Chromium Code Reviews| OLD | NEW |
|---|---|
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "extensions/renderer/script_injection.h" | 5 #include "extensions/renderer/script_injection.h" |
| 6 | 6 |
| 7 #include <map> | 7 #include <map> |
| 8 | 8 |
| 9 #include "base/lazy_instance.h" | 9 #include "base/lazy_instance.h" |
| 10 #include "base/metrics/histogram.h" | 10 #include "base/metrics/histogram.h" |
| 11 #include "base/timer/elapsed_timer.h" | 11 #include "base/timer/elapsed_timer.h" |
| 12 #include "base/values.h" | 12 #include "base/values.h" |
| 13 #include "content/public/child/v8_value_converter.h" | 13 #include "content/public/child/v8_value_converter.h" |
| 14 #include "content/public/renderer/render_view.h" | 14 #include "content/public/renderer/render_view.h" |
| 15 #include "extensions/common/extension_messages.h" | 15 #include "extensions/common/extension_messages.h" |
| 16 #include "extensions/common/host_id.h" | 16 #include "extensions/common/host_id.h" |
| 17 #include "extensions/common/manifest_handlers/csp_info.h" | 17 #include "extensions/common/manifest_handlers/csp_info.h" |
| 18 #include "extensions/renderer/dom_activity_logger.h" | 18 #include "extensions/renderer/dom_activity_logger.h" |
| 19 #include "extensions/renderer/extension_groups.h" | 19 #include "extensions/renderer/extension_groups.h" |
| 20 #include "extensions/renderer/extension_injection_host.h" | 20 #include "extensions/renderer/extension_injection_host.h" |
| 21 #include "extensions/renderer/extensions_renderer_client.h" | 21 #include "extensions/renderer/extensions_renderer_client.h" |
| 22 #include "extensions/renderer/script_injection_callback.h" | |
| 23 #include "extensions/renderer/script_injection_manager.h" | |
| 24 #include "extensions/renderer/scripts_run_info.h" | |
| 22 #include "third_party/WebKit/public/platform/WebString.h" | 25 #include "third_party/WebKit/public/platform/WebString.h" |
| 23 #include "third_party/WebKit/public/web/WebDocument.h" | 26 #include "third_party/WebKit/public/web/WebDocument.h" |
| 24 #include "third_party/WebKit/public/web/WebLocalFrame.h" | 27 #include "third_party/WebKit/public/web/WebLocalFrame.h" |
| 25 #include "third_party/WebKit/public/web/WebScopedUserGesture.h" | 28 #include "third_party/WebKit/public/web/WebScopedUserGesture.h" |
| 26 #include "third_party/WebKit/public/web/WebScriptSource.h" | 29 #include "third_party/WebKit/public/web/WebScriptSource.h" |
| 27 #include "third_party/WebKit/public/web/WebSecurityOrigin.h" | 30 #include "third_party/WebKit/public/web/WebSecurityOrigin.h" |
| 28 #include "url/gurl.h" | 31 #include "url/gurl.h" |
| 29 | 32 |
| 30 namespace extensions { | 33 namespace extensions { |
| 31 | 34 |
| (...skipping 78 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
| 110 blink::WebLocalFrame* web_frame, | 113 blink::WebLocalFrame* web_frame, |
| 111 const HostID& host_id, | 114 const HostID& host_id, |
| 112 UserScript::RunLocation run_location, | 115 UserScript::RunLocation run_location, |
| 113 int tab_id) | 116 int tab_id) |
| 114 : injector_(injector.Pass()), | 117 : injector_(injector.Pass()), |
| 115 web_frame_(web_frame), | 118 web_frame_(web_frame), |
| 116 host_id_(host_id), | 119 host_id_(host_id), |
| 117 run_location_(run_location), | 120 run_location_(run_location), |
| 118 tab_id_(tab_id), | 121 tab_id_(tab_id), |
| 119 request_id_(kInvalidRequestId), | 122 request_id_(kInvalidRequestId), |
| 120 complete_(false) { | 123 complete_(false), |
| 124 execution_results_(new base::ListValue()), | |
| 125 all_injection_started_(false), | |
| 126 script_injection_manager_(nullptr) { | |
| 121 } | 127 } |
| 122 | 128 |
| 123 ScriptInjection::~ScriptInjection() { | 129 ScriptInjection::~ScriptInjection() { |
| 124 if (!complete_) | 130 if (!complete_) |
| 125 injector_->OnWillNotInject(ScriptInjector::WONT_INJECT); | 131 injector_->OnWillNotInject(ScriptInjector::WONT_INJECT); |
| 126 } | 132 } |
| 127 | 133 |
| 128 bool ScriptInjection::TryToInject(UserScript::RunLocation current_location, | 134 bool ScriptInjection::TryToInject( |
| 129 const InjectionHost* injection_host, | 135 UserScript::RunLocation current_location, |
| 130 ScriptsRunInfo* scripts_run_info) { | 136 const InjectionHost* injection_host, |
| 137 scoped_refptr<ScriptsRunInfo> scripts_run_info) { | |
| 138 scripts_run_info_ = scripts_run_info; | |
| 139 | |
| 131 if (current_location < run_location_) | 140 if (current_location < run_location_) |
| 132 return false; // Wait for the right location. | 141 return false; // Wait for the right location. |
| 133 | 142 |
| 134 if (request_id_ != kInvalidRequestId) | 143 if (request_id_ != kInvalidRequestId) |
| 135 return false; // We're waiting for permission right now, try again later. | 144 return false; // We're waiting for permission right now, try again later. |
| 136 | 145 |
| 137 if (!injection_host) { | 146 if (!injection_host) { |
| 138 NotifyWillNotInject(ScriptInjector::EXTENSION_REMOVED); | 147 NotifyWillNotInject(ScriptInjector::EXTENSION_REMOVED); |
| 139 return true; // We're done. | 148 return true; // We're done. |
| 140 } | 149 } |
| 141 | 150 |
| 142 switch (injector_->CanExecuteOnFrame(injection_host, web_frame_, tab_id_, | 151 switch (injector_->CanExecuteOnFrame(injection_host, web_frame_, tab_id_, |
| 143 web_frame_->top()->document().url())) { | 152 web_frame_->top()->document().url())) { |
| 144 case PermissionsData::ACCESS_DENIED: | 153 case PermissionsData::ACCESS_DENIED: |
| 145 NotifyWillNotInject(ScriptInjector::NOT_ALLOWED); | 154 NotifyWillNotInject(ScriptInjector::NOT_ALLOWED); |
| 146 return true; // We're done. | 155 return true; // We're done. |
| 147 case PermissionsData::ACCESS_WITHHELD: | 156 case PermissionsData::ACCESS_WITHHELD: |
| 148 SendInjectionMessage(true /* request permission */); | 157 SendInjectionMessage(true /* request permission */); |
| 149 return false; // Wait around for permission. | 158 return false; // Wait around for permission. |
| 150 case PermissionsData::ACCESS_ALLOWED: | 159 case PermissionsData::ACCESS_ALLOWED: |
| 151 Inject(injection_host, scripts_run_info); | 160 Inject(injection_host); |
| 152 return true; // We're done! | 161 return true; // We're done! |
| 153 } | 162 } |
| 154 | 163 |
| 155 NOTREACHED(); | 164 NOTREACHED(); |
| 156 return false; | 165 return false; |
| 157 } | 166 } |
| 158 | 167 |
| 159 bool ScriptInjection::OnPermissionGranted(const InjectionHost* injection_host, | 168 bool ScriptInjection::OnPermissionGranted(const InjectionHost* injection_host) { |
| 160 ScriptsRunInfo* scripts_run_info) { | |
| 161 if (!injection_host) { | 169 if (!injection_host) { |
| 162 NotifyWillNotInject(ScriptInjector::EXTENSION_REMOVED); | 170 NotifyWillNotInject(ScriptInjector::EXTENSION_REMOVED); |
| 163 return false; | 171 return false; |
| 164 } | 172 } |
| 165 | 173 |
| 166 Inject(injection_host, scripts_run_info); | 174 Inject(injection_host); |
| 167 return true; | 175 return true; |
| 168 } | 176 } |
| 169 | 177 |
| 170 void ScriptInjection::SendInjectionMessage(bool request_permission) { | 178 void ScriptInjection::SendInjectionMessage(bool request_permission) { |
| 171 content::RenderView* render_view = | 179 content::RenderView* render_view = |
| 172 content::RenderView::FromWebView(web_frame()->top()->view()); | 180 content::RenderView::FromWebView(web_frame()->top()->view()); |
| 173 | 181 |
| 174 // If we are just notifying the browser of the injection, then send an | 182 // If we are just notifying the browser of the injection, then send an |
| 175 // invalid request (which is treated like a notification). | 183 // invalid request (which is treated like a notification). |
| 176 request_id_ = request_permission ? g_next_pending_id++ : kInvalidRequestId; | 184 request_id_ = request_permission ? g_next_pending_id++ : kInvalidRequestId; |
| 177 render_view->Send(new ExtensionHostMsg_RequestScriptInjectionPermission( | 185 render_view->Send(new ExtensionHostMsg_RequestScriptInjectionPermission( |
| 178 render_view->GetRoutingID(), | 186 render_view->GetRoutingID(), |
| 179 host_id_.id(), | 187 host_id_.id(), |
| 180 injector_->script_type(), | 188 injector_->script_type(), |
| 181 request_id_)); | 189 request_id_)); |
| 182 } | 190 } |
| 183 | 191 |
| 184 void ScriptInjection::NotifyWillNotInject( | 192 void ScriptInjection::NotifyWillNotInject( |
| 185 ScriptInjector::InjectFailureReason reason) { | 193 ScriptInjector::InjectFailureReason reason) { |
| 186 complete_ = true; | 194 complete_ = true; |
| 187 injector_->OnWillNotInject(reason); | 195 injector_->OnWillNotInject(reason); |
| 188 } | 196 } |
| 189 | 197 |
| 190 void ScriptInjection::Inject(const InjectionHost* injection_host, | 198 void ScriptInjection::Inject(const InjectionHost* injection_host) { |
| 191 ScriptsRunInfo* scripts_run_info) { | |
| 192 DCHECK(injection_host); | 199 DCHECK(injection_host); |
| 193 DCHECK(scripts_run_info); | 200 DCHECK(scripts_run_info_.get()); |
| 194 DCHECK(!complete_); | 201 DCHECK(!complete_); |
| 195 | 202 |
| 196 if (injection_host->ShouldNotifyBrowserOfInjection()) | 203 if (injection_host->ShouldNotifyBrowserOfInjection()) |
| 197 SendInjectionMessage(false /* don't request permission */); | 204 SendInjectionMessage(false /* don't request permission */); |
| 198 | 205 |
| 199 std::vector<blink::WebFrame*> frame_vector; | 206 std::vector<blink::WebFrame*> frame_vector; |
| 200 frame_vector.push_back(web_frame_); | 207 frame_vector.push_back(web_frame_); |
| 201 if (injector_->ShouldExecuteInChildFrames()) | 208 if (injector_->ShouldExecuteInChildFrames()) |
| 202 AppendAllChildFrames(web_frame_, &frame_vector); | 209 AppendAllChildFrames(web_frame_, &frame_vector); |
| 203 | 210 |
| 204 scoped_ptr<blink::WebScopedUserGesture> gesture; | |
| 205 if (injector_->IsUserGesture()) | |
| 206 gesture.reset(new blink::WebScopedUserGesture()); | |
| 207 | |
| 208 bool inject_js = injector_->ShouldInjectJs(run_location_); | 211 bool inject_js = injector_->ShouldInjectJs(run_location_); |
| 209 bool inject_css = injector_->ShouldInjectCss(run_location_); | 212 bool inject_css = injector_->ShouldInjectCss(run_location_); |
| 210 DCHECK(inject_js || inject_css); | 213 DCHECK(inject_js || inject_css); |
| 211 | 214 |
| 212 scoped_ptr<base::ListValue> execution_results(new base::ListValue()); | |
| 213 GURL top_url = web_frame_->top()->document().url(); | 215 GURL top_url = web_frame_->top()->document().url(); |
| 216 size_t result_index = 0; | |
| 214 for (std::vector<blink::WebFrame*>::iterator iter = frame_vector.begin(); | 217 for (std::vector<blink::WebFrame*>::iterator iter = frame_vector.begin(); |
| 215 iter != frame_vector.end(); | 218 iter != frame_vector.end(); |
| 216 ++iter) { | 219 ++iter) { |
| 217 // TODO(dcheng): Unfortunately, the code as written won't work in an OOPI | 220 // TODO(dcheng): Unfortunately, the code as written won't work in an OOPI |
| 218 // world. This is just a temporary hack to make things compile. | 221 // world. This is just a temporary hack to make things compile. |
| 219 blink::WebLocalFrame* frame = (*iter)->toWebLocalFrame(); | 222 blink::WebLocalFrame* frame = (*iter)->toWebLocalFrame(); |
| 220 | 223 |
| 221 // We recheck access here in the renderer for extra safety against races | 224 // We recheck access here in the renderer for extra safety against races |
| 222 // with navigation, but different frames can have different URLs, and the | 225 // with navigation, but different frames can have different URLs, and the |
| 223 // injection host might only have access to a subset of them. | 226 // injection host might only have access to a subset of them. |
| 224 // For child frames, we just skip ones the injection host doesn't have | 227 // For child frames, we just skip ones the injection host doesn't have |
| 225 // access to and carry on. | 228 // access to and carry on. |
| 226 // Note: we don't consider ACCESS_WITHHELD because there is nowhere to | 229 // Note: we don't consider ACCESS_WITHHELD because there is nowhere to |
| 227 // surface a request for a child frame. | 230 // surface a request for a child frame. |
| 228 // TODO(rdevlin.cronin): We should ask for permission somehow. | 231 // TODO(rdevlin.cronin): We should ask for permission somehow. |
| 229 if (injector_->CanExecuteOnFrame(injection_host, frame, tab_id_, top_url) == | 232 if (injector_->CanExecuteOnFrame(injection_host, frame, tab_id_, top_url) == |
| 230 PermissionsData::ACCESS_DENIED) { | 233 PermissionsData::ACCESS_DENIED) { |
| 231 DCHECK(frame->parent()); | 234 DCHECK(frame->parent()); |
| 232 continue; | 235 continue; |
| 233 } | 236 } |
| 234 if (inject_js) | 237 if (inject_js) { |
| 235 InjectJs(injection_host, frame, execution_results.get()); | 238 frame_result_index_[frame] = result_index++; |
| 239 InjectJs(injection_host, frame); | |
| 240 } | |
| 236 if (inject_css) | 241 if (inject_css) |
| 237 InjectCss(frame); | 242 InjectCss(frame); |
| 238 } | 243 } |
| 239 | 244 |
| 240 complete_ = true; | 245 all_injection_started_ = true; |
| 241 | 246 TryToFinish(); |
| 242 // TODO(hanxi): don't log these metrics for webUIs' injections. | |
| 243 injector_->OnInjectionComplete(execution_results.Pass(), | |
| 244 scripts_run_info, | |
| 245 run_location_); | |
| 246 } | 247 } |
| 247 | 248 |
| 248 void ScriptInjection::InjectJs(const InjectionHost* injection_host, | 249 void ScriptInjection::InjectJs(const InjectionHost* injection_host, |
| 249 blink::WebLocalFrame* frame, | 250 blink::WebLocalFrame* frame) { |
| 250 base::ListValue* execution_results) { | |
| 251 std::vector<blink::WebScriptSource> sources = | 251 std::vector<blink::WebScriptSource> sources = |
| 252 injector_->GetJsSources(run_location_); | 252 injector_->GetJsSources(run_location_); |
| 253 bool in_main_world = injector_->ShouldExecuteInMainWorld(); | 253 bool in_main_world = injector_->ShouldExecuteInMainWorld(); |
| 254 int world_id = in_main_world | 254 int world_id = in_main_world |
| 255 ? DOMActivityLogger::kMainWorldId | 255 ? DOMActivityLogger::kMainWorldId |
| 256 : GetIsolatedWorldIdForInstance(injection_host, frame); | 256 : GetIsolatedWorldIdForInstance(injection_host, frame); |
| 257 bool expects_results = injector_->ExpectsResults(); | 257 bool is_user_gesture = injector_->IsUserGesture(); |
| 258 | |
| 259 scoped_ptr<blink::WebScriptExecutionCallback> callback( | |
| 260 new ScriptInjectionCallback(this, frame)); | |
| 258 | 261 |
| 259 base::ElapsedTimer exec_timer; | 262 base::ElapsedTimer exec_timer; |
| 260 if (injection_host->id().type() == HostID::EXTENSIONS) | 263 if (injection_host->id().type() == HostID::EXTENSIONS) |
| 261 DOMActivityLogger::AttachToWorld(world_id, injection_host->id().id()); | 264 DOMActivityLogger::AttachToWorld(world_id, injection_host->id().id()); |
| 262 v8::HandleScope scope(v8::Isolate::GetCurrent()); | 265 |
| 263 v8::Local<v8::Value> script_value; | |
| 264 if (in_main_world) { | 266 if (in_main_world) { |
| 265 // We only inject in the main world for javascript: urls. | 267 // We only inject in the main world for javascript: urls. |
| 266 DCHECK_EQ(1u, sources.size()); | 268 DCHECK_EQ(1u, sources.size()); |
| 267 | 269 |
| 268 const blink::WebScriptSource& source = sources.front(); | 270 frame->requestExecuteScriptAndReturnValue(sources.front(), |
| 269 if (expects_results) | 271 is_user_gesture, |
| 270 script_value = frame->executeScriptAndReturnValue(source); | 272 callback.release()); |
| 271 else | |
| 272 frame->executeScript(source); | |
| 273 } else { // in isolated world | 273 } else { // in isolated world |
| 274 scoped_ptr<blink::WebVector<v8::Local<v8::Value> > > results; | 274 frame->requestExecuteScriptInIsolatedWorld(world_id, |
| 275 if (expects_results) | 275 &sources.front(), |
| 276 results.reset(new blink::WebVector<v8::Local<v8::Value> >()); | 276 sources.size(), |
| 277 frame->executeScriptInIsolatedWorld(world_id, | 277 EXTENSION_GROUP_CONTENT_SCRIPTS, |
| 278 &sources.front(), | 278 is_user_gesture, |
| 279 sources.size(), | 279 callback.release()); |
| 280 EXTENSION_GROUP_CONTENT_SCRIPTS, | |
| 281 results.get()); | |
| 282 if (expects_results && !results->isEmpty()) | |
| 283 script_value = (*results)[0]; | |
| 284 } | 280 } |
| 285 | 281 |
| 286 if (injection_host->id().type() == HostID::EXTENSIONS) | 282 if (injection_host->id().type() == HostID::EXTENSIONS) |
| 287 UMA_HISTOGRAM_TIMES("Extensions.InjectScriptTime", exec_timer.Elapsed()); | 283 UMA_HISTOGRAM_TIMES("Extensions.InjectScriptTime", exec_timer.Elapsed()); |
| 284 } | |
| 288 | 285 |
| 286 void ScriptInjection::OnJSInjectionCompleted( | |
| 287 blink::WebLocalFrame* frame, | |
| 288 const blink::WebVector<v8::Local<v8::Value> >& results) { | |
| 289 std::map<blink::WebLocalFrame*, size_t>::iterator it = | |
|
Devlin
2015/02/25 18:02:15
We actually make no guarantees about result order
kozy
2015/02/27 17:32:28
Done.
| |
| 290 frame_result_index_.find(frame); | |
| 291 CHECK(it != frame_result_index_.end()); | |
| 292 size_t idx = it->second; | |
| 293 frame_result_index_.erase(it); | |
| 294 | |
| 295 bool expects_results = injector_->ExpectsResults(); | |
| 289 if (expects_results) { | 296 if (expects_results) { |
| 297 v8::Local<v8::Value> script_value; | |
| 298 if (!results.isEmpty()) | |
| 299 script_value = results[0]; | |
| 290 // Right now, we only support returning single results (per frame). | 300 // Right now, we only support returning single results (per frame). |
| 291 scoped_ptr<content::V8ValueConverter> v8_converter( | 301 scoped_ptr<content::V8ValueConverter> v8_converter( |
| 292 content::V8ValueConverter::create()); | 302 content::V8ValueConverter::create()); |
| 293 // It's safe to always use the main world context when converting | 303 // It's safe to always use the main world context when converting |
| 294 // here. V8ValueConverterImpl shouldn't actually care about the | 304 // here. V8ValueConverterImpl shouldn't actually care about the |
| 295 // context scope, and it switches to v8::Object's creation context | 305 // context scope, and it switches to v8::Object's creation context |
| 296 // when encountered. | 306 // when encountered. |
| 297 v8::Local<v8::Context> context = frame->mainWorldScriptContext(); | 307 v8::Local<v8::Context> context = frame->mainWorldScriptContext(); |
| 298 scoped_ptr<base::Value> result( | 308 scoped_ptr<base::Value> result( |
| 299 v8_converter->FromV8Value(script_value, context)); | 309 v8_converter->FromV8Value(script_value, context)); |
| 300 // Always append an execution result (i.e. no result == null result) | 310 execution_results_->Set(idx, result.get() ? result.release() |
| 301 // so that |execution_results| lines up with the frames. | 311 : base::Value::CreateNullValue()); |
| 302 execution_results->Append(result.get() ? result.release() | 312 } |
| 303 : base::Value::CreateNullValue()); | 313 TryToFinish(); |
| 314 } | |
| 315 | |
| 316 void ScriptInjection::SetScriptInjectionManager( | |
| 317 ScriptInjectionManager* manager){ | |
| 318 script_injection_manager_ = manager; | |
| 319 } | |
| 320 | |
| 321 void ScriptInjection::TryToFinish() { | |
| 322 if (all_injection_started_ && frame_result_index_.size() == 0) { | |
| 323 complete_ = true; | |
| 324 injector_->OnInjectionComplete(execution_results_.Pass(), | |
| 325 scripts_run_info_.get(), | |
| 326 run_location_); | |
| 327 | |
| 328 CHECK(script_injection_manager_); | |
| 329 // this object can be destroyed after next line | |
| 330 script_injection_manager_->OnInjectionFinished(this, | |
| 331 scripts_run_info_); | |
| 304 } | 332 } |
| 305 } | 333 } |
| 306 | 334 |
| 307 void ScriptInjection::InjectCss(blink::WebLocalFrame* frame) { | 335 void ScriptInjection::InjectCss(blink::WebLocalFrame* frame) { |
| 308 std::vector<std::string> css_sources = | 336 std::vector<std::string> css_sources = |
| 309 injector_->GetCssSources(run_location_); | 337 injector_->GetCssSources(run_location_); |
| 310 for (std::vector<std::string>::const_iterator iter = css_sources.begin(); | 338 for (std::vector<std::string>::const_iterator iter = css_sources.begin(); |
| 311 iter != css_sources.end(); | 339 iter != css_sources.end(); |
| 312 ++iter) { | 340 ++iter) { |
| 313 frame->document().insertStyleSheet(blink::WebString::fromUTF8(*iter)); | 341 frame->document().insertStyleSheet(blink::WebString::fromUTF8(*iter)); |
| 314 } | 342 } |
| 315 } | 343 } |
| 316 | 344 |
| 317 } // namespace extensions | 345 } // namespace extensions |
| OLD | NEW |