1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
|
// Copyright 2012 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef COMPONENTS_CUSTOM_HANDLERS_PROTOCOL_HANDLER_H_
#define COMPONENTS_CUSTOM_HANDLERS_PROTOCOL_HANDLER_H_
#include <memory>
#include <string>
#include "base/feature_list.h"
#include "base/time/time.h"
#include "base/values.h"
#include "third_party/abseil-cpp/absl/types/optional.h"
#include "third_party/blink/public/common/security/protocol_handler_security_level.h"
#include "url/gurl.h"
namespace custom_handlers {
namespace features {
// When enabled, it strips credentials from URL to mitigate the mitigate the
// risk of credential leakage when registering protocol handlers for standard
// schemes. This feature is enabled by default and meant to be used as a
// killswitch.
// https://html.spec.whatwg.org/multipage/system-state.html#security-and-privacy
BASE_DECLARE_FEATURE(kStripCredentialsForExternalProtocolHandler);
} // namespace features
// A single tuple of (protocol, url, last_modified) that indicates how URLs
// of the given protocol should be rewritten to be handled.
// The |last_modified| field is used to correctly perform deletion
// of protocol handlers based on time ranges.
class ProtocolHandler {
public:
static ProtocolHandler CreateProtocolHandler(
const std::string& protocol,
const GURL& url,
blink::ProtocolHandlerSecurityLevel security_level =
blink::ProtocolHandlerSecurityLevel::kStrict);
ProtocolHandler(const std::string& protocol,
const GURL& url,
base::Time last_modified,
blink::ProtocolHandlerSecurityLevel security_level);
static ProtocolHandler CreateWebAppProtocolHandler(
const std::string& protocol,
const GURL& url,
const std::string& app_id);
ProtocolHandler(const std::string& protocol,
const GURL& url,
const std::string& app_id,
base::Time last_modified,
blink::ProtocolHandlerSecurityLevel security_level);
ProtocolHandler(const ProtocolHandler& other);
~ProtocolHandler();
// Creates a ProtocolHandler with fields from the dictionary. Returns an
// empty ProtocolHandler if the input is invalid.
static ProtocolHandler CreateProtocolHandler(const base::Value::Dict& value);
// Returns true if the dictionary value has all the necessary fields to
// define a ProtocolHandler.
static bool IsValidDict(const base::Value::Dict& value);
// Return true if the protocol handler meets security constraints.
// Verify custom handler URLs security and syntax as well as the schemes
// safelist as described in steps 1, 2, 6 and 7 (except same origin).
// https://html.spec.whatwg.org/multipage/system-state.html#custom-handlers.
bool IsValid() const;
// Returns true if this handler's url has the same origin as the given one.
bool IsSameOrigin(const ProtocolHandler& handler) const;
// Canonical empty ProtocolHandler.
static const ProtocolHandler& EmptyProtocolHandler();
// Interpolates the given URL into the URL template of this handler.
// It mitigates the risk of credential leakage by stripping the credentials
// from the url. See
// https://html.spec.whatwg.org/multipage/system-state.html#security-and-privacy
GURL TranslateUrl(const GURL& url) const;
// Returns true if the handlers are considered equivalent when determining
// if both handlers can be registered, or if a handler has previously been
// ignored.
bool IsEquivalent(const ProtocolHandler& other) const;
// Encodes this protocol handler as a `base::Value::Dict`.
base::Value::Dict Encode() const;
// Returns a friendly name for |protocol| if one is available, otherwise
// this function returns |protocol|.
static std::u16string GetProtocolDisplayName(const std::string& protocol);
// Returns a friendly name for |this.protocol_| if one is available, otherwise
// this function returns |this.protocol_|.
std::u16string GetProtocolDisplayName() const;
const std::string& protocol() const { return protocol_; }
const GURL& url() const { return url_; }
const absl::optional<std::string>& web_app_id() const { return web_app_id_; }
const base::Time& last_modified() const { return last_modified_; }
bool IsEmpty() const { return protocol_.empty(); }
#if !defined(NDEBUG)
// Returns a string representation suitable for use in debugging.
std::string ToString() const;
#endif
bool operator==(const ProtocolHandler& other) const;
bool operator<(const ProtocolHandler& other) const;
private:
ProtocolHandler();
std::string protocol_;
GURL url_;
absl::optional<std::string> web_app_id_;
base::Time last_modified_;
blink::ProtocolHandlerSecurityLevel security_level_;
};
} // namespace custom_handlers
#endif // COMPONENTS_CUSTOM_HANDLERS_PROTOCOL_HANDLER_H_
|
