_dispatcher_host_->ResumeDeferredNavigation(request_id);
88 } 89 }
89 90
90 void RenderWidgetHelper::CreateNewWindow( 91 void RenderWidgetHelper::CreateNewWindow(
91 mojom::CreateNewWindowParamsPtr params, 92 mojom::CreateNewWindowParamsPtr params,
92 bool no_javascript_access, 93 bool no_javascript_access,
93 base::ProcessHandle render_process, 94 int32_t* render_view_route_id,
94 int32_t* route_id,
95 int32_t* main_frame_route_id, 95 int32_t* main_frame_route_id,
96 int32_t* main_frame_widget_route_id, 96 int32_t* main_frame_widget_route_id,
97 SessionStorageNamespace* session_storage_namespace) { 97 SessionStorageNamespace* session_storage_namespace) {
98 if (params->opener_suppressed || no_javascript_access) { 98 if (params->opener_suppressed || no_javascript_access) {
99 // If the opener is supppressed or script access is disallowed, we should 99 // If the opener is supppressed or script access is disallowed, we should
100 // open the window in a new BrowsingInstance, and thus a new process. That 100 // open the window in a new BrowsingInstance, and thus a new process. That
101 // means the current renderer process will not be able to route messages to 101 // means the current renderer process will not be able to route messages to
102 // it. Because of this, we will immediately show and navigate the window 102 // it. Because of this, we will immediately show and navigate the window
103 // in OnCreateWindowOnUI, using the params provided here. 103 // in OnCreateNewWindowOnUI, using the params provided here.
104 *route_id = MSG_ROUTING_NONE; 104 *render_view_route_id = MSG_ROUTING_NONE;
105 *main_frame_route_id = MSG_ROUTING_NONE; 105 *main_frame_route_id = MSG_ROUTING_NONE;
106 *main_frame_widget_route_id = MSG_ROUTING_NONE; 106 *main_frame_widget_route_id = MSG_ROUTING_NONE;
107 } else { 107 } else {
108 *route_id = GetNextRoutingID(); 108 *render_view_route_id = GetNextRoutingID();
109 *main_frame_route_id = GetNextRoutingID(); 109 *main_frame_route_id = GetNextRoutingID();
110 // TODO(avi): When RenderViewHostImpl has-a RenderWidgetHostImpl, this 110 // TODO(avi): When RenderViewHostImpl has-a RenderWidgetHostImpl, this
111 // should be updated to give the widget a distinct routing ID. 111 // should be updated to give the widget a distinct routing ID.
112 // https://crbug.com/545684 112 // https://crbug.com/545684
113 *main_frame_widget_route_id = *route_id; 113 *main_frame_widget_route_id = *render_view_route_id;
114 // Block resource requests until the frame is created, since the HWND might 114 // Block resource requests until the frame is created, since the HWND might
115 // be needed if a response ends up creating a plugin. We'll only have a 115 // be needed if a response ends up creating a plugin. We'll only have a
116 // single frame at this point. These requests will be resumed either in 116 // single frame at this point. These requests will be resumed either in
117 // WebContentsImpl::CreateNewWindow or RenderFrameHost::Init. 117 // WebContentsImpl::CreateNewWindow or RenderFrameHost::Init.
118 resource_dispatcher_host_->BlockRequestsForRoute( 118 resource_dispatcher_host_->BlockRequestsForRoute(
119 GlobalFrameRoutingId(render_process_id_, *main_frame_route_id)); 119 GlobalFrameRoutingId(render_process_id_, *main_frame_route_id));
120 } 120 }
121 121
122 BrowserThread::PostTask( 122 BrowserThread::PostTask(
123 BrowserThread::UI, FROM_HERE, 123 BrowserThread::UI, FROM_HERE,
124 base::Bind(&RenderWidgetHelper::OnCreateWindowOnUI, this, 124 base::Bind(&RenderWidgetHelper::OnCreateNewWindowOnUI, this,
125 base::Passed(&params), *route_id, *main_frame_route_id, 125 base::Passed(&params), *render_view_route_id,
126 *main_frame_widget_route_id, 126 *main_frame_route_id, *main_frame_widget_route_id,
127 base::RetainedRef(session_storage_namespace))); 127 base::RetainedRef(session_storage_namespace)));
128 } 128 }
129 129
130 void RenderWidgetHelper::OnCreateWindowOnUI( 130 void RenderWidgetHelper::OnCreateNewWindowOnUI(
131 mojom::CreateNewWindowParamsPtr params, 131 mojom::CreateNewWindowParamsPtr params,
132 int32_t route_id, 132 int32_t render_view_route_id,
133 int32_t main_frame_route_id, 133 int32_t main_frame_route_id,
134 int32_t main_frame_widget_route_id, 134 int32_t main_frame_widget_route_id,
135 SessionStorageNamespace* session_storage_namespace) { 135 SessionStorageNamespace* session_storage_namespace) {
136 RenderViewHostImpl* host = 136 RenderFrameHostImpl* opener = RenderFrameHostImpl::FromID(
137 RenderViewHostImpl::FromID(render_process_id_, params->opener_id); 137 render_process_id_, params->opener_render_frame_id);
138 if (host) { 138 if (opener && opener->IsRenderFrameLive()) {
139 host->CreateNewWindow(route_id, main_frame_route_id, 139 opener->OnCreateNewWindow(render_view_route_id, main_frame_route_id,
140 main_frame_widget_route_id, *params, 140 main_frame_widget_route_id, *params,
141 session_storage_namespace); 141 session_storage_namespace);
142 }
143
144 // If we did not create a WebContents to host the renderer-created
145 // RenderFrame/RenderView/RenderWidget objects, destroy them.
146 RenderProcessHost* rph = RenderProcessHost::FromID(render_process_id_);
147 if (main_frame_route_id != MSG_ROUTING_NONE && rph != nullptr) {
148 bool succeeded =
149 RenderWidgetHost::FromID(render_process_id_,
150 main_frame_widget_route_id) != nullptr;
151 if (!succeeded) {
152 DCHECK(!RenderFrameHost::FromID(render_process_id_, main_frame_route_id));
153 DCHECK(!RenderViewHost::FromID(render_process_id_, render_view_route_id));
154
155 rph->Send(new ViewMsg_Close(render_view_route_id));
156 } else {
157 // If a RWH was created, there should also be an RFH and RVH.
158 DCHECK(RenderFrameHost::FromID(render_process_id_, main_frame_route_id));
159 DCHECK(RenderViewHost::FromID(render_process_id_, render_view_route_id));
160 }
142 } 161 }
143 } 162 }
144 163
145 void RenderWidgetHelper::CreateNewWidget(int opener_id, 164 void RenderWidgetHelper::CreateNewWidget(int opener_id,
146 blink::WebPopupType popup_type, 165 blink::WebPopupType popup_type,
147 int* route_id) { 166 int* route_id) {
148 *route_id = GetNextRoutingID(); 167 *route_id = GetNextRoutingID();
149 BrowserThread::PostTask(BrowserThread::UI, FROM_HERE, 168 BrowserThread::PostTask(BrowserThread::UI, FROM_HERE,
150 base::Bind(&RenderWidgetHelper::OnCreateWidgetOnUI, 169 base::Bind(&RenderWidgetHelper::OnCreateWidgetOnUI,
151 this, opener_id, *route_id, popup_type)); 170 this, opener_id, *route_id, popup_type));
(...skipping 19 matching lines...) Expand all
171 190
172 void RenderWidgetHelper::OnCreateFullscreenWidgetOnUI(int32_t opener_id, 191 void RenderWidgetHelper::OnCreateFullscreenWidgetOnUI(int32_t opener_id,
173 int32_t route_id) { 192 int32_t route_id) {
174 RenderViewHostImpl* host = RenderViewHostImpl::FromID( 193 RenderViewHostImpl* host = RenderViewHostImpl::FromID(
175 render_process_id_, opener_id); 194 render_process_id_, opener_id);
176 if (host) 195 if (host)
177 host->CreateNewFullscreenWidget(route_id); 196 host->CreateNewFullscreenWidget(route_id);
178 } 197 }
179 198
180 } // namespace content 199 } // namespace content
OLDNEW
« no previous file with comments | « content/browser/renderer_host/render_widget_helper.h ('k') | content/browser/security_exploit_browsertest.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698