1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
|
// Copyright 2014 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/browser/extensions/extension_management_internal.h"
#include <utility>
#include "base/logging.h"
#include "base/values.h"
#include "base/version.h"
#include "chrome/browser/extensions/extension_management_constants.h"
#include "extensions/common/url_pattern_set.h"
#include "url/gurl.h"
namespace extensions {
namespace internal {
namespace {
const char kMalformedPreferenceWarning[] =
"Malformed extension management preference.";
// Maximum number of characters for a 'blocked_install_message' value.
const int kBlockedInstallMessageMaxLength = 1000;
} // namespace
IndividualSettings::IndividualSettings() {
Reset();
}
// Initializes from default settings.
IndividualSettings::IndividualSettings(
const IndividualSettings* default_settings) {
installation_mode = default_settings->installation_mode;
update_url = default_settings->installation_mode;
blocked_permissions = default_settings->blocked_permissions.Clone();
// We are not initializing |minimum_version_required| from |default_settings|
// here since it's not applicable to default settings.
}
IndividualSettings::~IndividualSettings() {
}
bool IndividualSettings::Parse(const base::DictionaryValue* dict,
ParsingScope scope) {
std::string installation_mode_str;
if (dict->GetStringWithoutPathExpansion(schema_constants::kInstallationMode,
&installation_mode_str)) {
if (installation_mode_str == schema_constants::kAllowed) {
installation_mode = ExtensionManagement::INSTALLATION_ALLOWED;
} else if (installation_mode_str == schema_constants::kBlocked) {
installation_mode = ExtensionManagement::INSTALLATION_BLOCKED;
} else if (installation_mode_str == schema_constants::kForceInstalled) {
installation_mode = ExtensionManagement::INSTALLATION_FORCED;
} else if (installation_mode_str == schema_constants::kNormalInstalled) {
installation_mode = ExtensionManagement::INSTALLATION_RECOMMENDED;
} else {
// Invalid value for 'installation_mode'.
LOG(WARNING) << kMalformedPreferenceWarning;
return false;
}
// Only proceed to fetch update url if force or recommended install mode
// is set.
if (installation_mode == ExtensionManagement::INSTALLATION_FORCED ||
installation_mode == ExtensionManagement::INSTALLATION_RECOMMENDED) {
if (scope != SCOPE_INDIVIDUAL) {
// Only individual extensions are allowed to be automatically installed.
LOG(WARNING) << kMalformedPreferenceWarning;
return false;
}
std::string update_url_str;
if (dict->GetStringWithoutPathExpansion(schema_constants::kUpdateUrl,
&update_url_str) &&
GURL(update_url_str).is_valid()) {
update_url = update_url_str;
} else {
// No valid update URL for extension.
LOG(WARNING) << kMalformedPreferenceWarning;
return false;
}
}
}
// Parses the blocked permission settings.
const base::ListValue* list_value = nullptr;
base::string16 error;
// Set default blocked permissions, or replace with extension specific blocks.
APIPermissionSet parsed_blocked_permissions;
APIPermissionSet explicitly_allowed_permissions;
if (dict->GetListWithoutPathExpansion(schema_constants::kAllowedPermissions,
&list_value)) {
if (!APIPermissionSet::ParseFromJSON(
list_value, APIPermissionSet::kDisallowInternalPermissions,
&explicitly_allowed_permissions, &error, nullptr)) {
LOG(WARNING) << error;
}
}
if (dict->GetListWithoutPathExpansion(schema_constants::kBlockedPermissions,
&list_value)) {
if (!APIPermissionSet::ParseFromJSON(
list_value, APIPermissionSet::kDisallowInternalPermissions,
&parsed_blocked_permissions, &error, nullptr)) {
LOG(WARNING) << error;
}
}
APIPermissionSet::Difference(parsed_blocked_permissions,
explicitly_allowed_permissions,
&blocked_permissions);
// Parses list of Match Patterns into a URLPatternSet.
auto parse_url_pattern_set = [](const base::DictionaryValue* dict,
const char key[], URLPatternSet* out_value) {
const base::ListValue* host_list_value = nullptr;
// Get the list of URLPatterns.
if (dict->GetListWithoutPathExpansion(key,
&host_list_value)) {
if (host_list_value->GetSize() >
schema_constants::kMaxItemsURLPatternSet) {
LOG(WARNING) << "Exceeded maximum number of URL match patterns ("
<< schema_constants::kMaxItemsURLPatternSet
<< ") for attribute '" << key << "'";
return false;
}
out_value->ClearPatterns();
const int extension_scheme_mask =
URLPattern::GetValidSchemeMaskForExtensions();
for (size_t i = 0; i < host_list_value->GetSize(); ++i) {
std::string unparsed_str;
host_list_value->GetString(i, &unparsed_str);
URLPattern pattern(extension_scheme_mask);
if (unparsed_str != URLPattern::kAllUrlsPattern)
unparsed_str.append("/*");
// TODO(nrpeter): Remove effective TLD wildcard capability from
// URLPattern.
URLPattern::ParseResult parse_result = pattern.Parse(
unparsed_str, URLPattern::DENY_WILDCARD_FOR_EFFECTIVE_TLD);
if (parse_result != URLPattern::ParseResult::kSuccess) {
LOG(WARNING) << kMalformedPreferenceWarning;
LOG(WARNING) << "Invalid URL pattern '" + unparsed_str +
"' for attribute " + key;
return false;
}
out_value->AddPattern(pattern);
}
}
return true;
};
if (!parse_url_pattern_set(dict, schema_constants::kPolicyBlockedHosts,
&policy_blocked_hosts))
return false;
if (!parse_url_pattern_set(dict, schema_constants::kPolicyAllowedHosts,
&policy_allowed_hosts))
return false;
// Parses the minimum version settings.
std::string minimum_version_required_str;
if (scope == SCOPE_INDIVIDUAL &&
dict->GetStringWithoutPathExpansion(
schema_constants::kMinimumVersionRequired,
&minimum_version_required_str)) {
std::unique_ptr<base::Version> version(
new base::Version(minimum_version_required_str));
// We accept a general version string here. Note that count of components in
// version string of extensions is limited to 4.
if (!version->IsValid())
LOG(WARNING) << kMalformedPreferenceWarning;
else
minimum_version_required = std::move(version);
}
if (dict->GetStringWithoutPathExpansion(
schema_constants::kBlockedInstallMessage, &blocked_install_message)) {
if (blocked_install_message.length() > kBlockedInstallMessageMaxLength) {
LOG(WARNING) << "Truncated blocked install message to 1000 characters";
blocked_install_message.erase(kBlockedInstallMessageMaxLength,
std::string::npos);
}
}
return true;
}
void IndividualSettings::Reset() {
installation_mode = ExtensionManagement::INSTALLATION_ALLOWED;
update_url.clear();
blocked_permissions.clear();
policy_blocked_hosts.ClearPatterns();
policy_allowed_hosts.ClearPatterns();
blocked_install_message.clear();
}
GlobalSettings::GlobalSettings() {
Reset();
}
GlobalSettings::~GlobalSettings() {
}
void GlobalSettings::Reset() {
has_restricted_install_sources = false;
install_sources.ClearPatterns();
has_restricted_allowed_types = false;
allowed_types.clear();
}
} // namespace internal
} // namespace extensions
|
