Revert of Move ObjectContentType entirely to HTMLPlugInElement

third_party/WebKit/Source/core/html/HTMLObjectElement.cpp

 /*
  * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
  *           (C) 1999 Antti Koivisto (koivisto@kde.org)
  *           (C) 2000 Stefan Schimanski (1Stein@gmx.de)
  * Copyright (C) 2004, 2005, 2006, 2007, 2008, 2009, 2011 Apple Inc. All rights
  * reserved.
  * Copyright (C) 2008 Nokia Corporation and/or its subsidiary(-ies)
  *
  * This library is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Library General Public
@@ skipping 130 matching lines @@
 
   if (src_index == -1 && data_index != -1) {
     param_names->push_back("src");
     param_values->push_back((*param_values)[data_index]);
   }
 }
 
 // TODO(schenney): crbug.com/572908 This function should not deal with url or
 // serviceType!
 void HTMLObjectElement::ParametersForPlugin(Vector<String>& param_names,
-                                            Vector<String>& param_values) {
+                                            Vector<String>& param_values,
+                                            String& url,
+                                            String& service_type) {
   HashSet<StringImpl*, CaseFoldingHash> unique_param_names;
+  String url_parameter;
 
   // Scan the PARAM children and store their name/value pairs.
   // Get the URL and type from the params if we don't already have them.
   for (HTMLParamElement* p = Traversal<HTMLParamElement>::FirstChild(*this); p;
        p = Traversal<HTMLParamElement>::NextSibling(*p)) {
     String name = p->GetName();
     if (name.IsEmpty())
       continue;
 
     unique_param_names.insert(name.Impl());
     param_names.push_back(p->GetName());
     param_values.push_back(p->Value());
 
     // TODO(schenney): crbug.com/572908 url adjustment does not belong in this
     // function.
-    // HTML5 says that an object resource's URL is specified by the object's
-    // data attribute, not by a param element. However, for compatibility, allow
-    // the resource's URL to be given by a param named "src", "movie", "code" or
-    // "url" if we know that resource points to a plugin.
-    if (url_.IsEmpty() && (DeprecatedEqualIgnoringCase(name, "src") ||
-                           DeprecatedEqualIgnoringCase(name, "movie") ||
-                           DeprecatedEqualIgnoringCase(name, "code") ||
-                           DeprecatedEqualIgnoringCase(name, "url"))) {
-      url_ = StripLeadingAndTrailingHTMLSpaces(p->Value());
-    }
+    if (url.IsEmpty() && url_parameter.IsEmpty() &&
+        (DeprecatedEqualIgnoringCase(name, "src") ||
+         DeprecatedEqualIgnoringCase(name, "movie") ||
+         DeprecatedEqualIgnoringCase(name, "code") ||
+         DeprecatedEqualIgnoringCase(name, "url")))
+      url_parameter = StripLeadingAndTrailingHTMLSpaces(p->Value());
     // TODO(schenney): crbug.com/572908 serviceType calculation does not belong
     // in this function.
-    if (service_type_.IsEmpty() && DeprecatedEqualIgnoringCase(name, "type")) {
-      size_t pos = p->Value().Find(";");
+    if (service_type.IsEmpty() && DeprecatedEqualIgnoringCase(name, "type")) {
+      service_type = p->Value();
+      size_t pos = service_type.Find(";");
       if (pos != kNotFound)
-        service_type_ = p->Value().GetString().Left(pos);
+        service_type = service_type.Left(pos);
     }
   }
 
+  // When OBJECT is used for an applet via Sun's Java plugin, the CODEBASE
+  // attribute in the tag points to the Java plugin itself (an ActiveX
+  // component) while the actual applet CODEBASE is in a PARAM tag. See
+  // <http://java.sun.com/products/plugin/1.2/docs/tags.html>. This means we
+  // have to explicitly suppress the tag's CODEBASE attribute if there is none
+  // in a PARAM, else our Java plugin will misinterpret it. [4004531]
+  String codebase;
+  if (MIMETypeRegistry::IsJavaAppletMIMEType(service_type)) {
+    codebase = "codebase";
+    unique_param_names.insert(
+        codebase.Impl());  // pretend we found it in a PARAM already
+  }
+
   // Turn the attributes of the <object> element into arrays, but don't override
   // <param> values.
   AttributeCollection attributes = this->Attributes();
   for (const Attribute& attribute : attributes) {
     const AtomicString& name = attribute.GetName().LocalName();
     if (!unique_param_names.Contains(name.Impl())) {
       param_names.push_back(name.GetString());
       param_values.push_back(attribute.Value().GetString());
     }
   }
 
   MapDataParamToSrc(&param_names, &param_values);
+
+  // HTML5 says that an object resource's URL is specified by the object's data
+  // attribute, not by a param element. However, for compatibility, allow the
+  // resource's URL to be given by a param named "src", "movie", "code" or "url"
+  // if we know that resource points to a plugin.
+  if (url.IsEmpty() && !url_parameter.IsEmpty()) {
+    KURL completed_url = GetDocument().CompleteURL(url_parameter);
+    bool use_fallback;
+    if (ShouldUsePlugin(completed_url, service_type, false, use_fallback))
+      url = url_parameter;
+  }
 }
 
 bool HTMLObjectElement::HasFallbackContent() const {
   for (Node* child = firstChild(); child; child = child->nextSibling()) {
     // Ignore whitespace-only text, and <param> tags, any other content is
     // fallback content.
     if (child->IsTextNode()) {
       if (!ToText(child)->ContainsOnlyWhitespace())
         return true;
     } else if (!isHTMLParamElement(*child)) {
@@ skipping 52 matching lines @@
   }
 
   // TODO(schenney): crbug.com/572908 I'm not sure it's ever possible to get
   // into updateWidget during a removal, but just in case we should avoid
   // loading the frame to prevent security bugs.
   if (!SubframeLoadingDisabler::CanLoadFrame(*this)) {
     DispatchErrorEvent();
     return;
   }
 
+  String url = this->Url();
+  String service_type = service_type_;
+
   // TODO(schenney): crbug.com/572908 These should be joined into a
   // PluginParameters class.
   Vector<String> param_names;
   Vector<String> param_values;
-  ParametersForPlugin(param_names, param_values);
+  ParametersForPlugin(param_names, param_values, url, service_type);
 
   // Note: url is modified above by parametersForPlugin.
-  if (!AllowedToLoadFrameURL(url_)) {
+  if (!AllowedToLoadFrameURL(url)) {
     DispatchErrorEvent();
     return;
   }
 
   // TODO(schenney): crbug.com/572908 Is it possible to get here without a
   // layoutObject now that we don't have beforeload events?
   if (!GetLayoutObject())
     return;
 
   // Overwrites the URL and MIME type of a Flash embed to use an HTML5 embed.
   KURL overriden_url =
       GetDocument().GetFrame()->Loader().Client()->OverrideFlashEmbedWithHTML(
           GetDocument().CompleteURL(url_));
   if (!overriden_url.IsEmpty()) {
-    url_ = overriden_url.GetString();
-    service_type_ = "text/html";
+    url = url_ = overriden_url.GetString();
+    service_type = service_type_ = "text/html";
   }
 
-  if (!HasValidClassId() || !RequestObject(param_names, param_values)) {
-    if (!url_.IsEmpty())
+  if (!HasValidClassId() ||
+      !RequestObject(url, service_type, param_names, param_values)) {
+    if (!url.IsEmpty())
       DispatchErrorEvent();
     if (HasFallbackContent())
       RenderFallbackContent();
   } else {
     if (IsErrorplaceholder())
       DispatchErrorEvent();
   }
 }
 
 Node::InsertionNotificationRequest HTMLObjectElement::InsertedInto(
@@ skipping 128 matching lines @@
 
 bool HTMLObjectElement::WillUseFallbackContentAtLayout() const {
   return !HasValidClassId() && HasFallbackContent();
 }
 
 void HTMLObjectElement::AssociateWith(HTMLFormElement* form) {
   AssociateByParser(form);
 };
 
 }  // namespace blink