1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
|
// Copyright 2012 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "content/browser/browser_url_handler_impl.h"
#include <stddef.h>
#include <algorithm>
#include "base/strings/string_util.h"
#include "content/browser/renderer_host/debug_urls.h"
#include "content/browser/webui/web_ui_impl.h"
#include "content/public/browser/content_browser_client.h"
#include "content/public/common/content_client.h"
#include "content/public/common/url_constants.h"
#include "content/public/common/url_utils.h"
#include "third_party/blink/public/common/chrome_debug_urls.h"
#include "url/gurl.h"
namespace content {
// Handles rewriting view-source URLs for what we'll actually load.
static bool HandleViewSource(GURL* url, BrowserContext* browser_context) {
if (!url->SchemeIs(kViewSourceScheme)) {
return false;
}
// Load the inner URL instead.
*url = GURL(url->GetContent());
// https://crbug.com/40077794: limit view-source to view the content and
// not any other kind of 'active' url scheme like 'javascript' or 'data'.
std::vector<std::string> all_allowed_sub_schemes({
url::kHttpScheme,
url::kHttpsScheme,
kChromeUIScheme,
url::kFileScheme,
url::kFileSystemScheme,
});
// Merge all the schemes for which view-source is allowed by default, with
// the view-source schemes defined by the ContentBrowserClient.
GetContentClient()->browser()->GetAdditionalViewSourceSchemes(
&all_allowed_sub_schemes);
for (const auto& allowed_sub_scheme : all_allowed_sub_schemes) {
if (url->SchemeIs(allowed_sub_scheme)) {
return true;
}
}
*url = GURL(url::kAboutBlankURL);
return false;
}
// Turns a non view-source URL into the corresponding view-source URL.
static bool ReverseViewSource(GURL* url, BrowserContext* browser_context) {
// No action necessary if the URL is already view-source:
if (url->SchemeIs(kViewSourceScheme))
return false;
// Recreate the url with the view-source scheme.
*url = GURL(kViewSourceScheme + std::string(":") + url->spec());
return true;
}
static bool DebugURLHandler(GURL* url, BrowserContext* browser_context) {
// Circumvent processing URLs that the renderer process will handle.
return blink::IsRendererDebugURL(*url);
}
// static
BrowserURLHandler* BrowserURLHandler::GetInstance() {
return BrowserURLHandlerImpl::GetInstance();
}
// static
BrowserURLHandler::URLHandler BrowserURLHandler::null_handler() {
// Required for VS2010: http://connect.microsoft.com/VisualStudio/feedback/details/520043/error-converting-from-null-to-a-pointer-type-in-std-pair
return nullptr;
}
// static
BrowserURLHandlerImpl* BrowserURLHandlerImpl::GetInstance() {
return base::Singleton<BrowserURLHandlerImpl>::get();
}
BrowserURLHandlerImpl::BrowserURLHandlerImpl() {
AddHandlerPair(&DebugURLHandler, BrowserURLHandlerImpl::null_handler());
// view-source: should take precedence over other rewriters, so it's
// important to add it before calling up to the content client.
AddHandlerPair(&HandleViewSource, &ReverseViewSource);
GetContentClient()->browser()->BrowserURLHandlerCreated(this);
}
BrowserURLHandlerImpl::~BrowserURLHandlerImpl() {
}
void BrowserURLHandlerImpl::AddHandlerPair(URLHandler handler,
URLHandler reverse_handler) {
url_handlers_.push_back(HandlerPair(handler, reverse_handler));
}
void BrowserURLHandlerImpl::RewriteURLIfNecessary(
GURL* url,
BrowserContext* browser_context) {
DCHECK(url);
DCHECK(browser_context);
bool ignored_reverse_on_redirect;
RewriteURLIfNecessary(url, browser_context, &ignored_reverse_on_redirect);
}
std::vector<GURL> BrowserURLHandlerImpl::GetPossibleRewrites(
const GURL& url,
BrowserContext* browser_context) {
std::vector<GURL> rewrites;
for (const auto& it : url_handlers_) {
const URLHandler& handler = it.first;
if (!handler)
continue;
GURL mutable_url(url);
if (handler(&mutable_url, browser_context))
rewrites.push_back(std::move(mutable_url));
}
return rewrites;
}
void BrowserURLHandlerImpl::RewriteURLIfNecessary(
GURL* url,
BrowserContext* browser_context,
bool* reverse_on_redirect) {
DCHECK(url);
DCHECK(browser_context);
DCHECK(reverse_on_redirect);
if (!url->is_valid()) {
*reverse_on_redirect = false;
return;
}
for (const auto& it : url_handlers_) {
const URLHandler& handler = it.first;
bool has_reverse_rewriter = it.second;
if (handler && handler(url, browser_context)) {
*reverse_on_redirect = has_reverse_rewriter;
return;
}
}
}
bool BrowserURLHandlerImpl::ReverseURLRewrite(
GURL* url, const GURL& original, BrowserContext* browser_context) {
for (const auto& it : url_handlers_) {
const URLHandler& handler = it.first;
const URLHandler& reverse_rewriter = it.second;
if (reverse_rewriter) {
GURL test_url(original);
if (!handler) {
if (reverse_rewriter(url, browser_context))
return true;
} else if (handler(&test_url, browser_context)) {
return reverse_rewriter(url, browser_context);
}
}
}
return false;
}
void BrowserURLHandlerImpl::RemoveHandlerForTesting(URLHandler handler) {
const auto it =
std::ranges::find(url_handlers_, handler, &HandlerPair::first);
CHECK(url_handlers_.end() != it);
url_handlers_.erase(it);
}
} // namespace content
|
