content/browser/browser_url_handler_impl.cc

   1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #include "content/browser/browser_url_handler_impl.h"
   6
   7 #include "base/strings/string_util.h"
   8 #include "content/browser/frame_host/debug_urls.h"
   9 #include "content/browser/webui/web_ui_impl.h"
  10 #include "content/public/browser/content_browser_client.h"
  11 #include "content/public/common/url_constants.h"
  12 #include "url/gurl.h"
  13
  14 namespace content {
  15
  16 // Handles rewriting view-source URLs for what we'll actually load.
  17 static bool HandleViewSource(GURL* url, BrowserContext* browser_context) {
  18   if (url->SchemeIs(kViewSourceScheme)) {
  19     // Load the inner URL instead.
  20     *url = GURL(url->GetContent());
  21
  22     // Bug 26129: limit view-source to view the content and not any
  23     // other kind of 'active' url scheme like 'javascript' or 'data'.
  24     static const char* const default_allowed_sub_schemes[] = {
  25         url::kHttpScheme,
  26         url::kHttpsScheme,
  27         url::kFtpScheme,
  28         kChromeDevToolsScheme,
  29         kChromeUIScheme,
  30         url::kFileScheme,
  31         url::kFileSystemScheme
  32     };
  33
  34     // Merge all the schemes for which view-source is allowed by default, with
  35     // the WebUI schemes defined by the ContentBrowserClient.
  36     std::vector<std::string> all_allowed_sub_schemes;
  37     for (size_t i = 0; i < arraysize(default_allowed_sub_schemes); ++i)
  38       all_allowed_sub_schemes.push_back(default_allowed_sub_schemes[i]);
  39     GetContentClient()->browser()->GetAdditionalWebUISchemes(
  40         &all_allowed_sub_schemes);
  41
  42     bool is_sub_scheme_allowed = false;
  43     for (size_t i = 0; i < all_allowed_sub_schemes.size(); ++i) {
  44       if (url->SchemeIs(all_allowed_sub_schemes[i].c_str())) {
  45         is_sub_scheme_allowed = true;
  46         break;
  47       }
  48     }
  49
  50     if (!is_sub_scheme_allowed) {
  51       *url = GURL(url::kAboutBlankURL);
  52       return false;
  53     }
  54
  55     return true;
  56   }
  57   return false;
  58 }
  59
  60 // Turns a non view-source URL into the corresponding view-source URL.
  61 static bool ReverseViewSource(GURL* url, BrowserContext* browser_context) {
  62   // No action necessary if the URL is already view-source:
  63   if (url->SchemeIs(kViewSourceScheme))
  64     return false;
  65   // Recreate the url with the view-source scheme.
  66   *url = GURL(kViewSourceScheme + std::string(":") + url->spec());
  67   return true;
  68 }
  69
  70 static bool DebugURLHandler(GURL* url, BrowserContext* browser_context) {
  71   // Circumvent processing URLs that the renderer process will handle.
  72   return IsRendererDebugURL(*url);
  73 }
  74
  75 // static
  76 BrowserURLHandler* BrowserURLHandler::GetInstance() {
  77   return BrowserURLHandlerImpl::GetInstance();
  78 }
  79
  80 // static
  81 BrowserURLHandler::URLHandler BrowserURLHandler::null_handler() {
  82   // Required for VS2010: http://connect.microsoft.com/VisualStudio/feedback/details/520043/error-converting-from-null-to-a-pointer-type-in-std-pair
  83   return NULL;
  84 }
  85
  86 // static
  87 BrowserURLHandlerImpl* BrowserURLHandlerImpl::GetInstance() {
  88   return Singleton<BrowserURLHandlerImpl>::get();
  89 }
  90
  91 BrowserURLHandlerImpl::BrowserURLHandlerImpl() :
  92     fixup_handler_(null_handler()) {
  93   AddHandlerPair(&DebugURLHandler, BrowserURLHandlerImpl::null_handler());
  94
  95   GetContentClient()->browser()->BrowserURLHandlerCreated(this);
  96
  97   // view-source:
  98   AddHandlerPair(&HandleViewSource, &ReverseViewSource);
  99 }
 100
 101 BrowserURLHandlerImpl::~BrowserURLHandlerImpl() {
 102 }
 103
 104 void BrowserURLHandlerImpl::SetFixupHandler(URLHandler handler) {
 105   DCHECK_EQ(null_handler(), fixup_handler_);
 106   fixup_handler_ = handler;
 107 }
 108
 109 void BrowserURLHandlerImpl::AddHandlerPair(URLHandler handler,
 110                                            URLHandler reverse_handler) {
 111   url_handlers_.push_back(HandlerPair(handler, reverse_handler));
 112 }
 113
 114 void BrowserURLHandlerImpl::RewriteURLIfNecessary(
 115     GURL* url,
 116     BrowserContext* browser_context,
 117     bool* reverse_on_redirect) {
 118   for (size_t i = 0; i < url_handlers_.size(); ++i) {
 119     URLHandler handler = *url_handlers_[i].first;
 120     if (handler && handler(url, browser_context)) {
 121       *reverse_on_redirect = (url_handlers_[i].second != NULL);
 122       return;
 123     }
 124   }
 125 }
 126
 127 void BrowserURLHandlerImpl::FixupURLBeforeRewrite(
 128     GURL* url,
 129     BrowserContext* browser_context) {
 130   if (fixup_handler_)
 131     fixup_handler_(url, browser_context);
 132 }
 133
 134 bool BrowserURLHandlerImpl::ReverseURLRewrite(
 135     GURL* url, const GURL& original, BrowserContext* browser_context) {
 136   for (size_t i = 0; i < url_handlers_.size(); ++i) {
 137     URLHandler reverse_rewriter = *url_handlers_[i].second;
 138     if (reverse_rewriter) {
 139       GURL test_url(original);
 140       URLHandler handler = *url_handlers_[i].first;
 141       if (!handler) {
 142         if (reverse_rewriter(url, browser_context))
 143           return true;
 144       } else if (handler(&test_url, browser_context)) {
 145         return reverse_rewriter(url, browser_context);
 146       }
 147     }
 148   }
 149   return false;
 150 }
 151
 152 }  // namespace content