1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
|
// Copyright 2015 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef COMPONENTS_PERMISSIONS_PERMISSION_MANAGER_H_
#define COMPONENTS_PERMISSIONS_PERMISSION_MANAGER_H_
#include <map>
#include <unordered_map>
#include "base/containers/flat_map.h"
#include "base/containers/id_map.h"
#include "base/functional/callback_forward.h"
#include "base/memory/raw_ptr.h"
#include "components/content_settings/core/browser/content_settings_observer.h"
#include "components/content_settings/core/common/content_settings.h"
#include "components/keyed_service/core/keyed_service.h"
#include "components/permissions/permission_context_base.h"
#include "components/permissions/permission_decision_auto_blocker.h"
#include "components/permissions/permission_request_id.h"
#include "components/permissions/permission_util.h"
#include "content/public/browser/permission_controller_delegate.h"
#include "content/public/browser/permission_result.h"
#include "url/origin.h"
using PermissionStatus = blink::mojom::PermissionStatus;
namespace blink {
enum class PermissionType;
}
namespace content {
class BrowserContext;
class RenderFrameHost;
class RenderProcessHost;
class WebContents;
struct PermissionRequestDescription;
}
class GeolocationPermissionContextDelegateTests;
class SubscriptionInterceptingPermissionManager;
namespace permissions {
class PermissionContextBase;
struct PermissionResult;
class PermissionManagerTest;
class PermissionManager : public KeyedService,
public content::PermissionControllerDelegate,
public permissions::Observer,
public PermissionDecisionAutoBlocker::Observer {
public:
using PermissionContextMap =
std::unordered_map<ContentSettingsType,
std::unique_ptr<PermissionContextBase>,
ContentSettingsTypeHash>;
PermissionManager(content::BrowserContext* browser_context,
PermissionContextMap permission_contexts);
PermissionManager(const PermissionManager&) = delete;
PermissionManager& operator=(const PermissionManager&) = delete;
~PermissionManager() override;
// KeyedService implementation.
void Shutdown() override;
// PermissionDecisionAutoBlocker::Observer
void OnEmbargoStarted(const GURL& origin,
ContentSettingsType content_setting) override;
PermissionContextBase* GetPermissionContextForTesting(
ContentSettingsType type);
PermissionContextMap& PermissionContextsForTesting() {
return permission_contexts_;
}
private:
friend class PermissionManagerTest;
friend class ::GeolocationPermissionContextDelegateTests;
friend class ::SubscriptionInterceptingPermissionManager;
// The `PendingRequestLocalId` will be unique within the `PermissionManager`
// instance, thus within a `BrowserContext`, which overachieves the
// requirement from `PermissionRequestID` that the `RequestLocalId` be unique
// within each frame.
class PendingRequest;
using PendingRequestLocalId = PermissionRequestID::RequestLocalId;
using PendingRequestsMap =
base::IDMap<std::unique_ptr<PendingRequest>, PendingRequestLocalId>;
class PermissionResponseCallback;
struct Subscription;
using SubscriptionsMap =
base::IDMap<std::unique_ptr<Subscription>, SubscriptionId>;
using SubscriptionTypeCounts = base::flat_map<ContentSettingsType, size_t>;
PermissionContextBase* GetPermissionContext(ContentSettingsType type);
// content::PermissionControllerDelegate implementation.
void RequestPermissions(
content::RenderFrameHost* render_frame_host,
const content::PermissionRequestDescription& request_description,
base::OnceCallback<void(const std::vector<PermissionStatus>&)> callback)
override;
void RequestPermissionsInternal(
content::RenderFrameHost* render_frame_host,
const content::PermissionRequestDescription& request_description,
base::OnceCallback<void(const std::vector<PermissionStatus>&)> callback);
void ResetPermission(blink::PermissionType permission,
const GURL& requesting_origin,
const GURL& embedding_origin) override;
void RequestPermissionsFromCurrentDocument(
content::RenderFrameHost* render_frame_host,
const content::PermissionRequestDescription& request_description,
base::OnceCallback<void(const std::vector<PermissionStatus>&)> callback)
override;
PermissionStatus GetPermissionStatus(blink::PermissionType permission,
const GURL& requesting_origin,
const GURL& embedding_origin) override;
content::PermissionResult GetPermissionResultForOriginWithoutContext(
blink::PermissionType permission,
const url::Origin& requesting_origin,
const url::Origin& embedding_origin) override;
PermissionStatus GetPermissionStatusForCurrentDocument(
blink::PermissionType permission,
content::RenderFrameHost* render_frame_host) override;
content::PermissionResult GetPermissionResultForCurrentDocument(
blink::PermissionType permission,
content::RenderFrameHost* render_frame_host) override;
PermissionStatus GetPermissionStatusForWorker(
blink::PermissionType permission,
content::RenderProcessHost* render_process_host,
const GURL& worker_origin) override;
PermissionStatus GetPermissionStatusForEmbeddedRequester(
blink::PermissionType permission,
content::RenderFrameHost* render_frame_host,
const url::Origin& requesting_origin) override;
bool IsPermissionOverridable(
blink::PermissionType permission,
const absl::optional<url::Origin>& origin) override;
SubscriptionId SubscribePermissionStatusChange(
blink::PermissionType permission,
content::RenderProcessHost* render_process_host,
content::RenderFrameHost* render_frame_host,
const GURL& requesting_origin,
base::RepeatingCallback<void(PermissionStatus)> callback) override;
void UnsubscribePermissionStatusChange(
SubscriptionId subscription_id) override;
absl::optional<gfx::Rect> GetExclusionAreaBoundsInScreen(
content::WebContents* web_contents) const override;
// Called when a permission was decided for a given PendingRequest. The
// PendingRequest is identified by its |request_local_id| and the permission
// is identified by its |permission_id|. If the PendingRequest contains more
// than one permission, it will wait for the remaining permissions to be
// resolved. When all the permissions have been resolved, the PendingRequest's
// callback is run.
void OnPermissionsRequestResponseStatus(
PendingRequestLocalId request_local_id,
int permission_id,
ContentSetting status);
// permissions::Observer:
void OnPermissionChanged(const ContentSettingsPattern& primary_pattern,
const ContentSettingsPattern& secondary_pattern,
ContentSettingsTypeSet content_type_set) override;
// Only one of |render_process_host| and |render_frame_host| should be set,
// or neither. RenderProcessHost will be inferred from |render_frame_host|.
content::PermissionResult GetPermissionStatusInternal(
ContentSettingsType permission,
content::RenderProcessHost* render_process_host,
content::RenderFrameHost* render_frame_host,
const GURL& requesting_origin,
const GURL& embedding_origin);
raw_ptr<content::BrowserContext> browser_context_;
PendingRequestsMap pending_requests_;
PendingRequestLocalId::Generator request_local_id_generator_;
SubscriptionsMap subscriptions_;
SubscriptionId::Generator subscription_id_generator_;
// Tracks the number of Subscriptions in |subscriptions_| which have a
// certain ContentSettingsType. An entry for a given ContentSettingsType key
// is added on first use and never removed. This is done to utilize the
// flat_map's efficiency in accessing/editing items and minimize the use of
// the unefficient addition/removal of items.
SubscriptionTypeCounts subscription_type_counts_;
PermissionContextMap permission_contexts_;
bool is_shutting_down_ = false;
};
} // namespace permissions
#endif // COMPONENTS_PERMISSIONS_PERMISSION_MANAGER_H_
|
