OLD | NEW |
---|---|
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "chrome/browser/extensions/extension_function_dispatcher.h" | 5 #include "chrome/browser/extensions/extension_function_dispatcher.h" |
6 | 6 |
7 #include <map> | 7 #include <map> |
8 | 8 |
9 #include "base/json/json_string_value_serializer.h" | 9 #include "base/json/json_string_value_serializer.h" |
10 #include "base/lazy_instance.h" | 10 #include "base/lazy_instance.h" |
11 #include "base/memory/ref_counted.h" | 11 #include "base/memory/ref_counted.h" |
12 #include "base/process_util.h" | 12 #include "base/process_util.h" |
13 #include "base/values.h" | 13 #include "base/values.h" |
14 #include "build/build_config.h" | 14 #include "build/build_config.h" |
15 #include "chrome/browser/extensions/extension_activity_log.h" | 15 #include "chrome/browser/extensions/extension_activity_log.h" |
16 #include "chrome/browser/extensions/extension_function.h" | 16 #include "chrome/browser/extensions/extension_function.h" |
17 #include "chrome/browser/extensions/extension_function_registry.h" | 17 #include "chrome/browser/extensions/extension_function_registry.h" |
18 #include "chrome/browser/extensions/extension_service.h" | 18 #include "chrome/browser/extensions/extension_service.h" |
19 #include "chrome/browser/extensions/extension_web_ui.h" | 19 #include "chrome/browser/extensions/extension_web_ui.h" |
20 #include "chrome/browser/extensions/extensions_quota_service.h" | 20 #include "chrome/browser/extensions/extensions_quota_service.h" |
21 #include "chrome/browser/extensions/process_map.h" | 21 #include "chrome/browser/extensions/process_map.h" |
22 #include "chrome/browser/external_protocol/external_protocol_handler.h" | 22 #include "chrome/browser/external_protocol/external_protocol_handler.h" |
23 #include "chrome/browser/profiles/profile.h" | 23 #include "chrome/browser/profiles/profile.h" |
24 #include "chrome/browser/renderer_host/chrome_render_message_filter.h" | 24 #include "chrome/browser/renderer_host/chrome_render_message_filter.h" |
25 #include "chrome/browser/ui/browser_list.h" | 25 #include "chrome/browser/ui/browser_list.h" |
26 #include "chrome/browser/ui/browser_window.h" | 26 #include "chrome/browser/ui/browser_window.h" |
27 #include "chrome/common/extensions/api/extension_api.h" | 27 #include "chrome/common/extensions/api/extension_api.h" |
28 #include "chrome/common/extensions/extension_messages.h" | 28 #include "chrome/common/extensions/extension_messages.h" |
29 #include "chrome/common/extensions/extension_set.h" | 29 #include "chrome/common/extensions/extension_set.h" |
30 #include "chrome/common/extensions/feature.h" | |
30 #include "chrome/common/url_constants.h" | 31 #include "chrome/common/url_constants.h" |
31 #include "content/public/browser/render_process_host.h" | 32 #include "content/public/browser/render_process_host.h" |
32 #include "content/public/browser/render_view_host.h" | 33 #include "content/public/browser/render_view_host.h" |
33 #include "ipc/ipc_message.h" | 34 #include "ipc/ipc_message.h" |
34 #include "ipc/ipc_message_macros.h" | 35 #include "ipc/ipc_message_macros.h" |
35 #include "third_party/WebKit/Source/WebKit/chromium/public/WebSecurityOrigin.h" | 36 #include "third_party/WebKit/Source/WebKit/chromium/public/WebSecurityOrigin.h" |
36 #include "third_party/skia/include/core/SkBitmap.h" | 37 #include "third_party/skia/include/core/SkBitmap.h" |
37 #include "webkit/glue/resource_type.h" | 38 #include "webkit/glue/resource_type.h" |
38 | 39 |
39 using extensions::ExtensionAPI; | 40 using extensions::ExtensionAPI; |
41 using extensions::Feature; | |
40 using content::RenderViewHost; | 42 using content::RenderViewHost; |
41 using WebKit::WebSecurityOrigin; | 43 using WebKit::WebSecurityOrigin; |
42 | 44 |
43 namespace { | 45 namespace { |
44 | 46 |
45 const char kAccessDenied[] = "access denied"; | 47 const char kAccessDenied[] = "access denied"; |
46 const char kQuotaExceeded[] = "quota exceeded"; | 48 const char kQuotaExceeded[] = "quota exceeded"; |
47 | 49 |
48 void LogSuccess(const Extension* extension, | 50 void LogSuccess(const Extension* extension, |
49 const ExtensionHostMsg_Request_Params& params) { | 51 const ExtensionHostMsg_Request_Params& params) { |
(...skipping 215 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
265 extensions::ExtensionAPI* api, | 267 extensions::ExtensionAPI* api, |
266 void* profile, | 268 void* profile, |
267 IPC::Message::Sender* ipc_sender, | 269 IPC::Message::Sender* ipc_sender, |
268 int routing_id) { | 270 int routing_id) { |
269 if (!extension) { | 271 if (!extension) { |
270 LOG(ERROR) << "Specified extension does not exist."; | 272 LOG(ERROR) << "Specified extension does not exist."; |
271 SendAccessDenied(ipc_sender, routing_id, params.request_id); | 273 SendAccessDenied(ipc_sender, routing_id, params.request_id); |
272 return NULL; | 274 return NULL; |
273 } | 275 } |
274 | 276 |
277 // If the API has been ported to the feature system, use that. | |
278 if (api->GetFeature(params.name)) { | |
279 if (!api->IsAvailable( | |
280 params.name, | |
281 extension, | |
282 static_cast<Feature::Context>(params.source_context_type))) { | |
283 LOG(ERROR) << "Access to extension API '" << params.name << "' denied."; | |
Matt Perry
2012/04/09 20:55:54
SendAccessDenied? this if body should be identical
| |
284 return NULL; | |
285 } | |
286 } else { | |
287 // Otherwise, fall back to the older system. | |
288 if (!extension->HasAPIPermission(params.name)) { | |
289 LOG(ERROR) << "Extension " << extension->id() << " does not have " | |
290 << "permission to function: " << params.name; | |
291 SendAccessDenied(ipc_sender, routing_id, params.request_id); | |
292 return NULL; | |
293 } | |
294 } | |
295 | |
296 // If the API requires a privileged process, ensure it is in one. | |
275 if (api->IsPrivileged(params.name) && | 297 if (api->IsPrivileged(params.name) && |
276 !process_map.Contains(extension->id(), requesting_process_id)) { | 298 !process_map.Contains(extension->id(), requesting_process_id)) { |
277 LOG(ERROR) << "Extension API called from incorrect process " | 299 LOG(ERROR) << "Extension API called from incorrect process " |
278 << requesting_process_id | 300 << requesting_process_id |
279 << " from URL " << params.source_url.spec(); | 301 << " from URL " << params.source_url.spec(); |
280 SendAccessDenied(ipc_sender, routing_id, params.request_id); | 302 SendAccessDenied(ipc_sender, routing_id, params.request_id); |
281 return NULL; | 303 return NULL; |
282 } | 304 } |
283 | 305 |
284 if (!extension->HasAPIPermission(params.name)) { | |
285 LOG(ERROR) << "Extension " << extension->id() << " does not have " | |
286 << "permission to function: " << params.name; | |
287 SendAccessDenied(ipc_sender, routing_id, params.request_id); | |
288 return NULL; | |
289 } | |
290 | |
291 ExtensionFunction* function = | 306 ExtensionFunction* function = |
292 ExtensionFunctionRegistry::GetInstance()->NewFunction(params.name); | 307 ExtensionFunctionRegistry::GetInstance()->NewFunction(params.name); |
293 function->SetArgs(¶ms.arguments); | 308 function->SetArgs(¶ms.arguments); |
294 function->set_source_url(params.source_url); | 309 function->set_source_url(params.source_url); |
295 function->set_request_id(params.request_id); | 310 function->set_request_id(params.request_id); |
296 function->set_has_callback(params.has_callback); | 311 function->set_has_callback(params.has_callback); |
297 function->set_user_gesture(params.user_gesture); | 312 function->set_user_gesture(params.user_gesture); |
298 function->set_extension(extension); | 313 function->set_extension(extension); |
299 function->set_profile_id(profile); | 314 function->set_profile_id(profile); |
300 return function; | 315 return function; |
301 } | 316 } |
302 | 317 |
303 // static | 318 // static |
304 void ExtensionFunctionDispatcher::SendAccessDenied( | 319 void ExtensionFunctionDispatcher::SendAccessDenied( |
305 IPC::Message::Sender* ipc_sender, int routing_id, int request_id) { | 320 IPC::Message::Sender* ipc_sender, int routing_id, int request_id) { |
306 ipc_sender->Send(new ExtensionMsg_Response( | 321 ipc_sender->Send(new ExtensionMsg_Response( |
307 routing_id, request_id, false, std::string(), | 322 routing_id, request_id, false, std::string(), |
308 "Access to extension API denied.")); | 323 "Access to extension API denied.")); |
309 } | 324 } |
OLD | NEW |