1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
|
// Copyright 2020 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/ui/views/bubble/webui_bubble_manager.h"
#include "base/notimplemented.h"
#include "base/timer/timer.h"
#include "chrome/browser/ui/browser.h"
#include "chrome/browser/ui/browser_list.h"
#include "chrome/browser/ui/webui/top_chrome/webui_contents_warmup_level_recorder.h"
#include "chrome/browser/ui/webui/top_chrome/webui_url_utils.h"
#include "content/public/browser/render_frame_host.h"
#include "content/public/browser/render_process_host.h"
#include "ui/base/interaction/element_identifier.h"
#include "ui/gfx/geometry/rect.h"
#include "ui/views/controls/webview/webview.h"
#include "ui/views/view_class_properties.h"
#include "ui/views/widget/widget.h"
namespace {
constexpr base::TimeDelta kWebViewRetentionTime = base::Seconds(30);
} // namespace
WebUIBubbleManager::WebUIBubbleManager()
: cache_timer_(std::make_unique<base::RetainingOneShotTimer>(
FROM_HERE,
kWebViewRetentionTime,
base::BindRepeating(&WebUIBubbleManager::ResetContentsWrapper,
base::Unretained(this)))) {}
WebUIBubbleManager::~WebUIBubbleManager() {
// The bubble manager may be destroyed before the bubble in certain
// situations. Ensure we forcefully close the managed bubble during
// destruction to mitigate the risk of UAFs (see crbug.com/1345546).
if (bubble_view_) {
DCHECK(bubble_view_->GetWidget());
bubble_view_->GetWidget()->CloseNow();
}
}
bool WebUIBubbleManager::ShowBubble(const std::optional<gfx::Rect>& anchor,
views::BubbleBorder::Arrow arrow,
ui::ElementIdentifier identifier) {
if (bubble_view_) {
return false;
}
cache_timer_->Stop();
WebUIContentsWarmupLevelRecorder warmup_level_recorder;
warmup_level_recorder.BeforeContentsCreation();
bubble_view_ = CreateWebUIBubbleDialog(anchor, arrow);
warmup_level_recorder.AfterContentsCreation(
bubble_view_->web_view()->GetWebContents());
warmup_level_recorder.SetUsedCachedContents(
bubble_using_cached_web_contents_);
contents_warmup_level_ = warmup_level_recorder.GetWarmupLevel();
bubble_widget_observation_.Observe(bubble_view_->GetWidget());
observers_.Notify(&WebUIBubbleManagerObserver::BeforeBubbleWidgetShowed,
bubble_view_->GetWidget());
// Some bubbles can be triggered when there is no active browser (e.g. emoji
// picker in Chrome OS launcher). In that case, the close bubble helper isn't
// needed.
if ((!disable_close_bubble_helper_) &&
BrowserList::GetInstance()->GetLastActive()) {
close_bubble_helper_ = std::make_unique<CloseBubbleOnTabActivationHelper>(
bubble_view_.get(),
BrowserList::GetInstance()->GetLastActive()->tab_strip_model());
}
if (identifier) {
bubble_view_->SetProperty(views::kElementIdentifierKey, identifier);
}
if (GetContentsWrapper()->is_ready_to_show()) {
GetContentsWrapper()->ShowUI();
}
return true;
}
void WebUIBubbleManager::CloseBubble() {
if (!bubble_view_) {
return;
}
DCHECK(bubble_view_->GetWidget());
bubble_view_->GetWidget()->CloseWithReason(
views::Widget::ClosedReason::kUnspecified);
}
views::Widget* WebUIBubbleManager::GetBubbleWidget() const {
return bubble_view_ ? bubble_view_->GetWidget() : nullptr;
}
void WebUIBubbleManager::AddObserver(WebUIBubbleManagerObserver* observer) {
observers_.AddObserver(observer);
}
void WebUIBubbleManager::RemoveObserver(WebUIBubbleManagerObserver* observer) {
observers_.RemoveObserver(observer);
}
void WebUIBubbleManager::OnWidgetDestroying(views::Widget* widget) {
DCHECK(bubble_view_);
DCHECK_EQ(bubble_view_->GetWidget(), widget);
DCHECK(bubble_widget_observation_.IsObserving());
bubble_widget_observation_.Reset();
close_bubble_helper_.reset();
cache_timer_->Reset();
bubble_using_cached_web_contents_ = false;
}
void WebUIBubbleManager::ResetContentsWrapperForTesting() {
ResetContentsWrapper();
}
void WebUIBubbleManager::DisableCloseBubbleHelperForTesting() {
disable_close_bubble_helper_ = true;
}
WebUIContentsWrapper* WebUIBubbleManager::GetContentsWrapperForTesting() {
return GetContentsWrapper();
}
void WebUIBubbleManager::ResetContentsWrapper() {
if (!cached_contents_wrapper_) {
return;
}
if (bubble_view_) {
CloseBubble();
}
DCHECK(!cached_contents_wrapper_->GetHost());
cached_contents_wrapper_.reset();
}
|
