1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
|
// Copyright 2023 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "content/browser/permissions/embedded_permission_control_checker.h"
#include <string>
#include "base/strings/string_number_conversions.h"
#include "content/browser/log_console_message.h"
#include "third_party/blink/public/common/features_generated.h"
using blink::mojom::EmbeddedPermissionControlClient;
using blink::mojom::PermissionName;
namespace content {
namespace {
// Limits the number of page embedded permission control (PEPC) of a given
// type, so as to limit the potential for abuse/misuse, for example: embedded
// iframes can be intentionally disruptive by appending too many embedded
// permission elements.
constexpr static int kMaxPEPCPerPage = 3;
} // namespace
EmbeddedPermissionControlChecker::EmbeddedPermissionControlChecker(Page& page)
: PageUserData<EmbeddedPermissionControlChecker>(page) {}
EmbeddedPermissionControlChecker::~EmbeddedPermissionControlChecker() = default;
void EmbeddedPermissionControlChecker::CheckPageEmbeddedPermission(
std::set<PermissionName> permissions,
mojo::PendingRemote<EmbeddedPermissionControlClient> pending_client,
RegisterPageEmbeddedPermissionCallback callback) {
auto client =
std::make_unique<Client>(this, std::move(permissions),
std::move(pending_client), std::move(callback));
auto& queue = client_map_[client->permissions()];
if (queue.size() < kMaxPEPCPerPage ||
base::FeatureList::IsEnabled(
blink::features::kBypassPepcSecurityForTesting)) {
client->OnEmbeddedPermissionControlRegistered(/*allow=*/true);
}
queue.push_back(std::move(client));
if (queue.size() == kMaxPEPCPerPage) {
page().GetMainDocument().AddMessageToConsole(
blink::mojom::ConsoleMessageLevel::kWarning,
"Maximum limit of " + base::NumberToString(kMaxPEPCPerPage) +
" permission elements has been reached. More permission"
" elements can be added but they will not be clickable");
}
}
PAGE_USER_DATA_KEY_IMPL(EmbeddedPermissionControlChecker);
void EmbeddedPermissionControlChecker::OnClientDisconnect(
Client* disconnected_client) {
auto client_map_it = client_map_.find(disconnected_client->permissions());
CHECK(client_map_it != client_map_.end() && !client_map_it->second.empty());
auto& queue = client_map_it->second;
for (auto& client : queue) {
if (client.get() == disconnected_client) {
base::Erase(queue, client);
break;
}
}
for (auto it = queue.begin();
it != queue.end() && std::distance(queue.begin(), it) < kMaxPEPCPerPage;
++it) {
(*it)->OnEmbeddedPermissionControlRegistered(/*allow=*/true);
}
}
EmbeddedPermissionControlChecker::Client::Client(
EmbeddedPermissionControlChecker* checker,
std::set<PermissionName> permissions,
mojo::PendingRemote<EmbeddedPermissionControlClient> client,
RegisterPageEmbeddedPermissionCallback callback)
: checker_(checker),
permissions_(std::move(permissions)),
client_(std::move(client)),
callback_(std::move(callback)) {
client_.set_disconnect_handler(
base::BindOnce(&Client::OnMojoDisconnect, base::Unretained(this)));
}
EmbeddedPermissionControlChecker::Client::~Client() = default;
void EmbeddedPermissionControlChecker::Client::OnMojoDisconnect() {
checker_->OnClientDisconnect(this);
// The previous call has destroyed the object, do not add code after this.
}
void EmbeddedPermissionControlChecker::Client::
OnEmbeddedPermissionControlRegistered(bool allow) {
if (callback_) {
std::move(callback_).Run(allow, client_);
}
}
} // namespace content
|
