1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
|
// Copyright 2014 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifdef UNSAFE_BUFFERS_BUILD
// TODO(crbug.com/40285824): Remove this and convert code to safer constructs.
#pragma allow_unsafe_buffers
#endif
#include "chrome/browser/ash/image_source/image_source.h"
#include <stddef.h>
#include <vector>
#include "base/files/file_util.h"
#include "base/functional/bind.h"
#include "base/location.h"
#include "base/memory/ref_counted_memory.h"
#include "base/task/sequenced_task_runner.h"
#include "base/task/single_thread_task_runner.h"
#include "base/task/thread_pool.h"
#include "base/task/thread_pool/thread_pool_instance.h"
#include "chrome/browser/ash/login/users/avatar/user_image_loader.h"
#include "chrome/common/url_constants.h"
#include "components/user_manager/user_image/user_image.h"
#include "net/base/mime_util.h"
namespace ash {
namespace {
const char* const kAllowlistedDirectories[] = {"regulatory_labels"};
// Callback for user_manager::UserImageLoader.
void ImageLoaded(content::URLDataSource::GotDataCallback got_data_callback,
std::unique_ptr<user_manager::UserImage> user_image) {
if (user_image->has_image_bytes())
std::move(got_data_callback).Run(user_image->image_bytes());
else
std::move(got_data_callback).Run(nullptr);
}
} // namespace
ImageSource::ImageSource() {
task_runner_ = base::ThreadPool::CreateSequencedTaskRunner(
{base::MayBlock(), base::TaskPriority::USER_VISIBLE,
base::TaskShutdownBehavior::SKIP_ON_SHUTDOWN});
}
ImageSource::~ImageSource() = default;
std::string ImageSource::GetSource() {
return chrome::kChromeOSAssetHost;
}
void ImageSource::StartDataRequest(
const GURL& url,
const content::WebContents::Getter& wc_getter,
content::URLDataSource::GotDataCallback got_data_callback) {
const std::string path = content::URLDataSource::URLToRequestPath(url);
if (!IsAllowlisted(path)) {
std::move(got_data_callback).Run(nullptr);
return;
}
const base::FilePath asset_dir(chrome::kChromeOSAssetPath);
const base::FilePath image_path = asset_dir.AppendASCII(path);
base::ThreadPool::PostTaskAndReplyWithResult(
FROM_HERE, {base::MayBlock(), base::TaskPriority::USER_VISIBLE},
base::BindOnce(&base::PathExists, image_path),
base::BindOnce(&ImageSource::StartDataRequestAfterPathExists,
weak_factory_.GetWeakPtr(), image_path,
std::move(got_data_callback)));
}
void ImageSource::StartDataRequestAfterPathExists(
const base::FilePath& image_path,
content::URLDataSource::GotDataCallback got_data_callback,
bool path_exists) {
if (path_exists) {
user_image_loader::StartWithFilePath(
task_runner_, image_path, ImageDecoder::DEFAULT_CODEC,
0, // Do not crop.
base::BindOnce(&ImageLoaded, std::move(got_data_callback)));
} else {
std::move(got_data_callback).Run(nullptr);
}
}
std::string ImageSource::GetMimeType(const GURL& url) {
std::string mime_type;
net::GetWellKnownMimeTypeFromFile(base::FilePath(url.path_piece()),
&mime_type);
return mime_type;
}
bool ImageSource::IsAllowlisted(const std::string& path) const {
base::FilePath file_path(path);
if (file_path.ReferencesParent())
return false;
// Check if the path starts with a allowlisted directory.
std::vector<std::string> components = file_path.GetComponents();
if (components.empty())
return false;
for (size_t i = 0; i < std::size(kAllowlistedDirectories); i++) {
if (components[0] == kAllowlistedDirectories[i])
return true;
}
return false;
}
} // namespace ash
|
