1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
|
// Copyright 2023 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CONTENT_BROWSER_RENDERER_HOST_MIXED_CONTENT_CHECKER_H_
#define CONTENT_BROWSER_RENDERER_HOST_MIXED_CONTENT_CHECKER_H_
#include <set>
#include "base/gtest_prod_util.h"
#include "content/common/content_export.h"
#include "content/public/browser/navigation_handle.h"
#include "third_party/blink/public/mojom/fetch/fetch_api_request.mojom.h"
#include "third_party/blink/public/mojom/loader/mixed_content.mojom-forward.h"
#include "third_party/blink/public/mojom/use_counter/metrics/web_feature.mojom.h"
#include "url/gurl.h"
namespace content {
class FrameTreeNode;
class RenderFrameHostImpl;
// Utilities for browser-process-side mixed content security checks.
//
// Changes to this class might need to be reflected on its renderer counterpart,
// i.e. `blink::MixedContentChecker`.
//
// Current mixed content W3C draft that drives this implementation:
// https://w3c.github.io/webappsec-mixed-content/
class CONTENT_EXPORT MixedContentChecker {
public:
MixedContentChecker();
~MixedContentChecker();
// Not copyable.
MixedContentChecker(const MixedContentChecker&) = delete;
MixedContentChecker& operator=(const MixedContentChecker&) = delete;
// Checks if a navigation indicated by `navigation_handle` should be blocked
// or not due to mixed content, and also updates the renderer about Blink
// mixed content related features from this navigation.
//
// Based off of `blink::MixedContentChecker::ShouldBlockFetch()`.
bool ShouldBlockNavigation(NavigationHandle& navigation_handle,
bool for_redirect);
// Checks if a fetch keepalive request that loads `url` should be blocked or
// not due to mixed content, without reporting back to renderer.
//
// `initiator_frame` is the RenderFrameHostImpl of the document that initiates
// loading a fetch(`url`, {keepalive: true}) request. Note that as a
// RenderFrameHostImpl can be used to load a different document (see also
// docs/render_document.md), it is caller's responsibility to ensure the
// passed in `initiator_frame` still represents the original document that
// loads `url` throughout the entire call.
//
// Based off of `blink::MixedContentChecker::ShouldBlockFetch()`.
static bool ShouldBlockFetchKeepAlive(RenderFrameHostImpl* initiator_frame,
const GURL& url,
bool for_redirect);
private:
// Common logic to calculate whether `url` is considered mixed content given
// `mixed_content_frame`, where `node` is the FrameTreeNode of the frame that
// initiates loading `url`.
//
// Based off of `blink::MixedContentChecker::ShouldBlockFetch()`.
//
// Sets `cancel_prerendering` to cancel prerendering page.
//
// Provides `mixed_content_features` to obtain the Blink features from this
// method when finding mixed content.
//
// `should_report_to_renderer`, if provided, will be set to true when this
// method tells the caller should report back to renderer when finding mixed
// content.
//
// Returns true if the given `url` should be blocked.
static bool ShouldBlockInternal(
RenderFrameHostImpl* mixed_content_frame,
FrameTreeNode* node,
const GURL& url,
bool for_redirect,
bool cancel_prerendering,
blink::mojom::MixedContentContextType mixed_content_context_type,
std::set<blink::mojom::WebFeature>* mixed_content_features = nullptr,
bool* should_report_to_renderer = nullptr);
// Returns the parent frame where mixed content exists for the provided data
// or nullptr if there is no mixed content.
//
// This mirrors `blink::MixedContentChecker::InWhichFrameIsContentMixed()`.
RenderFrameHostImpl* InWhichFrameIsContentMixed(FrameTreeNode* node,
const GURL& url);
FRIEND_TEST_ALL_PREFIXES(MixedContentCheckerTest, IsMixedContent);
// This mirrors `blink::MixedContentChecker::IsMixedContent()`.
static bool IsMixedContentForTesting(const GURL& origin_url, const GURL& url);
// Keeps track of mixed content features encountered while running one of the
// navigation throttling steps. These values are reported to the respective
// renderer process after each mixed content check is finished.
std::set<blink::mojom::WebFeature> navigation_mixed_content_features_;
};
} // namespace content
#endif // CONTENT_BROWSER_RENDERER_HOST_MIXED_CONTENT_CHECKER_H_
|
