1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
|
// Copyright 2019 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CONTENT_BROWSER_PERMISSIONS_PERMISSION_OVERRIDES_H_
#define CONTENT_BROWSER_PERMISSIONS_PERMISSION_OVERRIDES_H_
#include <optional>
#include <variant>
#include <vector>
#include "base/containers/flat_map.h"
#include "base/types/optional_ref.h"
#include "content/common/content_export.h"
#include "net/base/schemeful_site.h"
#include "third_party/blink/public/mojom/permissions/permission_status.mojom.h"
#include "url/origin.h"
namespace blink {
enum class PermissionType;
}
namespace content {
// Maintains permission overrides for each origin.
class CONTENT_EXPORT PermissionOverrides {
public:
PermissionOverrides();
~PermissionOverrides();
PermissionOverrides(PermissionOverrides&& other);
PermissionOverrides& operator=(PermissionOverrides&& other);
PermissionOverrides(const PermissionOverrides&) = delete;
PermissionOverrides& operator=(const PermissionOverrides&) = delete;
// Set permission override for |permission| at |requesting_origin| and
// |embedding_origin| to |status|. Null |requesting_origin| and
// |embedding_origin| specifies global overrides.
// |requesting_origin| and |embedding_origin| must either both be null or both
// be non-null.
void Set(base::optional_ref<const url::Origin> requesting_origin,
base::optional_ref<const url::Origin> embedding_origin,
blink::PermissionType permission,
const blink::mojom::PermissionStatus& status);
// Get override for |requesting_origin| and |embedding_origin| set for
// |permission|, if specified.
std::optional<blink::mojom::PermissionStatus> Get(
const url::Origin& requesting_origin,
const url::Origin& embedding_origin,
blink::PermissionType permission) const;
// Sets status for |permissions| to GRANTED in |requesting_origin| and
// |embedding_origin|, and DENIED for all others. Null |requesting_origin| and
// |embedding_origin| grants permissions globally for context.
// |requesting_origin| and |embedding_origin| must either both be null or both
// be non-null.
void GrantPermissions(base::optional_ref<const url::Origin> requesting_origin,
base::optional_ref<const url::Origin> embedding_origin,
const std::vector<blink::PermissionType>& permissions);
private:
// Represents a canonical key for permission overrides.
class PermissionKey {
public:
PermissionKey(base::optional_ref<const url::Origin> requesting_origin,
base::optional_ref<const url::Origin> embedding_origin,
blink::PermissionType type);
// Constructor for a global key specific to a permission type. Delegates to
// the primary constructor, signaling a global scope.
explicit PermissionKey(blink::PermissionType);
PermissionKey();
~PermissionKey();
PermissionKey(const PermissionKey&);
PermissionKey& operator=(const PermissionKey&);
PermissionKey(PermissionKey&&);
PermissionKey& operator=(PermissionKey&&);
friend auto operator<=>(const PermissionKey&,
const PermissionKey&) = default;
private:
// Represents the global state within a PermissionKey.
// All instances of GlobalKey are considered identical for comparison
// purposes.
struct GlobalKey {
friend auto operator<=>(const GlobalKey&, const GlobalKey&) = default;
};
using PermissionScope =
std::variant<GlobalKey,
url::Origin,
std::pair<net::SchemefulSite, net::SchemefulSite>,
std::pair<url::Origin, net::SchemefulSite>>;
static PermissionScope MakeScopeData(
base::optional_ref<const url::Origin> requesting_origin,
base::optional_ref<const url::Origin> embedding_origin,
blink::PermissionType type);
PermissionScope scope_;
blink::PermissionType type_;
};
base::flat_map<PermissionKey, blink::mojom::PermissionStatus> overrides_;
};
} // namespace content
#endif // CONTENT_BROWSER_PERMISSIONS_PERMISSION_OVERRIDES_H_
|
