chrome/common/mac/cfbundle_blocker.h

   1 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #ifndef CHROME_COMMON_MAC_CFBUNDLE_BLOCKER_H_
   6 #define CHROME_COMMON_MAC_CFBUNDLE_BLOCKER_H_
   7
   8 #if defined(__OBJC__)
   9 @class NSString;
  10 #else
  11 class NSString;
  12 #endif
  13
  14 namespace chrome {
  15 namespace common {
  16 namespace mac {
  17
  18 // Arranges to block loading of some third-party plug-in code that might try
  19 // to inject itself into the process. Modules loaded by CFBundle are blocked
  20 // if located within specific directories. Because NSBundle uses CFBundle
  21 // behind the scenes, this also blocks modules loaded by NSBundle when located
  22 // in those same specific directories.
  23 //
  24 // Blocked modules include input managers, contextual menu items, and
  25 // scripting additions installed in per-user (~/Library), per-machine
  26 // (/Library), or network (/Network/Library) locations. Modules installed in
  27 // the operating system location (/System/Library) are never blocked.
  28 //
  29 // This mechanism does not prevent CFBundle (or NSBundle) objects from being
  30 // created, but it does block them from loading modules into the process.
  31 void EnableCFBundleBlocker();
  32
  33 // Returns true if |bundle_id| and |version| identify a bundle that is allowed
  34 // to be loaded even when found in a blocked directory.
  35 //
  36 // Exposed only for testing. Do not call from outside the implementation.
  37 bool IsBundleAllowed(NSString* bundle_id, NSString* version);
  38
  39 }  // namespace mac
  40 }  // namespace common
  41 }  // namespace chrome
  42
  43 #endif  // CHROME_COMMON_MAC_CFBUNDLE_BLOCKER_H_