1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
|
// Copyright 2019 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "content/browser/permissions/permission_overrides.h"
#include <optional>
#include "base/containers/contains.h"
#include "base/containers/map_util.h"
#include "base/types/optional_ref.h"
#include "base/types/optional_util.h"
#include "third_party/blink/public/common/permissions/permission_utils.h"
namespace content {
using PermissionStatus = blink::mojom::PermissionStatus;
PermissionOverrides::PermissionKey::PermissionKey(
base::optional_ref<const url::Origin> requesting_origin,
base::optional_ref<const url::Origin> embedding_origin,
blink::PermissionType type)
: scope_(MakeScopeData(requesting_origin, embedding_origin, type)),
type_(type) {}
PermissionOverrides::PermissionKey::PermissionKey(blink::PermissionType type)
: PermissionKey(std::nullopt, std::nullopt, type) {}
PermissionOverrides::PermissionKey::PermissionScope
PermissionOverrides::PermissionKey::MakeScopeData(
base::optional_ref<const url::Origin> requesting_origin,
base::optional_ref<const url::Origin> embedding_origin,
blink::PermissionType type) {
CHECK_EQ(requesting_origin.has_value(), embedding_origin.has_value());
if (!requesting_origin.has_value()) {
return PermissionOverrides::PermissionKey::GlobalKey();
}
// STORAGE_ACCESS_GRANT has a permission key of type (site, site) tuple as
// defined by the spec:
// https://privacycg.github.io/storage-access/#permissions-integration
// TOP_LEVEL_STORAGE_ACCESS has a permission key of type (origin, site) tuple
// as defined by the spec:
// https://privacycg.github.io/requestStorageAccessFor/#permissions-integration
switch (type) {
case blink::PermissionType::STORAGE_ACCESS_GRANT:
return std::make_pair(net::SchemefulSite(*requesting_origin),
net::SchemefulSite(*embedding_origin));
case blink::PermissionType::TOP_LEVEL_STORAGE_ACCESS:
return std::make_pair(*requesting_origin,
net::SchemefulSite(*embedding_origin));
default:
return *requesting_origin;
}
}
PermissionOverrides::PermissionKey::PermissionKey() = default;
PermissionOverrides::PermissionKey::~PermissionKey() = default;
PermissionOverrides::PermissionKey::PermissionKey(const PermissionKey&) =
default;
PermissionOverrides::PermissionKey&
PermissionOverrides::PermissionKey::operator=(const PermissionKey& other) =
default;
PermissionOverrides::PermissionKey::PermissionKey(PermissionKey&&) = default;
PermissionOverrides::PermissionKey&
PermissionOverrides::PermissionKey::operator=(PermissionKey&& other) = default;
PermissionOverrides::PermissionOverrides() = default;
PermissionOverrides::~PermissionOverrides() = default;
PermissionOverrides::PermissionOverrides(PermissionOverrides&& other) = default;
PermissionOverrides& PermissionOverrides::operator=(
PermissionOverrides&& other) = default;
void PermissionOverrides::Set(
base::optional_ref<const url::Origin> requesting_origin,
base::optional_ref<const url::Origin> embedding_origin,
blink::PermissionType permission,
const blink::mojom::PermissionStatus& status) {
overrides_[PermissionKey(requesting_origin, embedding_origin, permission)] =
status;
// Special override status - MIDI_SYSEX is stronger than MIDI, meaning that
// granting MIDI_SYSEX implies granting MIDI, while denying MIDI implies
// denying MIDI_SYSEX.
if (permission == blink::PermissionType::MIDI &&
status != PermissionStatus::GRANTED) {
overrides_[PermissionKey(requesting_origin, embedding_origin,
blink::PermissionType::MIDI_SYSEX)] = status;
} else if (permission == blink::PermissionType::MIDI_SYSEX &&
status == PermissionStatus::GRANTED) {
overrides_[PermissionKey(requesting_origin, embedding_origin,
blink::PermissionType::MIDI)] = status;
}
}
std::optional<PermissionStatus> PermissionOverrides::Get(
const url::Origin& requesting_origin,
const url::Origin& embedding_origin,
blink::PermissionType permission) const {
const auto* status = base::FindOrNull(
overrides_,
PermissionKey(requesting_origin, embedding_origin, permission));
if (!status) {
status = base::FindOrNull(overrides_, PermissionKey(permission));
}
return base::OptionalFromPtr(status);
}
void PermissionOverrides::GrantPermissions(
base::optional_ref<const url::Origin> requesting_origin,
base::optional_ref<const url::Origin> embedding_origin,
const std::vector<blink::PermissionType>& permissions) {
for (auto type : blink::GetAllPermissionTypes()) {
Set(requesting_origin, embedding_origin, type,
base::Contains(permissions, type) ? PermissionStatus::GRANTED
: PermissionStatus::DENIED);
}
}
} // namespace content
|
