OLD | NEW |
1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "extensions/browser/extension_function_dispatcher.h" | 5 #include "extensions/browser/extension_function_dispatcher.h" |
6 | 6 |
7 #include "base/bind.h" | 7 #include "base/bind.h" |
8 #include "base/json/json_string_value_serializer.h" | 8 #include "base/json/json_string_value_serializer.h" |
9 #include "base/lazy_instance.h" | 9 #include "base/lazy_instance.h" |
10 #include "base/logging.h" | 10 #include "base/logging.h" |
(...skipping 465 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
476 } else if (!process_map.Contains(extension->id(), requesting_process_id) && | 476 } else if (!process_map.Contains(extension->id(), requesting_process_id) && |
477 !api->IsAvailableInUntrustedContext(params.name, extension)) { | 477 !api->IsAvailableInUntrustedContext(params.name, extension)) { |
478 // Privileged APIs can only be called from the process the extension | 478 // Privileged APIs can only be called from the process the extension |
479 // is running in. | 479 // is running in. |
480 disallowed_reason = | 480 disallowed_reason = |
481 "Privileged APIs cannot be called from untrusted processes"; | 481 "Privileged APIs cannot be called from untrusted processes"; |
482 } | 482 } |
483 } else if (content::ChildProcessSecurityPolicy::GetInstance() | 483 } else if (content::ChildProcessSecurityPolicy::GetInstance() |
484 ->HasWebUIBindings(requesting_process_id)) { | 484 ->HasWebUIBindings(requesting_process_id)) { |
485 // WebUI is calling this API. | 485 // WebUI is calling this API. |
486 if (!api->IsAvailableToWebUI(params.name)) { | 486 if (!api->IsAvailableToWebUI(params.name, params.source_url)) { |
487 disallowed_reason = "WebUI can only call webui-enabled APIs"; | 487 disallowed_reason = "WebUI can only call webui-enabled APIs"; |
488 } | 488 } |
489 } else { | 489 } else { |
490 // Web page is calling this API. However, the APIs that are available to | 490 // Web page is calling this API. However, the APIs that are available to |
491 // web pages (e.g. messaging) don't go through ExtensionFunctionDispatcher, | 491 // web pages (e.g. messaging) don't go through ExtensionFunctionDispatcher, |
492 // so this should be impossible. | 492 // so this should be impossible. |
493 disallowed_reason = "Specified extension does not exist."; | 493 disallowed_reason = "Specified extension does not exist."; |
494 } | 494 } |
495 | 495 |
496 if (disallowed_reason != NULL) { | 496 if (disallowed_reason != NULL) { |
(...skipping 28 matching lines...) Expand all Loading... |
525 | 525 |
526 // static | 526 // static |
527 void ExtensionFunctionDispatcher::SendAccessDenied( | 527 void ExtensionFunctionDispatcher::SendAccessDenied( |
528 const ExtensionFunction::ResponseCallback& callback) { | 528 const ExtensionFunction::ResponseCallback& callback) { |
529 base::ListValue empty_list; | 529 base::ListValue empty_list; |
530 callback.Run(ExtensionFunction::FAILED, empty_list, | 530 callback.Run(ExtensionFunction::FAILED, empty_list, |
531 "Access to extension API denied."); | 531 "Access to extension API denied."); |
532 } | 532 } |
533 | 533 |
534 } // namespace extensions | 534 } // namespace extensions |
OLD | NEW |