<webview>: First stab at implementing media permission request for guests.

content/renderer/browser_plugin/browser_plugin.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/renderer/browser_plugin/browser_plugin.h"
 
 #include "base/json/json_string_value_serializer.h"
 #include "base/message_loop.h"
 #include "base/string_number_conversions.h"
 #include "base/string_util.h"
 #include "base/utf_string_conversions.h"
 #include "content/common/browser_plugin_messages.h"
 #include "content/common/view_messages.h"
 #include "content/public/common/content_client.h"
 #include "content/public/renderer/content_renderer_client.h"
 #include "content/renderer/browser_plugin/browser_plugin_bindings.h"
 #include "content/renderer/browser_plugin/browser_plugin_manager.h"
 #include "content/renderer/render_process_impl.h"
 #include "content/renderer/render_thread_impl.h"
 #include "content/renderer/v8_value_converter_impl.h"
 #include "skia/ext/platform_canvas.h"
 #include "third_party/WebKit/Source/WebKit/chromium/public/WebBindings.h"
 #include "third_party/WebKit/Source/WebKit/chromium/public/WebDOMCustomEvent.h"
 #include "third_party/WebKit/Source/WebKit/chromium/public/WebDocument.h"
 #include "third_party/WebKit/Source/WebKit/chromium/public/WebElement.h"
 #include "third_party/WebKit/Source/WebKit/chromium/public/WebFrame.h"
 #include "third_party/WebKit/Source/WebKit/chromium/public/WebInputEvent.h"
 #include "third_party/WebKit/Source/WebKit/chromium/public/WebPluginContainer.h"
 #include "third_party/WebKit/Source/WebKit/chromium/public/WebPluginParams.h"
+#include "third_party/WebKit/Source/WebKit/chromium/public/WebScriptSource.h"
 #include "third_party/WebKit/Source/WebKit/chromium/public/platform/WebRect.h"
-#include "third_party/WebKit/Source/WebKit/chromium/public/WebScriptSource.h"
 #include "webkit/plugins/sad_plugin.h"
 
 #if defined (OS_WIN)
 #include "base/sys_info.h"
 #endif
 
 using WebKit::WebCanvas;
 using WebKit::WebPluginContainer;
 using WebKit::WebPluginParams;
 using WebKit::WebPoint;
 using WebKit::WebRect;
 using WebKit::WebURL;
 using WebKit::WebVector;
 
 namespace content {
 
 namespace {
 
 // Events.
 const char kEventExit[] = "exit";
 const char kEventLoadAbort[] = "loadabort";
 const char kEventLoadCommit[] = "loadcommit";
 const char kEventLoadRedirect[] = "loadredirect";
 const char kEventLoadStart[] = "loadstart";
 const char kEventLoadStop[] = "loadstop";
+const char kEventRequestPermission[] = "permissionrequest";
 const char kEventSizeChanged[] = "sizechanged";
 
 // Parameters/properties on events.
 const char kIsTopLevel[] = "isTopLevel";
 const char kNewURL[] = "newUrl";
 const char kNewHeight[] = "newHeight";
 const char kNewWidth[] = "newWidth";
 const char kOldURL[] = "oldUrl";
 const char kOldHeight[] = "oldHeight";
 const char kOldWidth[] = "oldWidth";
 const char kPartition[] = "partition";
+const char kPermissionTypeMedia[] = "media";
 const char kPersistPrefix[] = "persist:";
 const char kProcessId[] = "processId";
 const char kReason[] = "reason";
+const char kRequestId[] = "request_id";
 const char kSrc[] = "src";
 const char kURL[] = "url";
 
 // Error messages.
 const char kErrorAlreadyNavigated[] =
     "The object has already navigated, so its partition cannot be changed.";
 const char kErrorInvalidPartition[] =
     "Invalid partition attribute.";
 
 static std::string TerminationStatusToString(base::TerminationStatus status) {
@@ skipping 576 matching lines @@
 void BrowserPlugin::LoadAbort(const GURL& url,
                               bool is_top_level,
                               const std::string& type) {
   std::map<std::string, base::Value*> props;
   props[kURL] = base::Value::CreateStringValue(url.spec());
   props[kIsTopLevel] = base::Value::CreateBooleanValue(is_top_level);
   props[kReason] = base::Value::CreateStringValue(type);
   TriggerEvent(kEventLoadAbort, &props);
 }
 
+void BrowserPlugin::RequestMediaAccess(int request_id) {
+  // TODO(lazyboy): Automatically deny the request if there are no event
+  // listeners for permissionrequest. Right now it is not possible to know about

[Charlie Reis, 2012/12/07 19:16:25]

So what happens now if there's no listeners?  Do we end up with lots of
outstanding requests that are never cleaned up?

Also, how are we handling multiple listeners?  I found our email discussion
("API design question: policy functions") and it seems like we were settling on
requiring all listeners to call allow() to grant the permission.  Is that
possible if we don't know how many listeners there are?

[lazyboy, 2012/12/07 22:50:44]

When there's no listeners, yes we end up with lost/outstanding requests. I am
attempting to figure this out (https://chromiumcodereview.appspot.com/11446071/)
so we automatically deny, but bad thing about that is this code here needs to be
shim aware. The other bad thing is even if we have listeners, we can end up with
outstanding request, if the embedder ignores the event by not calling
allow/deny.

Multiple listeners are not handled in this CL at all. Only the first one to call
allow/deny wins (and that clears the request), so the subsequent calls to
allow/deny are ignored. I am not sure how to approach this yet, webkit doesn't
seem to expose anything about # of event listeners registered.

+  // this info directly from the plugin because the user facing event listeners
+  // are registered on the shim, not on the plugin. Also, there is always one
+  // listener registered on the plugin from the shim.

[Charlie Reis, 2012/12/07 19:16:25]

One permissionrequest listener?  I'm not sure I follow.

[lazyboy, 2012/12/07 22:50:44]

This is the one (and only one) '-internal-permissionrequest' listener attached
to <object> from <webview> shim. This one always gets attached, whether or not
there are actual event listeners registered on the <webview> tag.

Where user facing ones are the one on object (that embedder/developer creates)
<webview>.addEventListener('permissionrequest', functionA);
<webview>.addEventListener('permissionrequest', functionB);
<webview>.addEventListener('permissionrequest', functionC);

+  std::map<std::string, base::Value*> props;
+  props[kReason] = base::Value::CreateStringValue(kPermissionTypeMedia);
+  props[kRequestId] = base::Value::CreateIntegerValue(request_id);
+  TriggerEvent(kEventRequestPermission, &props);
+}
+
 void BrowserPlugin::LoadRedirect(const GURL& old_url,
                                  const GURL& new_url,
                                  bool is_top_level) {
   std::map<std::string, base::Value*> props;
   props[kOldURL] = base::Value::CreateStringValue(old_url.spec());
   props[kNewURL] = base::Value::CreateStringValue(new_url.spec());
   props[kIsTopLevel] = base::Value::CreateBooleanValue(is_top_level);
   TriggerEvent(kEventLoadRedirect, &props);
 }
 
@@ skipping 33 matching lines @@
 }
 
 void BrowserPlugin::SetAcceptTouchEvents(bool accept) {
   if (container()) {
     container()->requestTouchEventType(accept ?
         WebKit::WebPluginContainer::TouchEventRequestTypeRaw :
         WebKit::WebPluginContainer::TouchEventRequestTypeNone);
   }
 }
 
+void BrowserPlugin::RespondMediaAccess(int request_id, bool allow) {
+  browser_plugin_manager()->Send(
+      new BrowserPluginHostMsg_AllowMediaAccess(render_view_->GetRoutingID(),
+                                                instance_id_,
+                                                request_id,
+                                                allow));
+}
+
 WebKit::WebPluginContainer* BrowserPlugin::container() const {
   return container_;
 }
 
 bool BrowserPlugin::initialize(WebPluginContainer* container) {
   container_ = container;
   return true;
 }
 
 void BrowserPlugin::destroy() {
@@ skipping 272 matching lines @@
                                                  void* notify_data) {
 }
 
 void BrowserPlugin::didFailLoadingFrameRequest(
     const WebKit::WebURL& url,
     void* notify_data,
     const WebKit::WebURLError& error) {
 }
 
 }  // namespace content