Network service: Safe browsing check for sub-resources from renderer.

chrome/renderer/chrome_content_renderer_client.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef CHROME_RENDERER_CHROME_CONTENT_RENDERER_CLIENT_H_
 #define CHROME_RENDERER_CHROME_CONTENT_RENDERER_CLIENT_H_
 
 #include <stddef.h>
 
 #include <map>
 #include <memory>
 #include <set>
 #include <string>
 #include <vector>
 
 #include "base/compiler_specific.h"
 #include "base/gtest_prod_util.h"
 #include "base/strings/string16.h"
+#include "chrome/common/safe_browsing.mojom.h"
 #include "chrome/renderer/media/chrome_key_systems_provider.h"
 #include "components/rappor/public/interfaces/rappor_recorder.mojom.h"
 #include "components/spellcheck/spellcheck_build_features.h"
 #include "content/public/renderer/content_renderer_client.h"
 #include "extensions/features/features.h"
 #include "ipc/ipc_channel_proxy.h"
 #include "media/media_features.h"
 #include "ppapi/features/features.h"
 #include "printing/features/features.h"
 #include "v8/include/v8.h"
@@ skipping 103 matching lines @@
   bool AllowPopup() override;
   bool ShouldFork(blink::WebLocalFrame* frame,
                   const GURL& url,
                   const std::string& http_method,
                   bool is_initial_navigation,
                   bool is_server_redirect,
                   bool* send_referrer) override;
   bool WillSendRequest(blink::WebLocalFrame* frame,
                        ui::PageTransition transition_type,
                        const blink::WebURL& url,
-                       GURL* new_url) override;
+                       GURL* new_url,
+                       std::vector<std::unique_ptr<content::URLLoaderThrottle>>*
+                           throttles) override;
   bool IsPrefetchOnly(content::RenderFrame* render_frame,
                       const blink::WebURLRequest& request) override;
   unsigned long long VisitedLinkHash(const char* canonical_url,
                                      size_t length) override;
   bool IsLinkVisited(unsigned long long link_hash) override;
   blink::WebPrescientNetworking* GetPrescientNetworking() override;
   bool ShouldOverridePageVisibilityState(
       const content::RenderFrame* render_frame,
       blink::WebPageVisibilityState* override_state) override;
   bool IsExternalPepperPlugin(const std::string& module_name) override;
@@ skipping 50 matching lines @@
       content::RenderFrame* render_frame,
       const blink::WebPluginParams& params,
       const ChromeViewHostMsg_GetPluginInfo_Output& output);
 #endif
 
 #if BUILDFLAG(ENABLE_PLUGINS) && BUILDFLAG(ENABLE_EXTENSIONS)
   static bool IsExtensionOrSharedModuleWhitelisted(
       const GURL& url, const std::set<std::string>& whitelist);
 #endif
 
+  void OnRenderFrameDestruct(content::RenderFrame* frame);
+
  private:
   FRIEND_TEST_ALL_PREFIXES(ChromeContentRendererClientTest, NaClRestriction);
   FRIEND_TEST_ALL_PREFIXES(ChromeContentRendererClientTest,
                            ShouldSuppressErrorPage);
 
   static GURL GetNaClContentHandlerURL(const std::string& actual_mime_type,
                                        const content::WebPluginInfo& plugin);
 
   // Time at which this object was created. This is very close to the time at
   // which the RendererMain function was entered.
@@ skipping 41 matching lines @@
   std::unique_ptr<LeakDetectorRemoteClient> leak_detector_remote_client_;
 #endif
 
 #if defined(OS_WIN)
   // Observes module load and unload events and notifies the ModuleDatabase in
   // the browser process.
   std::unique_ptr<ModuleWatcher> module_watcher_;
   mojom::ModuleEventSinkPtr module_event_sink_;
 #endif
 
+  struct FrameData {
+    FrameData();
+    ~FrameData();
+    chrome::mojom::SafeBrowsingPtr safe_browsing;
+  };
+  using FrameDataMap = std::map<content::RenderFrame*, FrameData>;
+  FrameDataMap frame_data_map_;

[Adam Rice, 2017/05/25 11:33:24]

Could content::RenderFrame be made to inherit from base::SupportsUserData rather
than doing this?

[yzshen1, 2017/05/26 20:43:52]

I have changed the SafeBrowsing interface to be per-process. That way we don't
need this map (or base::SupportUserData).

+
   DISALLOW_COPY_AND_ASSIGN(ChromeContentRendererClient);
 };
 
 #endif  // CHROME_RENDERER_CHROME_CONTENT_RENDERER_CLIENT_H_