| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "chrome/browser/extensions/api/web_request/web_request_permissions.h" | 5 #include "chrome/browser/extensions/api/web_request/web_request_permissions.h" |
| 6 | 6 |
| 7 #include "base/strings/string_util.h" | 7 #include "base/strings/string_util.h" |
| 8 #include "base/strings/stringprintf.h" | 8 #include "base/strings/stringprintf.h" |
| 9 #include "chrome/common/extensions/extension_constants.h" | |
| 10 #include "chrome/common/url_constants.h" | |
| 11 #include "content/public/browser/resource_request_info.h" | 9 #include "content/public/browser/resource_request_info.h" |
| 10 #include "extensions/browser/api/extensions_api_client.h" |
| 12 #include "extensions/browser/guest_view/web_view/web_view_renderer_state.h" | 11 #include "extensions/browser/guest_view/web_view/web_view_renderer_state.h" |
| 13 #include "extensions/browser/info_map.h" | 12 #include "extensions/browser/info_map.h" |
| 14 #include "extensions/common/constants.h" | 13 #include "extensions/common/constants.h" |
| 15 #include "extensions/common/extension.h" | 14 #include "extensions/common/extension.h" |
| 16 #include "extensions/common/permissions/permissions_data.h" | 15 #include "extensions/common/permissions/permissions_data.h" |
| 17 #include "net/url_request/url_request.h" | 16 #include "net/url_request/url_request.h" |
| 18 #include "url/gurl.h" | 17 #include "url/gurl.h" |
| 19 | 18 |
| 20 using content::ResourceRequestInfo; | 19 using content::ResourceRequestInfo; |
| 21 | 20 |
| (...skipping 31 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 53 EndsWith(url.host(), ".clients.google.com", true) || | 52 EndsWith(url.host(), ".clients.google.com", true) || |
| 54 url.host() == "sb-ssl.google.com" || | 53 url.host() == "sb-ssl.google.com" || |
| 55 (url.host() == "chrome.google.com" && | 54 (url.host() == "chrome.google.com" && |
| 56 StartsWithASCII(url.path(), "/webstore", true)); | 55 StartsWithASCII(url.path(), "/webstore", true)); |
| 57 } | 56 } |
| 58 GURL::Replacements replacements; | 57 GURL::Replacements replacements; |
| 59 replacements.ClearQuery(); | 58 replacements.ClearQuery(); |
| 60 replacements.ClearRef(); | 59 replacements.ClearRef(); |
| 61 GURL url_without_query = url.ReplaceComponents(replacements); | 60 GURL url_without_query = url.ReplaceComponents(replacements); |
| 62 return sensitive_chrome_url || | 61 return sensitive_chrome_url || |
| 63 extension_urls::IsWebstoreUpdateUrl(url_without_query) || | 62 extensions::ExtensionsAPIClient::Get()->MustNotBeModifiedURL(url); |
| 64 extension_urls::IsBlacklistUpdateUrl(url); | |
| 65 } | 63 } |
| 66 | 64 |
| 67 // Returns true if the scheme is one we want to allow extensions to have access | 65 // Returns true if the scheme is one we want to allow extensions to have access |
| 68 // to. Extensions still need specific permissions for a given URL, which is | 66 // to. Extensions still need specific permissions for a given URL, which is |
| 69 // covered by CanExtensionAccessURL. | 67 // covered by CanExtensionAccessURL. |
| 70 bool HasWebRequestScheme(const GURL& url) { | 68 bool HasWebRequestScheme(const GURL& url) { |
| 71 return (url.SchemeIs(url::kAboutScheme) || url.SchemeIs(url::kFileScheme) || | 69 return (url.SchemeIs(url::kAboutScheme) || url.SchemeIs(url::kFileScheme) || |
| 72 url.SchemeIs(url::kFileSystemScheme) || | 70 url.SchemeIs(url::kFileSystemScheme) || |
| 73 url.SchemeIs(url::kFtpScheme) || url.SchemeIs(url::kHttpScheme) || | 71 url.SchemeIs(url::kFtpScheme) || url.SchemeIs(url::kHttpScheme) || |
| 74 url.SchemeIs(url::kHttpsScheme) || | 72 url.SchemeIs(url::kHttpsScheme) || |
| (...skipping 10 matching lines...) Expand all Loading... |
| 85 const ResourceRequestInfo* info = ResourceRequestInfo::ForRequest(request); | 83 const ResourceRequestInfo* info = ResourceRequestInfo::ForRequest(request); |
| 86 if (info) { | 84 if (info) { |
| 87 int process_id = info->GetChildID(); | 85 int process_id = info->GetChildID(); |
| 88 // Never hide requests from guest processes. | 86 // Never hide requests from guest processes. |
| 89 if (extensions::WebViewRendererState::GetInstance()->IsGuest(process_id)) | 87 if (extensions::WebViewRendererState::GetInstance()->IsGuest(process_id)) |
| 90 return false; | 88 return false; |
| 91 | 89 |
| 92 if (extension_info_map && ( | 90 if (extension_info_map && ( |
| 93 extension_info_map->IsSigninProcess(process_id) || | 91 extension_info_map->IsSigninProcess(process_id) || |
| 94 extension_info_map->process_map().Contains( | 92 extension_info_map->process_map().Contains( |
| 95 extension_misc::kWebStoreAppId, process_id))) { | 93 extensions::ExtensionsAPIClient::Get()->WebStoreAppId(), |
| 94 process_id))) { |
| 96 return true; | 95 return true; |
| 97 } | 96 } |
| 98 } | 97 } |
| 99 | 98 |
| 100 const GURL& url = request->url(); | 99 const GURL& url = request->url(); |
| 101 return IsSensitiveURL(url) || !HasWebRequestScheme(url); | 100 return IsSensitiveURL(url) || !HasWebRequestScheme(url); |
| 102 } | 101 } |
| 103 | 102 |
| 104 // static | 103 // static |
| 105 bool WebRequestPermissions::CanExtensionAccessURL( | 104 bool WebRequestPermissions::CanExtensionAccessURL( |
| (...skipping 28 matching lines...) Expand all Loading... |
| 134 } | 133 } |
| 135 break; | 134 break; |
| 136 case REQUIRE_ALL_URLS: | 135 case REQUIRE_ALL_URLS: |
| 137 if (!extension->permissions_data()->HasEffectiveAccessToAllHosts()) | 136 if (!extension->permissions_data()->HasEffectiveAccessToAllHosts()) |
| 138 return false; | 137 return false; |
| 139 break; | 138 break; |
| 140 } | 139 } |
| 141 | 140 |
| 142 return true; | 141 return true; |
| 143 } | 142 } |
| OLD | NEW |