1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
|
// Copyright 2015 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/media/extension_media_access_handler.h"
#include <utility>
#include "chrome/browser/media/webrtc/media_stream_device_permissions.h"
#include "chrome/browser/profiles/profile.h"
#include "chrome/common/extensions/extension_constants.h"
#include "chrome/common/pref_names.h"
#include "content/public/browser/web_contents.h"
#include "extensions/common/extension.h"
#include "extensions/common/permissions/permissions_data.h"
using extensions::mojom::APIPermissionID;
namespace {
// This is a short-term solution to grant camera and/or microphone access to
// extensions:
// 1. Virtual keyboard extension.
// 2. Flutter gesture recognition extension.
// 3. TODO(smus): Airbender experiment 1.
// 4. TODO(smus): Airbender experiment 2.
// 5. Hotwording component extension.
// 6. XKB input method component extension.
// 7. M17n/T13n/CJK input method component extension.
// 8. Accessibility Common extension (used for Dictation)
// Once http://crbug.com/292856 is fixed, remove this allowlist.
bool IsMediaRequestAllowedForExtension(const extensions::Extension* extension) {
return extension->id() == extension_misc::kKeyboardExtensionId ||
extension->id() == "jokbpnebhdcladagohdnfgjcpejggllo" ||
extension->id() == "clffjmdilanldobdnedchkdbofoimcgb" ||
extension->id() == "nnckehldicaciogcbchegobnafnjkcne" ||
extension->id() == "nbpagnldghgfoolbancepceaanlmhfmd" ||
extension->id() == "jkghodnilhceideoidjikpgommlajknk" ||
extension->id() == "gjaehgfemfahhmlgpdfknkhdnemmolop" ||
extension->id() == "egfdjlfmgnehecnclamagfafdccgfndp";
}
} // namespace
ExtensionMediaAccessHandler::ExtensionMediaAccessHandler() = default;
ExtensionMediaAccessHandler::~ExtensionMediaAccessHandler() = default;
bool ExtensionMediaAccessHandler::SupportsStreamType(
content::RenderFrameHost* render_frame_host,
const blink::mojom::MediaStreamType type,
const extensions::Extension* extension) {
return extension &&
(extension->is_platform_app() ||
IsMediaRequestAllowedForExtension(extension)) &&
(type == blink::mojom::MediaStreamType::DEVICE_AUDIO_CAPTURE ||
type == blink::mojom::MediaStreamType::DEVICE_VIDEO_CAPTURE);
}
bool ExtensionMediaAccessHandler::CheckMediaAccessPermission(
content::RenderFrameHost* render_frame_host,
const url::Origin& security_origin,
blink::mojom::MediaStreamType type,
const extensions::Extension* extension) {
return extension->permissions_data()->HasAPIPermission(
type == blink::mojom::MediaStreamType::DEVICE_AUDIO_CAPTURE
? APIPermissionID::kAudioCapture
: APIPermissionID::kVideoCapture);
}
void ExtensionMediaAccessHandler::HandleRequest(
content::WebContents* web_contents,
const content::MediaStreamRequest& request,
content::MediaResponseCallback callback,
const extensions::Extension* extension) {
Profile* profile =
Profile::FromBrowserContext(web_contents->GetBrowserContext());
bool audio_allowed =
request.audio_type ==
blink::mojom::MediaStreamType::DEVICE_AUDIO_CAPTURE &&
extension->permissions_data()->HasAPIPermission(
APIPermissionID::kAudioCapture) &&
GetDevicePolicy(profile, extension->url(), prefs::kAudioCaptureAllowed,
prefs::kAudioCaptureAllowedUrls) != ALWAYS_DENY;
bool video_allowed =
request.video_type ==
blink::mojom::MediaStreamType::DEVICE_VIDEO_CAPTURE &&
extension->permissions_data()->HasAPIPermission(
APIPermissionID::kVideoCapture) &&
GetDevicePolicy(profile, extension->url(), prefs::kVideoCaptureAllowed,
prefs::kVideoCaptureAllowedUrls) != ALWAYS_DENY;
CheckDevicesAndRunCallback(web_contents, request, std::move(callback),
audio_allowed, video_allowed);
}
|
