File: partitioned_popins_navigation_throttle.cc

package info (click to toggle)
chromium 139.0.7258.127-2
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 6,122,156 kB
  • sloc: cpp: 35,100,771; ansic: 7,163,530; javascript: 4,103,002; python: 1,436,920; asm: 946,517; xml: 746,709; pascal: 187,653; perl: 88,691; sh: 88,436; objc: 79,953; sql: 51,488; cs: 44,583; fortran: 24,137; makefile: 22,147; tcl: 15,277; php: 13,980; yacc: 8,984; ruby: 7,485; awk: 3,720; lisp: 3,096; lex: 1,327; ada: 727; jsp: 228; sed: 36
file content (113 lines) | stat: -rw-r--r-- 4,433 bytes parent folder | download | duplicates (3)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
// Copyright 2024 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "content/browser/renderer_host/partitioned_popins/partitioned_popins_navigation_throttle.h"

#include "base/feature_list.h"
#include "content/browser/renderer_host/partitioned_popins/partitioned_popins_policy.h"
#include "content/browser/web_contents/web_contents_impl.h"
#include "content/public/browser/navigation_handle.h"
#include "content/public/common/content_features.h"
#include "services/network/public/cpp/resource_request.h"

namespace content {

// static
void PartitionedPopinsNavigationThrottle::MaybeCreateAndAdd(
    NavigationThrottleRegistry& registry) {
  // Only the outermost frame in a partitioned popin needs the throttle.
  // See https://explainers-by-googlers.github.io/partitioned-popins/
  auto& navigation_handle = registry.GetNavigationHandle();
  WebContentsImpl* web_contents =
      static_cast<WebContentsImpl*>(navigation_handle.GetWebContents());
  if (navigation_handle.IsInOutermostMainFrame() && web_contents &&
      web_contents->IsPartitionedPopin()) {
    registry.AddThrottle(
        base::WrapUnique(new PartitionedPopinsNavigationThrottle(registry)));
  }
}

const char* PartitionedPopinsNavigationThrottle::GetNameForLogging() {
  return "PartitionedPopinsNavigationThrottle";
}

NavigationThrottle::ThrottleCheckResult
PartitionedPopinsNavigationThrottle::WillStartRequest() {
  // Partitioned popin top-frames cannot navigate to HTTP pages, if this occurs
  // we need to block the request.
  // See https://explainers-by-googlers.github.io/partitioned-popins/
  if (!navigation_handle()->GetURL().SchemeIs(url::kHttpsScheme)) {
    return BLOCK_REQUEST;
  }
  // Partitioned popins are special modal popups that are partitioned as
  // though they were an iframe embedded in the opener. All main-frame
  // navigations and redirects must set a request header to notify the loaded
  // site they are in a partitioned popin and not a standard popup.
  // See https://explainers-by-googlers.github.io/partitioned-popins/
  navigation_handle()->SetRequestHeader("Sec-Popin-Context", "partitioned");
  return PROCEED;
}

NavigationThrottle::ThrottleCheckResult
PartitionedPopinsNavigationThrottle::WillRedirectRequest() {
  // Partitioned popin top-frames must respond with a policy that permits the
  // top-frame-origin of the popin opener.
  // See https://explainers-by-googlers.github.io/partitioned-popins/
  if (DoesPopinPolicyBlockResponse()) {
    return BLOCK_REQUEST;
  }
  // Partitioned popin top-frames cannot redirect to HTTP pages, if this occurs
  // we need to block the request.
  // See https://explainers-by-googlers.github.io/partitioned-popins/
  if (!navigation_handle()->GetURL().SchemeIs(url::kHttpsScheme)) {
    return BLOCK_REQUEST;
  }
  return PROCEED;
}

NavigationThrottle::ThrottleCheckResult
PartitionedPopinsNavigationThrottle::WillProcessResponse() {
  // Partitioned popin top-frames must respond with a policy that permits the
  // top-frame-origin of the popin opener.
  // See https://explainers-by-googlers.github.io/partitioned-popins/
  if (DoesPopinPolicyBlockResponse()) {
    return BLOCK_RESPONSE;
  }
  return PROCEED;
}

PartitionedPopinsNavigationThrottle::PartitionedPopinsNavigationThrottle(
    NavigationThrottleRegistry& registry)
    : NavigationThrottle(registry) {}

bool PartitionedPopinsNavigationThrottle::DoesPopinPolicyBlockResponse() {
  if (base::FeatureList::IsEnabled(
          features::kPartitionedPopinsHeaderPolicyBypass)) {
    return false;
  }
  const net::HttpResponseHeaders* response_headers =
      navigation_handle()->GetResponseHeaders();
  const WebContentsImpl* web_contents =
      static_cast<WebContentsImpl*>(navigation_handle()->GetWebContents());
  if (!web_contents || !response_headers ||
      !response_headers->HasHeader("Popin-Policy")) {
    return true;
  }
  std::string untrusted_popin_policy =
      response_headers->GetNormalizedHeader("Popin-Policy")
          .value_or(std::string());
  PartitionedPopinsPolicy policy(untrusted_popin_policy);
  if (policy.wildcard) {
    return false;
  }
  for (const url::Origin& policy_origin : policy.origins) {
    if (policy_origin ==
        web_contents->GetPartitionedPopinOpenerProperties().top_frame_origin) {
      return false;
    }
  }
  return true;
}

}  // namespace content