Roll src/third_party/skia 21b998b:bda7da8
[chromium-blink-merge.git] / content / browser / frame_host / navigation_controller_impl.cc
blob3543dc6299b322294b4c45eef9553e6de1779307
1 // Copyright 2013 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
5 /*
6 * Copyright (C) 2006, 2007, 2008, 2009 Apple Inc. All rights reserved.
7 * Copyright (C) 2008 Nokia Corporation and/or its subsidiary(-ies)
8 * Copyright (C) 2008, 2009 Torch Mobile Inc. All rights reserved.
9 * (http://www.torchmobile.com/)
11 * Redistribution and use in source and binary forms, with or without
12 * modification, are permitted provided that the following conditions
13 * are met:
15 * 1. Redistributions of source code must retain the above copyright
16 * notice, this list of conditions and the following disclaimer.
17 * 2. Redistributions in binary form must reproduce the above copyright
18 * notice, this list of conditions and the following disclaimer in the
19 * documentation and/or other materials provided with the distribution.
20 * 3. Neither the name of Apple Computer, Inc. ("Apple") nor the names of
21 * its contributors may be used to endorse or promote products derived
22 * from this software without specific prior written permission.
24 * THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND ANY
25 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
26 * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
27 * DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY
28 * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
29 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
30 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
31 * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
32 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
33 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
36 #include "content/browser/frame_host/navigation_controller_impl.h"
38 #include "base/bind.h"
39 #include "base/command_line.h"
40 #include "base/logging.h"
41 #include "base/metrics/histogram.h"
42 #include "base/strings/string_number_conversions.h" // Temporary
43 #include "base/strings/string_util.h"
44 #include "base/strings/utf_string_conversions.h"
45 #include "base/time/time.h"
46 #include "base/trace_event/trace_event.h"
47 #include "build/build_config.h"
48 #include "cc/base/switches.h"
49 #include "components/mime_util/mime_util.h"
50 #include "content/browser/bad_message.h"
51 #include "content/browser/browser_url_handler_impl.h"
52 #include "content/browser/dom_storage/dom_storage_context_wrapper.h"
53 #include "content/browser/dom_storage/session_storage_namespace_impl.h"
54 #include "content/browser/frame_host/debug_urls.h"
55 #include "content/browser/frame_host/interstitial_page_impl.h"
56 #include "content/browser/frame_host/navigation_entry_impl.h"
57 #include "content/browser/frame_host/navigation_entry_screenshot_manager.h"
58 #include "content/browser/frame_host/navigator.h"
59 #include "content/browser/renderer_host/render_view_host_impl.h" // Temporary
60 #include "content/browser/site_instance_impl.h"
61 #include "content/common/frame_messages.h"
62 #include "content/common/site_isolation_policy.h"
63 #include "content/common/ssl_status_serialization.h"
64 #include "content/common/view_messages.h"
65 #include "content/public/browser/browser_context.h"
66 #include "content/public/browser/content_browser_client.h"
67 #include "content/public/browser/invalidate_type.h"
68 #include "content/public/browser/navigation_details.h"
69 #include "content/public/browser/notification_service.h"
70 #include "content/public/browser/notification_types.h"
71 #include "content/public/browser/render_widget_host.h"
72 #include "content/public/browser/render_widget_host_view.h"
73 #include "content/public/browser/storage_partition.h"
74 #include "content/public/browser/user_metrics.h"
75 #include "content/public/common/content_client.h"
76 #include "content/public/common/content_constants.h"
77 #include "media/base/mime_util.h"
78 #include "net/base/escape.h"
79 #include "net/base/net_util.h"
80 #include "skia/ext/platform_canvas.h"
81 #include "url/url_constants.h"
83 namespace content {
84 namespace {
86 // Invoked when entries have been pruned, or removed. For example, if the
87 // current entries are [google, digg, yahoo], with the current entry google,
88 // and the user types in cnet, then digg and yahoo are pruned.
89 void NotifyPrunedEntries(NavigationControllerImpl* nav_controller,
90 bool from_front,
91 int count) {
92 PrunedDetails details;
93 details.from_front = from_front;
94 details.count = count;
95 NotificationService::current()->Notify(
96 NOTIFICATION_NAV_LIST_PRUNED,
97 Source<NavigationController>(nav_controller),
98 Details<PrunedDetails>(&details));
101 // Ensure the given NavigationEntry has a valid state, so that WebKit does not
102 // get confused if we navigate back to it.
104 // An empty state is treated as a new navigation by WebKit, which would mean
105 // losing the navigation entries and generating a new navigation entry after
106 // this one. We don't want that. To avoid this we create a valid state which
107 // WebKit will not treat as a new navigation.
108 void SetPageStateIfEmpty(NavigationEntryImpl* entry) {
109 if (!entry->GetPageState().IsValid())
110 entry->SetPageState(PageState::CreateFromURL(entry->GetURL()));
113 NavigationEntryImpl::RestoreType ControllerRestoreTypeToEntryType(
114 NavigationController::RestoreType type) {
115 switch (type) {
116 case NavigationController::RESTORE_CURRENT_SESSION:
117 return NavigationEntryImpl::RESTORE_CURRENT_SESSION;
118 case NavigationController::RESTORE_LAST_SESSION_EXITED_CLEANLY:
119 return NavigationEntryImpl::RESTORE_LAST_SESSION_EXITED_CLEANLY;
120 case NavigationController::RESTORE_LAST_SESSION_CRASHED:
121 return NavigationEntryImpl::RESTORE_LAST_SESSION_CRASHED;
123 NOTREACHED();
124 return NavigationEntryImpl::RESTORE_CURRENT_SESSION;
127 // Configure all the NavigationEntries in entries for restore. This resets
128 // the transition type to reload and makes sure the content state isn't empty.
129 void ConfigureEntriesForRestore(
130 ScopedVector<NavigationEntryImpl>* entries,
131 NavigationController::RestoreType type) {
132 for (size_t i = 0; i < entries->size(); ++i) {
133 // Use a transition type of reload so that we don't incorrectly increase
134 // the typed count.
135 (*entries)[i]->SetTransitionType(ui::PAGE_TRANSITION_RELOAD);
136 (*entries)[i]->set_restore_type(ControllerRestoreTypeToEntryType(type));
137 // NOTE(darin): This code is only needed for backwards compat.
138 SetPageStateIfEmpty((*entries)[i]);
142 // Determines whether or not we should be carrying over a user agent override
143 // between two NavigationEntries.
144 bool ShouldKeepOverride(const NavigationEntry* last_entry) {
145 return last_entry && last_entry->GetIsOverridingUserAgent();
148 } // namespace
150 // NavigationControllerImpl ----------------------------------------------------
152 const size_t kMaxEntryCountForTestingNotSet = static_cast<size_t>(-1);
154 // static
155 size_t NavigationControllerImpl::max_entry_count_for_testing_ =
156 kMaxEntryCountForTestingNotSet;
158 // Should Reload check for post data? The default is true, but is set to false
159 // when testing.
160 static bool g_check_for_repost = true;
162 // static
163 scoped_ptr<NavigationEntry> NavigationController::CreateNavigationEntry(
164 const GURL& url,
165 const Referrer& referrer,
166 ui::PageTransition transition,
167 bool is_renderer_initiated,
168 const std::string& extra_headers,
169 BrowserContext* browser_context) {
170 // Fix up the given URL before letting it be rewritten, so that any minor
171 // cleanup (e.g., removing leading dots) will not lead to a virtual URL.
172 GURL dest_url(url);
173 BrowserURLHandlerImpl::GetInstance()->FixupURLBeforeRewrite(&dest_url,
174 browser_context);
176 // Allow the browser URL handler to rewrite the URL. This will, for example,
177 // remove "view-source:" from the beginning of the URL to get the URL that
178 // will actually be loaded. This real URL won't be shown to the user, just
179 // used internally.
180 GURL loaded_url(dest_url);
181 bool reverse_on_redirect = false;
182 BrowserURLHandlerImpl::GetInstance()->RewriteURLIfNecessary(
183 &loaded_url, browser_context, &reverse_on_redirect);
185 NavigationEntryImpl* entry = new NavigationEntryImpl(
186 NULL, // The site instance for tabs is sent on navigation
187 // (WebContents::GetSiteInstance).
189 loaded_url,
190 referrer,
191 base::string16(),
192 transition,
193 is_renderer_initiated);
194 entry->SetVirtualURL(dest_url);
195 entry->set_user_typed_url(dest_url);
196 entry->set_update_virtual_url_with_url(reverse_on_redirect);
197 entry->set_extra_headers(extra_headers);
198 return make_scoped_ptr(entry);
201 // static
202 void NavigationController::DisablePromptOnRepost() {
203 g_check_for_repost = false;
206 base::Time NavigationControllerImpl::TimeSmoother::GetSmoothedTime(
207 base::Time t) {
208 // If |t| is between the water marks, we're in a run of duplicates
209 // or just getting out of it, so increase the high-water mark to get
210 // a time that probably hasn't been used before and return it.
211 if (low_water_mark_ <= t && t <= high_water_mark_) {
212 high_water_mark_ += base::TimeDelta::FromMicroseconds(1);
213 return high_water_mark_;
216 // Otherwise, we're clear of the last duplicate run, so reset the
217 // water marks.
218 low_water_mark_ = high_water_mark_ = t;
219 return t;
222 NavigationControllerImpl::NavigationControllerImpl(
223 NavigationControllerDelegate* delegate,
224 BrowserContext* browser_context)
225 : browser_context_(browser_context),
226 pending_entry_(NULL),
227 failed_pending_entry_id_(0),
228 failed_pending_entry_should_replace_(false),
229 last_committed_entry_index_(-1),
230 pending_entry_index_(-1),
231 transient_entry_index_(-1),
232 delegate_(delegate),
233 max_restored_page_id_(-1),
234 ssl_manager_(this),
235 needs_reload_(false),
236 is_initial_navigation_(true),
237 in_navigate_to_pending_entry_(false),
238 pending_reload_(NO_RELOAD),
239 get_timestamp_callback_(base::Bind(&base::Time::Now)),
240 screenshot_manager_(new NavigationEntryScreenshotManager(this)) {
241 DCHECK(browser_context_);
244 NavigationControllerImpl::~NavigationControllerImpl() {
245 DiscardNonCommittedEntriesInternal();
248 WebContents* NavigationControllerImpl::GetWebContents() const {
249 return delegate_->GetWebContents();
252 BrowserContext* NavigationControllerImpl::GetBrowserContext() const {
253 return browser_context_;
256 void NavigationControllerImpl::SetBrowserContext(
257 BrowserContext* browser_context) {
258 browser_context_ = browser_context;
261 void NavigationControllerImpl::Restore(
262 int selected_navigation,
263 RestoreType type,
264 ScopedVector<NavigationEntry>* entries) {
265 // Verify that this controller is unused and that the input is valid.
266 DCHECK(GetEntryCount() == 0 && !GetPendingEntry());
267 DCHECK(selected_navigation >= 0 &&
268 selected_navigation < static_cast<int>(entries->size()));
270 needs_reload_ = true;
271 for (size_t i = 0; i < entries->size(); ++i) {
272 NavigationEntryImpl* entry =
273 NavigationEntryImpl::FromNavigationEntry((*entries)[i]);
274 entries_.push_back(entry);
276 entries->weak_clear();
278 // And finish the restore.
279 FinishRestore(selected_navigation, type);
282 void NavigationControllerImpl::Reload(bool check_for_repost) {
283 ReloadInternal(check_for_repost, RELOAD);
285 void NavigationControllerImpl::ReloadIgnoringCache(bool check_for_repost) {
286 ReloadInternal(check_for_repost, RELOAD_IGNORING_CACHE);
288 void NavigationControllerImpl::ReloadOriginalRequestURL(bool check_for_repost) {
289 ReloadInternal(check_for_repost, RELOAD_ORIGINAL_REQUEST_URL);
292 void NavigationControllerImpl::ReloadInternal(bool check_for_repost,
293 ReloadType reload_type) {
294 if (transient_entry_index_ != -1) {
295 // If an interstitial is showing, treat a reload as a navigation to the
296 // transient entry's URL.
297 NavigationEntryImpl* transient_entry = GetTransientEntry();
298 if (!transient_entry)
299 return;
300 LoadURL(transient_entry->GetURL(),
301 Referrer(),
302 ui::PAGE_TRANSITION_RELOAD,
303 transient_entry->extra_headers());
304 return;
307 NavigationEntryImpl* entry = NULL;
308 int current_index = -1;
310 // If we are reloading the initial navigation, just use the current
311 // pending entry. Otherwise look up the current entry.
312 if (IsInitialNavigation() && pending_entry_) {
313 entry = pending_entry_;
314 // The pending entry might be in entries_ (e.g., after a Clone), so we
315 // should also update the current_index.
316 current_index = pending_entry_index_;
317 } else {
318 DiscardNonCommittedEntriesInternal();
319 current_index = GetCurrentEntryIndex();
320 if (current_index != -1) {
321 entry = GetEntryAtIndex(current_index);
325 // If we are no where, then we can't reload. TODO(darin): We should add a
326 // CanReload method.
327 if (!entry)
328 return;
330 if (g_check_for_repost && check_for_repost &&
331 entry->GetHasPostData()) {
332 // The user is asking to reload a page with POST data. Prompt to make sure
333 // they really want to do this. If they do, the dialog will call us back
334 // with check_for_repost = false.
335 delegate_->NotifyBeforeFormRepostWarningShow();
337 pending_reload_ = reload_type;
338 delegate_->ActivateAndShowRepostFormWarningDialog();
339 } else {
340 if (!IsInitialNavigation())
341 DiscardNonCommittedEntriesInternal();
343 // If we are reloading an entry that no longer belongs to the current
344 // site instance (for example, refreshing a page for just installed app),
345 // the reload must happen in a new process.
346 // The new entry must have a new page_id and site instance, so it behaves
347 // as new navigation (which happens to clear forward history).
348 // Tabs that are discarded due to low memory conditions may not have a site
349 // instance, and should not be treated as a cross-site reload.
350 SiteInstanceImpl* site_instance = entry->site_instance();
351 // Permit reloading guests without further checks.
352 bool is_for_guests_only = site_instance && site_instance->HasProcess() &&
353 site_instance->GetProcess()->IsForGuestsOnly();
354 if (!is_for_guests_only && site_instance &&
355 site_instance->HasWrongProcessForURL(entry->GetURL())) {
356 // Create a navigation entry that resembles the current one, but do not
357 // copy page id, site instance, content state, or timestamp.
358 NavigationEntryImpl* nav_entry = NavigationEntryImpl::FromNavigationEntry(
359 CreateNavigationEntry(
360 entry->GetURL(), entry->GetReferrer(), entry->GetTransitionType(),
361 false, entry->extra_headers(), browser_context_).release());
363 // Mark the reload type as NO_RELOAD, so navigation will not be considered
364 // a reload in the renderer.
365 reload_type = NavigationController::NO_RELOAD;
367 nav_entry->set_should_replace_entry(true);
368 pending_entry_ = nav_entry;
369 DCHECK_EQ(-1, pending_entry_index_);
370 } else {
371 pending_entry_ = entry;
372 pending_entry_index_ = current_index;
374 // The title of the page being reloaded might have been removed in the
375 // meanwhile, so we need to revert to the default title upon reload and
376 // invalidate the previously cached title (SetTitle will do both).
377 // See Chromium issue 96041.
378 pending_entry_->SetTitle(base::string16());
380 pending_entry_->SetTransitionType(ui::PAGE_TRANSITION_RELOAD);
383 NavigateToPendingEntry(reload_type);
387 void NavigationControllerImpl::CancelPendingReload() {
388 DCHECK(pending_reload_ != NO_RELOAD);
389 pending_reload_ = NO_RELOAD;
392 void NavigationControllerImpl::ContinuePendingReload() {
393 if (pending_reload_ == NO_RELOAD) {
394 NOTREACHED();
395 } else {
396 ReloadInternal(false, pending_reload_);
397 pending_reload_ = NO_RELOAD;
401 bool NavigationControllerImpl::IsInitialNavigation() const {
402 return is_initial_navigation_;
405 NavigationEntryImpl* NavigationControllerImpl::GetEntryWithPageID(
406 SiteInstance* instance, int32 page_id) const {
407 int index = GetEntryIndexWithPageID(instance, page_id);
408 return (index != -1) ? entries_[index] : nullptr;
411 NavigationEntryImpl*
412 NavigationControllerImpl::GetEntryWithUniqueID(int nav_entry_id) const {
413 int index = GetEntryIndexWithUniqueID(nav_entry_id);
414 return (index != -1) ? entries_[index] : nullptr;
417 void NavigationControllerImpl::LoadEntry(
418 scoped_ptr<NavigationEntryImpl> entry) {
419 // When navigating to a new page, we don't know for sure if we will actually
420 // end up leaving the current page. The new page load could for example
421 // result in a download or a 'no content' response (e.g., a mailto: URL).
422 SetPendingEntry(entry.Pass());
423 NavigateToPendingEntry(NO_RELOAD);
426 void NavigationControllerImpl::SetPendingEntry(
427 scoped_ptr<NavigationEntryImpl> entry) {
428 DiscardNonCommittedEntriesInternal();
429 pending_entry_ = entry.release();
430 NotificationService::current()->Notify(
431 NOTIFICATION_NAV_ENTRY_PENDING,
432 Source<NavigationController>(this),
433 Details<NavigationEntry>(pending_entry_));
436 NavigationEntryImpl* NavigationControllerImpl::GetActiveEntry() const {
437 if (transient_entry_index_ != -1)
438 return entries_[transient_entry_index_];
439 if (pending_entry_)
440 return pending_entry_;
441 return GetLastCommittedEntry();
444 NavigationEntryImpl* NavigationControllerImpl::GetVisibleEntry() const {
445 if (transient_entry_index_ != -1)
446 return entries_[transient_entry_index_];
447 // The pending entry is safe to return for new (non-history), browser-
448 // initiated navigations. Most renderer-initiated navigations should not
449 // show the pending entry, to prevent URL spoof attacks.
451 // We make an exception for renderer-initiated navigations in new tabs, as
452 // long as no other page has tried to access the initial empty document in
453 // the new tab. If another page modifies this blank page, a URL spoof is
454 // possible, so we must stop showing the pending entry.
455 bool safe_to_show_pending =
456 pending_entry_ &&
457 // Require a new navigation.
458 pending_entry_index_ == -1 &&
459 // Require either browser-initiated or an unmodified new tab.
460 (!pending_entry_->is_renderer_initiated() || IsUnmodifiedBlankTab());
462 // Also allow showing the pending entry for history navigations in a new tab,
463 // such as Ctrl+Back. In this case, no existing page is visible and no one
464 // can script the new tab before it commits.
465 if (!safe_to_show_pending &&
466 pending_entry_ &&
467 pending_entry_index_ != -1 &&
468 IsInitialNavigation() &&
469 !pending_entry_->is_renderer_initiated())
470 safe_to_show_pending = true;
472 if (safe_to_show_pending)
473 return pending_entry_;
474 return GetLastCommittedEntry();
477 int NavigationControllerImpl::GetCurrentEntryIndex() const {
478 if (transient_entry_index_ != -1)
479 return transient_entry_index_;
480 if (pending_entry_index_ != -1)
481 return pending_entry_index_;
482 return last_committed_entry_index_;
485 NavigationEntryImpl* NavigationControllerImpl::GetLastCommittedEntry() const {
486 if (last_committed_entry_index_ == -1)
487 return NULL;
488 return entries_[last_committed_entry_index_];
491 bool NavigationControllerImpl::CanViewSource() const {
492 const std::string& mime_type = delegate_->GetContentsMimeType();
493 bool is_viewable_mime_type =
494 mime_util::IsSupportedNonImageMimeType(mime_type) &&
495 !media::IsSupportedMediaMimeType(mime_type);
496 NavigationEntry* visible_entry = GetVisibleEntry();
497 return visible_entry && !visible_entry->IsViewSourceMode() &&
498 is_viewable_mime_type && !delegate_->GetInterstitialPage();
501 int NavigationControllerImpl::GetLastCommittedEntryIndex() const {
502 return last_committed_entry_index_;
505 int NavigationControllerImpl::GetEntryCount() const {
506 DCHECK(entries_.size() <= max_entry_count());
507 return static_cast<int>(entries_.size());
510 NavigationEntryImpl* NavigationControllerImpl::GetEntryAtIndex(
511 int index) const {
512 if (index < 0 || index >= GetEntryCount())
513 return nullptr;
515 return entries_[index];
518 NavigationEntryImpl* NavigationControllerImpl::GetEntryAtOffset(
519 int offset) const {
520 return GetEntryAtIndex(GetIndexForOffset(offset));
523 int NavigationControllerImpl::GetIndexForOffset(int offset) const {
524 return GetCurrentEntryIndex() + offset;
527 void NavigationControllerImpl::TakeScreenshot() {
528 screenshot_manager_->TakeScreenshot();
531 void NavigationControllerImpl::SetScreenshotManager(
532 scoped_ptr<NavigationEntryScreenshotManager> manager) {
533 if (manager.get())
534 screenshot_manager_ = manager.Pass();
535 else
536 screenshot_manager_.reset(new NavigationEntryScreenshotManager(this));
539 bool NavigationControllerImpl::CanGoBack() const {
540 return entries_.size() > 1 && GetCurrentEntryIndex() > 0;
543 bool NavigationControllerImpl::CanGoForward() const {
544 int index = GetCurrentEntryIndex();
545 return index >= 0 && index < (static_cast<int>(entries_.size()) - 1);
548 bool NavigationControllerImpl::CanGoToOffset(int offset) const {
549 int index = GetIndexForOffset(offset);
550 return index >= 0 && index < GetEntryCount();
553 void NavigationControllerImpl::GoBack() {
554 if (!CanGoBack()) {
555 NOTREACHED();
556 return;
559 // Base the navigation on where we are now...
560 int current_index = GetCurrentEntryIndex();
562 DiscardNonCommittedEntries();
564 pending_entry_index_ = current_index - 1;
565 entries_[pending_entry_index_]->SetTransitionType(
566 ui::PageTransitionFromInt(
567 entries_[pending_entry_index_]->GetTransitionType() |
568 ui::PAGE_TRANSITION_FORWARD_BACK));
569 NavigateToPendingEntry(NO_RELOAD);
572 void NavigationControllerImpl::GoForward() {
573 if (!CanGoForward()) {
574 NOTREACHED();
575 return;
578 bool transient = (transient_entry_index_ != -1);
580 // Base the navigation on where we are now...
581 int current_index = GetCurrentEntryIndex();
583 DiscardNonCommittedEntries();
585 pending_entry_index_ = current_index;
586 // If there was a transient entry, we removed it making the current index
587 // the next page.
588 if (!transient)
589 pending_entry_index_++;
591 entries_[pending_entry_index_]->SetTransitionType(
592 ui::PageTransitionFromInt(
593 entries_[pending_entry_index_]->GetTransitionType() |
594 ui::PAGE_TRANSITION_FORWARD_BACK));
595 NavigateToPendingEntry(NO_RELOAD);
598 void NavigationControllerImpl::GoToIndex(int index) {
599 if (index < 0 || index >= static_cast<int>(entries_.size())) {
600 NOTREACHED();
601 return;
604 if (transient_entry_index_ != -1) {
605 if (index == transient_entry_index_) {
606 // Nothing to do when navigating to the transient.
607 return;
609 if (index > transient_entry_index_) {
610 // Removing the transient is goint to shift all entries by 1.
611 index--;
615 DiscardNonCommittedEntries();
617 pending_entry_index_ = index;
618 entries_[pending_entry_index_]->SetTransitionType(
619 ui::PageTransitionFromInt(
620 entries_[pending_entry_index_]->GetTransitionType() |
621 ui::PAGE_TRANSITION_FORWARD_BACK));
622 NavigateToPendingEntry(NO_RELOAD);
625 void NavigationControllerImpl::GoToOffset(int offset) {
626 if (!CanGoToOffset(offset))
627 return;
629 GoToIndex(GetIndexForOffset(offset));
632 bool NavigationControllerImpl::RemoveEntryAtIndex(int index) {
633 if (index == last_committed_entry_index_ ||
634 index == pending_entry_index_)
635 return false;
637 RemoveEntryAtIndexInternal(index);
638 return true;
641 void NavigationControllerImpl::UpdateVirtualURLToURL(
642 NavigationEntryImpl* entry, const GURL& new_url) {
643 GURL new_virtual_url(new_url);
644 if (BrowserURLHandlerImpl::GetInstance()->ReverseURLRewrite(
645 &new_virtual_url, entry->GetVirtualURL(), browser_context_)) {
646 entry->SetVirtualURL(new_virtual_url);
650 void NavigationControllerImpl::LoadURL(
651 const GURL& url,
652 const Referrer& referrer,
653 ui::PageTransition transition,
654 const std::string& extra_headers) {
655 LoadURLParams params(url);
656 params.referrer = referrer;
657 params.transition_type = transition;
658 params.extra_headers = extra_headers;
659 LoadURLWithParams(params);
662 void NavigationControllerImpl::LoadURLWithParams(const LoadURLParams& params) {
663 TRACE_EVENT1("browser,navigation",
664 "NavigationControllerImpl::LoadURLWithParams",
665 "url", params.url.possibly_invalid_spec());
666 if (HandleDebugURL(params.url, params.transition_type)) {
667 // If Telemetry is running, allow the URL load to proceed as if it's
668 // unhandled, otherwise Telemetry can't tell if Navigation completed.
669 if (!base::CommandLine::ForCurrentProcess()->HasSwitch(
670 cc::switches::kEnableGpuBenchmarking))
671 return;
674 // Any renderer-side debug URLs or javascript: URLs should be ignored if the
675 // renderer process is not live, unless it is the initial navigation of the
676 // tab.
677 if (IsRendererDebugURL(params.url)) {
678 // TODO(creis): Find the RVH for the correct frame.
679 if (!delegate_->GetRenderViewHost()->IsRenderViewLive() &&
680 !IsInitialNavigation())
681 return;
684 // Checks based on params.load_type.
685 switch (params.load_type) {
686 case LOAD_TYPE_DEFAULT:
687 break;
688 case LOAD_TYPE_BROWSER_INITIATED_HTTP_POST:
689 if (!params.url.SchemeIs(url::kHttpScheme) &&
690 !params.url.SchemeIs(url::kHttpsScheme)) {
691 NOTREACHED() << "Http post load must use http(s) scheme.";
692 return;
694 break;
695 case LOAD_TYPE_DATA:
696 if (!params.url.SchemeIs(url::kDataScheme)) {
697 NOTREACHED() << "Data load must use data scheme.";
698 return;
700 break;
701 default:
702 NOTREACHED();
703 break;
706 // The user initiated a load, we don't need to reload anymore.
707 needs_reload_ = false;
709 bool override = false;
710 switch (params.override_user_agent) {
711 case UA_OVERRIDE_INHERIT:
712 override = ShouldKeepOverride(GetLastCommittedEntry());
713 break;
714 case UA_OVERRIDE_TRUE:
715 override = true;
716 break;
717 case UA_OVERRIDE_FALSE:
718 override = false;
719 break;
720 default:
721 NOTREACHED();
722 break;
725 scoped_ptr<NavigationEntryImpl> entry;
727 // For subframes, create a pending entry with a corresponding frame entry.
728 int frame_tree_node_id = params.frame_tree_node_id;
729 if (frame_tree_node_id != -1 || !params.frame_name.empty()) {
730 FrameTreeNode* node =
731 params.frame_tree_node_id != -1
732 ? delegate_->GetFrameTree()->FindByID(params.frame_tree_node_id)
733 : delegate_->GetFrameTree()->FindByName(params.frame_name);
734 if (node && !node->IsMainFrame()) {
735 DCHECK(GetLastCommittedEntry());
737 // Update the FTN ID to use below in case we found a named frame.
738 frame_tree_node_id = node->frame_tree_node_id();
740 // In --site-per-process, create an identical NavigationEntry with a
741 // new FrameNavigationEntry for the target subframe.
742 if (SiteIsolationPolicy::UseSubframeNavigationEntries()) {
743 entry = GetLastCommittedEntry()->Clone();
744 entry->SetPageID(-1);
745 entry->AddOrUpdateFrameEntry(node, -1, -1, nullptr, params.url,
746 params.referrer, PageState());
751 // Otherwise, create a pending entry for the main frame.
752 if (!entry) {
753 entry = NavigationEntryImpl::FromNavigationEntry(CreateNavigationEntry(
754 params.url, params.referrer, params.transition_type,
755 params.is_renderer_initiated, params.extra_headers, browser_context_));
757 // Set the FTN ID (only used in non-site-per-process, for tests).
758 entry->set_frame_tree_node_id(frame_tree_node_id);
759 entry->set_source_site_instance(
760 static_cast<SiteInstanceImpl*>(params.source_site_instance.get()));
761 if (params.redirect_chain.size() > 0)
762 entry->SetRedirectChain(params.redirect_chain);
763 // Don't allow an entry replacement if there is no entry to replace.
764 // http://crbug.com/457149
765 if (params.should_replace_current_entry && entries_.size() > 0)
766 entry->set_should_replace_entry(true);
767 entry->set_should_clear_history_list(params.should_clear_history_list);
768 entry->SetIsOverridingUserAgent(override);
769 entry->set_transferred_global_request_id(
770 params.transferred_global_request_id);
772 #if defined(OS_ANDROID)
773 if (params.intent_received_timestamp > 0) {
774 entry->set_intent_received_timestamp(
775 base::TimeTicks() +
776 base::TimeDelta::FromMilliseconds(params.intent_received_timestamp));
778 entry->set_has_user_gesture(params.has_user_gesture);
779 #endif
781 switch (params.load_type) {
782 case LOAD_TYPE_DEFAULT:
783 break;
784 case LOAD_TYPE_BROWSER_INITIATED_HTTP_POST:
785 entry->SetHasPostData(true);
786 entry->SetBrowserInitiatedPostData(
787 params.browser_initiated_post_data.get());
788 break;
789 case LOAD_TYPE_DATA:
790 entry->SetBaseURLForDataURL(params.base_url_for_data_url);
791 entry->SetVirtualURL(params.virtual_url_for_data_url);
792 entry->SetCanLoadLocalResources(params.can_load_local_resources);
793 break;
794 default:
795 NOTREACHED();
796 break;
799 LoadEntry(entry.Pass());
802 bool NavigationControllerImpl::RendererDidNavigate(
803 RenderFrameHostImpl* rfh,
804 const FrameHostMsg_DidCommitProvisionalLoad_Params& params,
805 LoadCommittedDetails* details) {
806 is_initial_navigation_ = false;
808 // Save the previous state before we clobber it.
809 if (GetLastCommittedEntry()) {
810 details->previous_url = GetLastCommittedEntry()->GetURL();
811 details->previous_entry_index = GetLastCommittedEntryIndex();
812 } else {
813 details->previous_url = GURL();
814 details->previous_entry_index = -1;
817 // If there is a pending entry at this point, it should have a SiteInstance,
818 // except for restored entries.
819 DCHECK(pending_entry_index_ == -1 ||
820 pending_entry_->site_instance() ||
821 pending_entry_->restore_type() != NavigationEntryImpl::RESTORE_NONE);
822 if (pending_entry_ &&
823 pending_entry_->restore_type() != NavigationEntryImpl::RESTORE_NONE)
824 pending_entry_->set_restore_type(NavigationEntryImpl::RESTORE_NONE);
826 // If we are doing a cross-site reload, we need to replace the existing
827 // navigation entry, not add another entry to the history. This has the side
828 // effect of removing forward browsing history, if such existed. Or if we are
829 // doing a cross-site redirect navigation, we will do a similar thing.
831 // If this is an error load, we may have already removed the pending entry
832 // when we got the notice of the load failure. If so, look at the copy of the
833 // pending parameters that were saved.
834 if (params.url_is_unreachable && failed_pending_entry_id_ != 0) {
835 details->did_replace_entry = failed_pending_entry_should_replace_;
836 } else {
837 details->did_replace_entry = pending_entry_ &&
838 pending_entry_->should_replace_entry();
841 // Do navigation-type specific actions. These will make and commit an entry.
842 details->type = ClassifyNavigation(rfh, params);
844 // is_in_page must be computed before the entry gets committed.
845 details->is_in_page = IsURLInPageNavigation(
846 params.url, params.was_within_same_page, rfh);
848 switch (details->type) {
849 case NAVIGATION_TYPE_NEW_PAGE:
850 RendererDidNavigateToNewPage(rfh, params, details->did_replace_entry);
851 break;
852 case NAVIGATION_TYPE_EXISTING_PAGE:
853 details->did_replace_entry = details->is_in_page;
854 RendererDidNavigateToExistingPage(rfh, params);
855 break;
856 case NAVIGATION_TYPE_SAME_PAGE:
857 RendererDidNavigateToSamePage(rfh, params);
858 break;
859 case NAVIGATION_TYPE_NEW_SUBFRAME:
860 RendererDidNavigateNewSubframe(rfh, params);
861 break;
862 case NAVIGATION_TYPE_AUTO_SUBFRAME:
863 if (!RendererDidNavigateAutoSubframe(rfh, params))
864 return false;
865 break;
866 case NAVIGATION_TYPE_NAV_IGNORE:
867 // If a pending navigation was in progress, this canceled it. We should
868 // discard it and make sure it is removed from the URL bar. After that,
869 // there is nothing we can do with this navigation, so we just return to
870 // the caller that nothing has happened.
871 if (pending_entry_) {
872 DiscardNonCommittedEntries();
873 delegate_->NotifyNavigationStateChanged(INVALIDATE_TYPE_URL);
875 return false;
876 default:
877 NOTREACHED();
880 // At this point, we know that the navigation has just completed, so
881 // record the time.
883 // TODO(akalin): Use "sane time" as described in
884 // http://www.chromium.org/developers/design-documents/sane-time .
885 base::Time timestamp =
886 time_smoother_.GetSmoothedTime(get_timestamp_callback_.Run());
887 DVLOG(1) << "Navigation finished at (smoothed) timestamp "
888 << timestamp.ToInternalValue();
890 // We should not have a pending entry anymore. Clear it again in case any
891 // error cases above forgot to do so.
892 DiscardNonCommittedEntriesInternal();
894 // All committed entries should have nonempty content state so WebKit doesn't
895 // get confused when we go back to them (see the function for details).
896 DCHECK(params.page_state.IsValid());
897 NavigationEntryImpl* active_entry = GetLastCommittedEntry();
898 active_entry->SetTimestamp(timestamp);
899 active_entry->SetHttpStatusCode(params.http_status_code);
900 if (SiteIsolationPolicy::UseSubframeNavigationEntries()) {
901 // Update the frame-specific PageState.
902 FrameNavigationEntry* frame_entry =
903 active_entry->GetFrameEntry(rfh->frame_tree_node());
904 frame_entry->set_page_state(params.page_state);
905 } else {
906 active_entry->SetPageState(params.page_state);
908 active_entry->SetRedirectChain(params.redirects);
910 // Use histogram to track memory impact of redirect chain because it's now
911 // not cleared for committed entries.
912 size_t redirect_chain_size = 0;
913 for (size_t i = 0; i < params.redirects.size(); ++i) {
914 redirect_chain_size += params.redirects[i].spec().length();
916 UMA_HISTOGRAM_COUNTS("Navigation.RedirectChainSize", redirect_chain_size);
918 // Once it is committed, we no longer need to track several pieces of state on
919 // the entry.
920 active_entry->ResetForCommit();
922 // The active entry's SiteInstance should match our SiteInstance.
923 // TODO(creis): This check won't pass for subframes until we create entries
924 // for subframe navigations.
925 if (!rfh->GetParent())
926 CHECK(active_entry->site_instance() == rfh->GetSiteInstance());
928 // Remember the bindings the renderer process has at this point, so that
929 // we do not grant this entry additional bindings if we come back to it.
930 active_entry->SetBindings(rfh->GetEnabledBindings());
932 // Now prep the rest of the details for the notification and broadcast.
933 details->entry = active_entry;
934 details->is_main_frame = !rfh->GetParent();
935 details->http_status_code = params.http_status_code;
937 // Deserialize the security info and kill the renderer if
938 // deserialization fails. The navigation will continue with default
939 // SSLStatus values.
940 if (!DeserializeSecurityInfo(params.security_info, &details->ssl_status)) {
941 bad_message::ReceivedBadMessage(
942 rfh->GetProcess(),
943 bad_message::WC_RENDERER_DID_NAVIGATE_BAD_SECURITY_INFO);
946 NotifyNavigationEntryCommitted(details);
948 // Update the RenderViewHost of the top-level RenderFrameHost's notion of what
949 // entry it's showing for use later.
950 RenderFrameHostImpl* main_frame =
951 rfh->frame_tree_node()->frame_tree()->root()->current_frame_host();
952 static_cast<RenderViewHostImpl*>(main_frame->GetRenderViewHost())->
953 set_nav_entry_id(active_entry->GetUniqueID());
955 return true;
958 NavigationType NavigationControllerImpl::ClassifyNavigation(
959 RenderFrameHostImpl* rfh,
960 const FrameHostMsg_DidCommitProvisionalLoad_Params& params) const {
961 if (params.did_create_new_entry) {
962 // A new entry. We may or may not have a pending entry for the page, and
963 // this may or may not be the main frame.
964 if (!rfh->GetParent()) {
965 return NAVIGATION_TYPE_NEW_PAGE;
968 // When this is a new subframe navigation, we should have a committed page
969 // in which it's a subframe. This may not be the case when an iframe is
970 // navigated on a popup navigated to about:blank (the iframe would be
971 // written into the popup by script on the main page). For these cases,
972 // there isn't any navigation stuff we can do, so just ignore it.
973 if (!GetLastCommittedEntry())
974 return NAVIGATION_TYPE_NAV_IGNORE;
976 // Valid subframe navigation.
977 return NAVIGATION_TYPE_NEW_SUBFRAME;
980 // We only clear the session history when navigating to a new page.
981 DCHECK(!params.history_list_was_cleared);
983 if (rfh->GetParent()) {
984 // All manual subframes would be did_create_new_entry and handled above, so
985 // we know this is auto.
986 if (GetLastCommittedEntry()) {
987 return NAVIGATION_TYPE_AUTO_SUBFRAME;
988 } else {
989 // We ignore subframes created in non-committed pages; we'd appreciate if
990 // people stopped doing that.
991 return NAVIGATION_TYPE_NAV_IGNORE;
995 if (params.nav_entry_id == 0) {
996 // This is a renderer-initiated navigation (nav_entry_id == 0), but didn't
997 // create a new page.
999 // Just like above in the did_create_new_entry case, it's possible to
1000 // scribble onto an uncommitted page. Again, there isn't any navigation
1001 // stuff that we can do, so ignore it here as well.
1002 NavigationEntry* last_committed = GetLastCommittedEntry();
1003 if (!last_committed)
1004 return NAVIGATION_TYPE_NAV_IGNORE;
1006 // This is history.replaceState(), history.reload(), or a client-side
1007 // redirect.
1008 return NAVIGATION_TYPE_EXISTING_PAGE;
1011 if (pending_entry_ && pending_entry_index_ == -1 &&
1012 pending_entry_->GetUniqueID() == params.nav_entry_id) {
1013 // In this case, we have a pending entry for a load of a new URL but Blink
1014 // didn't do a new navigation (params.did_create_new_entry). This happens
1015 // when you press enter in the URL bar to reload. We will create a pending
1016 // entry, but Blink will convert it to a reload since it's the same page and
1017 // not create a new entry for it (the user doesn't want to have a new
1018 // back/forward entry when they do this). Therefore we want to just ignore
1019 // the pending entry and go back to where we were (the "existing entry").
1020 return NAVIGATION_TYPE_SAME_PAGE;
1023 if (params.intended_as_new_entry) {
1024 // This was intended to be a navigation to a new entry but the pending entry
1025 // got cleared in the meanwhile. Classify as EXISTING_PAGE because we may or
1026 // may not have a pending entry.
1027 return NAVIGATION_TYPE_EXISTING_PAGE;
1030 if (params.url_is_unreachable && failed_pending_entry_id_ != 0 &&
1031 params.nav_entry_id == failed_pending_entry_id_) {
1032 // If the renderer was going to a new pending entry that got cleared because
1033 // of an error, this is the case of the user trying to retry a failed load
1034 // by pressing return. Classify as EXISTING_PAGE because we probably don't
1035 // have a pending entry.
1036 return NAVIGATION_TYPE_EXISTING_PAGE;
1039 // Now we know that the notification is for an existing page. Find that entry.
1040 int existing_entry_index = GetEntryIndexWithUniqueID(params.nav_entry_id);
1041 if (existing_entry_index == -1) {
1042 // The renderer has committed a navigation to an entry that no longer
1043 // exists. Because the renderer is showing that page, resurrect that entry.
1044 return NAVIGATION_TYPE_NEW_PAGE;
1047 // Since we weeded out "new" navigations above, we know this is an existing
1048 // (back/forward) navigation.
1049 return NAVIGATION_TYPE_EXISTING_PAGE;
1052 void NavigationControllerImpl::RendererDidNavigateToNewPage(
1053 RenderFrameHostImpl* rfh,
1054 const FrameHostMsg_DidCommitProvisionalLoad_Params& params,
1055 bool replace_entry) {
1056 scoped_ptr<NavigationEntryImpl> new_entry;
1057 bool update_virtual_url;
1058 // Only make a copy of the pending entry if it is appropriate for the new page
1059 // that was just loaded. We verify this at a coarse grain by checking that
1060 // the SiteInstance hasn't been assigned to something else, and by making sure
1061 // that the pending entry was intended as a new entry (rather than being a
1062 // history navigation that was interrupted by an unrelated, renderer-initiated
1063 // navigation).
1064 if (pending_entry_ && pending_entry_index_ == -1 &&
1065 (!pending_entry_->site_instance() ||
1066 pending_entry_->site_instance() == rfh->GetSiteInstance())) {
1067 new_entry = pending_entry_->Clone();
1069 update_virtual_url = new_entry->update_virtual_url_with_url();
1070 } else {
1071 new_entry = make_scoped_ptr(new NavigationEntryImpl);
1073 // Find out whether the new entry needs to update its virtual URL on URL
1074 // change and set up the entry accordingly. This is needed to correctly
1075 // update the virtual URL when replaceState is called after a pushState.
1076 GURL url = params.url;
1077 bool needs_update = false;
1078 BrowserURLHandlerImpl::GetInstance()->RewriteURLIfNecessary(
1079 &url, browser_context_, &needs_update);
1080 new_entry->set_update_virtual_url_with_url(needs_update);
1082 // When navigating to a new page, give the browser URL handler a chance to
1083 // update the virtual URL based on the new URL. For example, this is needed
1084 // to show chrome://bookmarks/#1 when the bookmarks webui extension changes
1085 // the URL.
1086 update_virtual_url = needs_update;
1089 // Don't use the page type from the pending entry. Some interstitial page
1090 // may have set the type to interstitial. Once we commit, however, the page
1091 // type must always be normal or error.
1092 new_entry->set_page_type(params.url_is_unreachable ? PAGE_TYPE_ERROR
1093 : PAGE_TYPE_NORMAL);
1094 new_entry->SetURL(params.url);
1095 if (update_virtual_url)
1096 UpdateVirtualURLToURL(new_entry.get(), params.url);
1097 new_entry->SetReferrer(params.referrer);
1098 new_entry->SetPageID(params.page_id);
1099 new_entry->SetTransitionType(params.transition);
1100 new_entry->set_site_instance(
1101 static_cast<SiteInstanceImpl*>(rfh->GetSiteInstance()));
1102 new_entry->SetHasPostData(params.is_post);
1103 new_entry->SetPostID(params.post_id);
1104 new_entry->SetOriginalRequestURL(params.original_request_url);
1105 new_entry->SetIsOverridingUserAgent(params.is_overriding_user_agent);
1107 // Update the FrameNavigationEntry for new main frame commits.
1108 FrameNavigationEntry* frame_entry =
1109 new_entry->GetFrameEntry(rfh->frame_tree_node());
1110 frame_entry->set_item_sequence_number(params.item_sequence_number);
1111 frame_entry->set_document_sequence_number(params.document_sequence_number);
1113 // history.pushState() is classified as a navigation to a new page, but
1114 // sets was_within_same_page to true. In this case, we already have the
1115 // title and favicon available, so set them immediately.
1116 if (params.was_within_same_page && GetLastCommittedEntry()) {
1117 new_entry->SetTitle(GetLastCommittedEntry()->GetTitle());
1118 new_entry->GetFavicon() = GetLastCommittedEntry()->GetFavicon();
1121 DCHECK(!params.history_list_was_cleared || !replace_entry);
1122 // The browser requested to clear the session history when it initiated the
1123 // navigation. Now we know that the renderer has updated its state accordingly
1124 // and it is safe to also clear the browser side history.
1125 if (params.history_list_was_cleared) {
1126 DiscardNonCommittedEntriesInternal();
1127 entries_.clear();
1128 last_committed_entry_index_ = -1;
1131 InsertOrReplaceEntry(new_entry.Pass(), replace_entry);
1134 void NavigationControllerImpl::RendererDidNavigateToExistingPage(
1135 RenderFrameHostImpl* rfh,
1136 const FrameHostMsg_DidCommitProvisionalLoad_Params& params) {
1137 // We should only get here for main frame navigations.
1138 DCHECK(!rfh->GetParent());
1140 NavigationEntryImpl* entry;
1141 if (params.intended_as_new_entry) {
1142 // This was intended as a new entry but the pending entry was lost in the
1143 // meanwhile and no new page was created. We are stuck at the last committed
1144 // entry.
1145 entry = GetLastCommittedEntry();
1146 } else if (params.nav_entry_id) {
1147 // This is a browser-initiated navigation (back/forward/reload).
1148 entry = GetEntryWithUniqueID(params.nav_entry_id);
1149 } else {
1150 // This is renderer-initiated. The only kinds of renderer-initated
1151 // navigations that are EXISTING_PAGE are reloads and location.replace,
1152 // which land us at the last committed entry.
1153 entry = GetLastCommittedEntry();
1155 DCHECK(entry);
1157 // The URL may have changed due to redirects.
1158 entry->set_page_type(params.url_is_unreachable ? PAGE_TYPE_ERROR
1159 : PAGE_TYPE_NORMAL);
1160 entry->SetURL(params.url);
1161 entry->SetReferrer(params.referrer);
1162 if (entry->update_virtual_url_with_url())
1163 UpdateVirtualURLToURL(entry, params.url);
1165 // The redirected to page should not inherit the favicon from the previous
1166 // page.
1167 if (ui::PageTransitionIsRedirect(params.transition))
1168 entry->GetFavicon() = FaviconStatus();
1170 // The site instance will normally be the same except during session restore,
1171 // when no site instance will be assigned.
1172 DCHECK(entry->site_instance() == nullptr ||
1173 entry->site_instance() == rfh->GetSiteInstance());
1174 entry->set_site_instance(
1175 static_cast<SiteInstanceImpl*>(rfh->GetSiteInstance()));
1177 entry->SetHasPostData(params.is_post);
1178 entry->SetPostID(params.post_id);
1180 // The entry we found in the list might be pending if the user hit
1181 // back/forward/reload. This load should commit it (since it's already in the
1182 // list, we can just discard the pending pointer). We should also discard the
1183 // pending entry if it corresponds to a different navigation, since that one
1184 // is now likely canceled. If it is not canceled, we will treat it as a new
1185 // navigation when it arrives, which is also ok.
1187 // Note that we need to use the "internal" version since we don't want to
1188 // actually change any other state, just kill the pointer.
1189 DiscardNonCommittedEntriesInternal();
1191 // If a transient entry was removed, the indices might have changed, so we
1192 // have to query the entry index again.
1193 last_committed_entry_index_ = GetIndexOfEntry(entry);
1196 void NavigationControllerImpl::RendererDidNavigateToSamePage(
1197 RenderFrameHostImpl* rfh,
1198 const FrameHostMsg_DidCommitProvisionalLoad_Params& params) {
1199 // This classification says that we have a pending entry that's the same as
1200 // the last committed entry. This entry is guaranteed to exist by
1201 // ClassifyNavigation. All we need to do is update the existing entry.
1202 NavigationEntryImpl* existing_entry = GetLastCommittedEntry();
1204 // We assign the entry's unique ID to be that of the new one. Since this is
1205 // always the result of a user action, we want to dismiss infobars, etc. like
1206 // a regular user-initiated navigation.
1207 existing_entry->set_unique_id(pending_entry_->GetUniqueID());
1209 // The URL may have changed due to redirects.
1210 existing_entry->set_page_type(params.url_is_unreachable ? PAGE_TYPE_ERROR
1211 : PAGE_TYPE_NORMAL);
1212 if (existing_entry->update_virtual_url_with_url())
1213 UpdateVirtualURLToURL(existing_entry, params.url);
1214 existing_entry->SetURL(params.url);
1215 existing_entry->SetReferrer(params.referrer);
1217 // The page may have been requested with a different HTTP method.
1218 existing_entry->SetHasPostData(params.is_post);
1219 existing_entry->SetPostID(params.post_id);
1221 DiscardNonCommittedEntries();
1224 void NavigationControllerImpl::RendererDidNavigateNewSubframe(
1225 RenderFrameHostImpl* rfh,
1226 const FrameHostMsg_DidCommitProvisionalLoad_Params& params) {
1227 DCHECK(ui::PageTransitionCoreTypeIs(params.transition,
1228 ui::PAGE_TRANSITION_MANUAL_SUBFRAME));
1230 // Manual subframe navigations just get the current entry cloned so the user
1231 // can go back or forward to it. The actual subframe information will be
1232 // stored in the page state for each of those entries. This happens out of
1233 // band with the actual navigations.
1234 DCHECK(GetLastCommittedEntry()) << "ClassifyNavigation should guarantee "
1235 << "that a last committed entry exists.";
1237 scoped_ptr<NavigationEntryImpl> new_entry;
1238 if (SiteIsolationPolicy::UseSubframeNavigationEntries()) {
1239 // Make sure new_entry takes ownership of frame_entry in a scoped_refptr.
1240 FrameNavigationEntry* frame_entry = new FrameNavigationEntry(
1241 rfh->frame_tree_node()->frame_tree_node_id(),
1242 params.item_sequence_number, params.document_sequence_number,
1243 rfh->GetSiteInstance(), params.url, params.referrer);
1244 new_entry = GetLastCommittedEntry()->CloneAndReplace(rfh->frame_tree_node(),
1245 frame_entry);
1246 CHECK(frame_entry->HasOneRef());
1247 } else {
1248 new_entry = GetLastCommittedEntry()->Clone();
1251 new_entry->SetPageID(params.page_id);
1252 InsertOrReplaceEntry(new_entry.Pass(), false);
1255 bool NavigationControllerImpl::RendererDidNavigateAutoSubframe(
1256 RenderFrameHostImpl* rfh,
1257 const FrameHostMsg_DidCommitProvisionalLoad_Params& params) {
1258 DCHECK(ui::PageTransitionCoreTypeIs(params.transition,
1259 ui::PAGE_TRANSITION_AUTO_SUBFRAME));
1261 // We're guaranteed to have a previously committed entry, and we now need to
1262 // handle navigation inside of a subframe in it without creating a new entry.
1263 DCHECK(GetLastCommittedEntry());
1265 if (params.nav_entry_id) {
1266 int entry_index = GetEntryIndexWithUniqueID(params.nav_entry_id);
1268 // If the |nav_entry_id| is non-zero and matches an existing entry, this is
1269 // a history auto" navigation. Update the last committed index accordingly.
1270 // If we don't recognize the |nav_entry_id|, it might be either a pending
1271 // entry for a transfer or a recently pruned entry. We'll handle it below.
1272 if (entry_index != -1 && entry_index != last_committed_entry_index_) {
1273 // Make sure that a subframe commit isn't changing the main frame's
1274 // origin. Otherwise the renderer process may be confused, leading to a
1275 // URL spoof. We can't check the path since that may change
1276 // (https://crbug.com/373041).
1277 if (GetLastCommittedEntry()->GetURL().GetOrigin() !=
1278 GetEntryAtIndex(entry_index)->GetURL().GetOrigin()) {
1279 // TODO(creis): This is unexpectedly being encountered in practice. If
1280 // you encounter this in practice, please post details to
1281 // https://crbug.com/486916. Once that's resolved, we'll change this to
1282 // kill the renderer process with bad_message::NC_AUTO_SUBFRAME.
1283 NOTREACHED() << "Unexpected main frame origin change on AUTO_SUBFRAME.";
1286 // TODO(creis): Update the FrameNavigationEntry in --site-per-process.
1287 last_committed_entry_index_ = entry_index;
1288 DiscardNonCommittedEntriesInternal();
1289 return true;
1293 if (SiteIsolationPolicy::UseSubframeNavigationEntries()) {
1294 // This may be a "new auto" case where we add a new FrameNavigationEntry, or
1295 // it may be a "history auto" case where we update an existing one.
1296 NavigationEntryImpl* last_committed = GetLastCommittedEntry();
1297 last_committed->AddOrUpdateFrameEntry(
1298 rfh->frame_tree_node(), params.item_sequence_number,
1299 params.document_sequence_number, rfh->GetSiteInstance(), params.url,
1300 params.referrer, params.page_state);
1302 // Cross-process subframe navigations may leave a pending entry around.
1303 // Clear it if it's actually for the subframe.
1304 // TODO(creis): Don't use pending entries for subframe navigations.
1305 // See https://crbug.com/495161.
1306 if (pending_entry_ &&
1307 pending_entry_->frame_tree_node_id() ==
1308 rfh->frame_tree_node()->frame_tree_node_id()) {
1309 DiscardPendingEntry(false);
1313 // We do not need to discard the pending entry in this case, since we will
1314 // not generate commit notifications for this auto-subframe navigation.
1315 return false;
1318 int NavigationControllerImpl::GetIndexOfEntry(
1319 const NavigationEntryImpl* entry) const {
1320 const NavigationEntries::const_iterator i(std::find(
1321 entries_.begin(),
1322 entries_.end(),
1323 entry));
1324 return (i == entries_.end()) ? -1 : static_cast<int>(i - entries_.begin());
1327 // There are two general cases where a navigation is "in page":
1328 // 1. A fragment navigation, in which the url is kept the same except for the
1329 // reference fragment.
1330 // 2. A history API navigation (pushState and replaceState). This case is
1331 // always in-page, but the urls are not guaranteed to match excluding the
1332 // fragment. The relevant spec allows pushState/replaceState to any URL on
1333 // the same origin.
1334 // However, due to reloads, even identical urls are *not* guaranteed to be
1335 // in-page navigations, we have to trust the renderer almost entirely.
1336 // The one thing we do know is that cross-origin navigations will *never* be
1337 // in-page. Therefore, trust the renderer if the URLs are on the same origin,
1338 // and assume the renderer is malicious if a cross-origin navigation claims to
1339 // be in-page.
1340 bool NavigationControllerImpl::IsURLInPageNavigation(
1341 const GURL& url,
1342 bool renderer_says_in_page,
1343 RenderFrameHost* rfh) const {
1344 GURL last_committed_url;
1345 if (rfh->GetParent()) {
1346 last_committed_url = rfh->GetLastCommittedURL();
1347 } else {
1348 NavigationEntry* last_committed = GetLastCommittedEntry();
1349 // There must be a last-committed entry to compare URLs to. TODO(avi): When
1350 // might Blink say that a navigation is in-page yet there be no last-
1351 // committed entry?
1352 if (!last_committed)
1353 return false;
1354 last_committed_url = last_committed->GetURL();
1357 WebPreferences prefs = rfh->GetRenderViewHost()->GetWebkitPreferences();
1358 bool is_same_origin = last_committed_url.is_empty() ||
1359 // TODO(japhet): We should only permit navigations
1360 // originating from about:blank to be in-page if the
1361 // about:blank is the first document that frame loaded.
1362 // We don't have sufficient information to identify
1363 // that case at the moment, so always allow about:blank
1364 // for now.
1365 last_committed_url == GURL(url::kAboutBlankURL) ||
1366 last_committed_url.GetOrigin() == url.GetOrigin() ||
1367 !prefs.web_security_enabled ||
1368 (prefs.allow_universal_access_from_file_urls &&
1369 last_committed_url.SchemeIs(url::kFileScheme));
1370 if (!is_same_origin && renderer_says_in_page) {
1371 bad_message::ReceivedBadMessage(rfh->GetProcess(),
1372 bad_message::NC_IN_PAGE_NAVIGATION);
1374 return is_same_origin && renderer_says_in_page;
1377 void NavigationControllerImpl::CopyStateFrom(
1378 const NavigationController& temp) {
1379 const NavigationControllerImpl& source =
1380 static_cast<const NavigationControllerImpl&>(temp);
1381 // Verify that we look new.
1382 DCHECK(GetEntryCount() == 0 && !GetPendingEntry());
1384 if (source.GetEntryCount() == 0)
1385 return; // Nothing new to do.
1387 needs_reload_ = true;
1388 InsertEntriesFrom(source, source.GetEntryCount());
1390 for (SessionStorageNamespaceMap::const_iterator it =
1391 source.session_storage_namespace_map_.begin();
1392 it != source.session_storage_namespace_map_.end();
1393 ++it) {
1394 SessionStorageNamespaceImpl* source_namespace =
1395 static_cast<SessionStorageNamespaceImpl*>(it->second.get());
1396 session_storage_namespace_map_[it->first] = source_namespace->Clone();
1399 FinishRestore(source.last_committed_entry_index_, RESTORE_CURRENT_SESSION);
1401 // Copy the max page id map from the old tab to the new tab. This ensures
1402 // that new and existing navigations in the tab's current SiteInstances
1403 // are identified properly.
1404 delegate_->CopyMaxPageIDsFrom(source.delegate()->GetWebContents());
1407 void NavigationControllerImpl::CopyStateFromAndPrune(
1408 NavigationController* temp,
1409 bool replace_entry) {
1410 // It is up to callers to check the invariants before calling this.
1411 CHECK(CanPruneAllButLastCommitted());
1413 NavigationControllerImpl* source =
1414 static_cast<NavigationControllerImpl*>(temp);
1416 // Remove all the entries leaving the last committed entry.
1417 PruneAllButLastCommittedInternal();
1419 // We now have one entry, possibly with a new pending entry. Ensure that
1420 // adding the entries from source won't put us over the limit.
1421 DCHECK_EQ(1, GetEntryCount());
1422 if (!replace_entry)
1423 source->PruneOldestEntryIfFull();
1425 // Insert the entries from source. Don't use source->GetCurrentEntryIndex as
1426 // we don't want to copy over the transient entry. Ignore any pending entry,
1427 // since it has not committed in source.
1428 int max_source_index = source->last_committed_entry_index_;
1429 if (max_source_index == -1)
1430 max_source_index = source->GetEntryCount();
1431 else
1432 max_source_index++;
1434 // Ignore the source's current entry if merging with replacement.
1435 // TODO(davidben): This should preserve entries forward of the current
1436 // too. http://crbug.com/317872
1437 if (replace_entry && max_source_index > 0)
1438 max_source_index--;
1440 InsertEntriesFrom(*source, max_source_index);
1442 // Adjust indices such that the last entry and pending are at the end now.
1443 last_committed_entry_index_ = GetEntryCount() - 1;
1445 delegate_->SetHistoryOffsetAndLength(last_committed_entry_index_,
1446 GetEntryCount());
1448 // Copy the max page id map from the old tab to the new tab. This ensures that
1449 // new and existing navigations in the tab's current SiteInstances are
1450 // identified properly.
1451 NavigationEntryImpl* last_committed = GetLastCommittedEntry();
1452 int32 site_max_page_id =
1453 delegate_->GetMaxPageIDForSiteInstance(last_committed->site_instance());
1454 delegate_->CopyMaxPageIDsFrom(source->delegate()->GetWebContents());
1455 delegate_->UpdateMaxPageIDForSiteInstance(last_committed->site_instance(),
1456 site_max_page_id);
1457 max_restored_page_id_ = source->max_restored_page_id_;
1460 bool NavigationControllerImpl::CanPruneAllButLastCommitted() {
1461 // If there is no last committed entry, we cannot prune. Even if there is a
1462 // pending entry, it may not commit, leaving this WebContents blank, despite
1463 // possibly giving it new entries via CopyStateFromAndPrune.
1464 if (last_committed_entry_index_ == -1)
1465 return false;
1467 // We cannot prune if there is a pending entry at an existing entry index.
1468 // It may not commit, so we have to keep the last committed entry, and thus
1469 // there is no sensible place to keep the pending entry. It is ok to have
1470 // a new pending entry, which can optionally commit as a new navigation.
1471 if (pending_entry_index_ != -1)
1472 return false;
1474 // We should not prune if we are currently showing a transient entry.
1475 if (transient_entry_index_ != -1)
1476 return false;
1478 return true;
1481 void NavigationControllerImpl::PruneAllButLastCommitted() {
1482 PruneAllButLastCommittedInternal();
1484 DCHECK_EQ(0, last_committed_entry_index_);
1485 DCHECK_EQ(1, GetEntryCount());
1487 delegate_->SetHistoryOffsetAndLength(last_committed_entry_index_,
1488 GetEntryCount());
1491 void NavigationControllerImpl::PruneAllButLastCommittedInternal() {
1492 // It is up to callers to check the invariants before calling this.
1493 CHECK(CanPruneAllButLastCommitted());
1495 // Erase all entries but the last committed entry. There may still be a
1496 // new pending entry after this.
1497 entries_.erase(entries_.begin(),
1498 entries_.begin() + last_committed_entry_index_);
1499 entries_.erase(entries_.begin() + 1, entries_.end());
1500 last_committed_entry_index_ = 0;
1503 void NavigationControllerImpl::ClearAllScreenshots() {
1504 screenshot_manager_->ClearAllScreenshots();
1507 void NavigationControllerImpl::SetSessionStorageNamespace(
1508 const std::string& partition_id,
1509 SessionStorageNamespace* session_storage_namespace) {
1510 if (!session_storage_namespace)
1511 return;
1513 // We can't overwrite an existing SessionStorage without violating spec.
1514 // Attempts to do so may give a tab access to another tab's session storage
1515 // so die hard on an error.
1516 bool successful_insert = session_storage_namespace_map_.insert(
1517 make_pair(partition_id,
1518 static_cast<SessionStorageNamespaceImpl*>(
1519 session_storage_namespace)))
1520 .second;
1521 CHECK(successful_insert) << "Cannot replace existing SessionStorageNamespace";
1524 void NavigationControllerImpl::SetMaxRestoredPageID(int32 max_id) {
1525 max_restored_page_id_ = max_id;
1528 int32 NavigationControllerImpl::GetMaxRestoredPageID() const {
1529 return max_restored_page_id_;
1532 bool NavigationControllerImpl::IsUnmodifiedBlankTab() const {
1533 return IsInitialNavigation() &&
1534 !GetLastCommittedEntry() &&
1535 !delegate_->HasAccessedInitialDocument();
1538 SessionStorageNamespace*
1539 NavigationControllerImpl::GetSessionStorageNamespace(SiteInstance* instance) {
1540 std::string partition_id;
1541 if (instance) {
1542 // TODO(ajwong): When GetDefaultSessionStorageNamespace() goes away, remove
1543 // this if statement so |instance| must not be NULL.
1544 partition_id =
1545 GetContentClient()->browser()->GetStoragePartitionIdForSite(
1546 browser_context_, instance->GetSiteURL());
1549 SessionStorageNamespaceMap::const_iterator it =
1550 session_storage_namespace_map_.find(partition_id);
1551 if (it != session_storage_namespace_map_.end())
1552 return it->second.get();
1554 // Create one if no one has accessed session storage for this partition yet.
1556 // TODO(ajwong): Should this use the |partition_id| directly rather than
1557 // re-lookup via |instance|? http://crbug.com/142685
1558 StoragePartition* partition =
1559 BrowserContext::GetStoragePartition(browser_context_, instance);
1560 SessionStorageNamespaceImpl* session_storage_namespace =
1561 new SessionStorageNamespaceImpl(
1562 static_cast<DOMStorageContextWrapper*>(
1563 partition->GetDOMStorageContext()));
1564 session_storage_namespace_map_[partition_id] = session_storage_namespace;
1566 return session_storage_namespace;
1569 SessionStorageNamespace*
1570 NavigationControllerImpl::GetDefaultSessionStorageNamespace() {
1571 // TODO(ajwong): Remove if statement in GetSessionStorageNamespace().
1572 return GetSessionStorageNamespace(NULL);
1575 const SessionStorageNamespaceMap&
1576 NavigationControllerImpl::GetSessionStorageNamespaceMap() const {
1577 return session_storage_namespace_map_;
1580 bool NavigationControllerImpl::NeedsReload() const {
1581 return needs_reload_;
1584 void NavigationControllerImpl::SetNeedsReload() {
1585 needs_reload_ = true;
1587 if (last_committed_entry_index_ != -1) {
1588 entries_[last_committed_entry_index_]->SetTransitionType(
1589 ui::PAGE_TRANSITION_RELOAD);
1593 void NavigationControllerImpl::RemoveEntryAtIndexInternal(int index) {
1594 DCHECK(index < GetEntryCount());
1595 DCHECK(index != last_committed_entry_index_);
1597 DiscardNonCommittedEntries();
1599 entries_.erase(entries_.begin() + index);
1600 if (last_committed_entry_index_ > index)
1601 last_committed_entry_index_--;
1604 void NavigationControllerImpl::DiscardNonCommittedEntries() {
1605 bool transient = transient_entry_index_ != -1;
1606 DiscardNonCommittedEntriesInternal();
1608 // If there was a transient entry, invalidate everything so the new active
1609 // entry state is shown.
1610 if (transient) {
1611 delegate_->NotifyNavigationStateChanged(INVALIDATE_TYPE_ALL);
1615 NavigationEntryImpl* NavigationControllerImpl::GetPendingEntry() const {
1616 return pending_entry_;
1619 int NavigationControllerImpl::GetPendingEntryIndex() const {
1620 return pending_entry_index_;
1623 void NavigationControllerImpl::InsertOrReplaceEntry(
1624 scoped_ptr<NavigationEntryImpl> entry, bool replace) {
1625 DCHECK(entry->GetTransitionType() != ui::PAGE_TRANSITION_AUTO_SUBFRAME);
1627 // If the pending_entry_index_ is -1, the navigation was to a new page, and we
1628 // need to keep continuity with the pending entry, so copy the pending entry's
1629 // unique ID to the committed entry. If the pending_entry_index_ isn't -1,
1630 // then the renderer navigated on its own, independent of the pending entry,
1631 // so don't copy anything.
1632 if (pending_entry_ && pending_entry_index_ == -1)
1633 entry->set_unique_id(pending_entry_->GetUniqueID());
1635 DiscardNonCommittedEntriesInternal();
1637 int current_size = static_cast<int>(entries_.size());
1639 // When replacing, don't prune the forward history.
1640 if (replace && current_size > 0) {
1641 int32 page_id = entry->GetPageID();
1643 // ScopedVectors don't automatically delete the replaced value, so make sure
1644 // the previous value gets deleted.
1645 scoped_ptr<NavigationEntryImpl> old_entry(
1646 entries_[last_committed_entry_index_]);
1647 entries_[last_committed_entry_index_] = entry.release();
1649 // This is a new page ID, so we need everybody to know about it.
1650 delegate_->UpdateMaxPageID(page_id);
1651 return;
1654 // We shouldn't see replace == true when there's no committed entries.
1655 DCHECK(!replace);
1657 if (current_size > 0) {
1658 // Prune any entries which are in front of the current entry.
1659 // last_committed_entry_index_ must be updated here since calls to
1660 // NotifyPrunedEntries() below may re-enter and we must make sure
1661 // last_committed_entry_index_ is not left in an invalid state.
1662 int num_pruned = 0;
1663 while (last_committed_entry_index_ < (current_size - 1)) {
1664 num_pruned++;
1665 entries_.pop_back();
1666 current_size--;
1668 if (num_pruned > 0) // Only notify if we did prune something.
1669 NotifyPrunedEntries(this, false, num_pruned);
1672 PruneOldestEntryIfFull();
1674 int32 page_id = entry->GetPageID();
1675 entries_.push_back(entry.Pass());
1676 last_committed_entry_index_ = static_cast<int>(entries_.size()) - 1;
1678 // This is a new page ID, so we need everybody to know about it.
1679 delegate_->UpdateMaxPageID(page_id);
1682 void NavigationControllerImpl::PruneOldestEntryIfFull() {
1683 if (entries_.size() >= max_entry_count()) {
1684 DCHECK_EQ(max_entry_count(), entries_.size());
1685 DCHECK_GT(last_committed_entry_index_, 0);
1686 RemoveEntryAtIndex(0);
1687 NotifyPrunedEntries(this, true, 1);
1691 void NavigationControllerImpl::NavigateToPendingEntry(ReloadType reload_type) {
1692 needs_reload_ = false;
1694 // If we were navigating to a slow-to-commit page, and the user performs
1695 // a session history navigation to the last committed page, RenderViewHost
1696 // will force the throbber to start, but WebKit will essentially ignore the
1697 // navigation, and won't send a message to stop the throbber. To prevent this
1698 // from happening, we drop the navigation here and stop the slow-to-commit
1699 // page from loading (which would normally happen during the navigation).
1700 if (pending_entry_index_ != -1 &&
1701 pending_entry_index_ == last_committed_entry_index_ &&
1702 (entries_[pending_entry_index_]->restore_type() ==
1703 NavigationEntryImpl::RESTORE_NONE) &&
1704 (entries_[pending_entry_index_]->GetTransitionType() &
1705 ui::PAGE_TRANSITION_FORWARD_BACK)) {
1706 delegate_->Stop();
1708 // If an interstitial page is showing, we want to close it to get back
1709 // to what was showing before.
1710 if (delegate_->GetInterstitialPage())
1711 delegate_->GetInterstitialPage()->DontProceed();
1713 DiscardNonCommittedEntries();
1714 return;
1717 // If an interstitial page is showing, the previous renderer is blocked and
1718 // cannot make new requests. Unblock (and disable) it to allow this
1719 // navigation to succeed. The interstitial will stay visible until the
1720 // resulting DidNavigate.
1721 if (delegate_->GetInterstitialPage()) {
1722 static_cast<InterstitialPageImpl*>(delegate_->GetInterstitialPage())->
1723 CancelForNavigation();
1726 // For session history navigations only the pending_entry_index_ is set.
1727 if (!pending_entry_) {
1728 CHECK_NE(pending_entry_index_, -1);
1729 pending_entry_ = entries_[pending_entry_index_];
1732 // This call does not support re-entrancy. See http://crbug.com/347742.
1733 CHECK(!in_navigate_to_pending_entry_);
1734 in_navigate_to_pending_entry_ = true;
1735 bool success = NavigateToPendingEntryInternal(reload_type);
1736 in_navigate_to_pending_entry_ = false;
1738 if (!success)
1739 DiscardNonCommittedEntries();
1742 bool NavigationControllerImpl::NavigateToPendingEntryInternal(
1743 ReloadType reload_type) {
1744 DCHECK(pending_entry_);
1745 FrameTreeNode* root = delegate_->GetFrameTree()->root();
1747 // In default Chrome, there are no subframe FrameNavigationEntries. Either
1748 // navigate the main frame or use the main frame's FrameNavigationEntry to
1749 // tell the indicated frame where to go.
1750 if (!SiteIsolationPolicy::UseSubframeNavigationEntries()) {
1751 FrameNavigationEntry* frame_entry = GetPendingEntry()->GetFrameEntry(root);
1752 FrameTreeNode* frame = root;
1753 int ftn_id = GetPendingEntry()->frame_tree_node_id();
1754 if (ftn_id != -1) {
1755 frame = delegate_->GetFrameTree()->FindByID(ftn_id);
1756 DCHECK(frame);
1758 return frame->navigator()->NavigateToPendingEntry(frame, *frame_entry,
1759 reload_type, false);
1762 // In --site-per-process, we compare FrameNavigationEntries to see which
1763 // frames in the tree need to be navigated.
1764 FrameLoadVector same_document_loads;
1765 FrameLoadVector different_document_loads;
1766 if (GetLastCommittedEntry()) {
1767 FindFramesToNavigate(root, &same_document_loads, &different_document_loads);
1770 if (same_document_loads.empty() && different_document_loads.empty()) {
1771 // If we don't have any frames to navigate at this point, either
1772 // (1) there is no previous history entry to compare against, or
1773 // (2) we were unable to match any frames by name. In the first case,
1774 // doing a different document navigation to the root item is the only valid
1775 // thing to do. In the second case, we should have been able to find a
1776 // frame to navigate based on names if this were a same document
1777 // navigation, so we can safely assume this is the different document case.
1778 different_document_loads.push_back(
1779 std::make_pair(root, pending_entry_->GetFrameEntry(root)));
1782 // If all the frame loads fail, we will discard the pending entry.
1783 bool success = false;
1785 // Send all the same document frame loads before the different document loads.
1786 for (const auto& item : same_document_loads) {
1787 FrameTreeNode* frame = item.first;
1788 success |= frame->navigator()->NavigateToPendingEntry(frame, *item.second,
1789 reload_type, true);
1791 for (const auto& item : different_document_loads) {
1792 FrameTreeNode* frame = item.first;
1793 success |= frame->navigator()->NavigateToPendingEntry(frame, *item.second,
1794 reload_type, false);
1796 return success;
1799 void NavigationControllerImpl::FindFramesToNavigate(
1800 FrameTreeNode* frame,
1801 FrameLoadVector* same_document_loads,
1802 FrameLoadVector* different_document_loads) {
1803 DCHECK(pending_entry_);
1804 DCHECK_GE(last_committed_entry_index_, 0);
1805 FrameNavigationEntry* new_item = pending_entry_->GetFrameEntry(frame);
1806 FrameNavigationEntry* old_item =
1807 GetLastCommittedEntry()->GetFrameEntry(frame);
1808 if (!new_item)
1809 return;
1811 // Schedule a load in this frame if the new item isn't for the same item
1812 // sequence number in the same SiteInstance.
1813 if (!old_item ||
1814 new_item->item_sequence_number() != old_item->item_sequence_number() ||
1815 new_item->site_instance() != old_item->site_instance()) {
1816 if (old_item &&
1817 new_item->document_sequence_number() ==
1818 old_item->document_sequence_number()) {
1819 same_document_loads->push_back(std::make_pair(frame, new_item));
1820 } else {
1821 different_document_loads->push_back(std::make_pair(frame, new_item));
1823 return;
1826 for (size_t i = 0; i < frame->child_count(); i++) {
1827 FindFramesToNavigate(frame->child_at(i), same_document_loads,
1828 different_document_loads);
1832 void NavigationControllerImpl::NotifyNavigationEntryCommitted(
1833 LoadCommittedDetails* details) {
1834 details->entry = GetLastCommittedEntry();
1836 // We need to notify the ssl_manager_ before the web_contents_ so the
1837 // location bar will have up-to-date information about the security style
1838 // when it wants to draw. See http://crbug.com/11157
1839 ssl_manager_.DidCommitProvisionalLoad(*details);
1841 delegate_->NotifyNavigationStateChanged(INVALIDATE_TYPE_ALL);
1842 delegate_->NotifyNavigationEntryCommitted(*details);
1844 // TODO(avi): Remove. http://crbug.com/170921
1845 NotificationDetails notification_details =
1846 Details<LoadCommittedDetails>(details);
1847 NotificationService::current()->Notify(
1848 NOTIFICATION_NAV_ENTRY_COMMITTED,
1849 Source<NavigationController>(this),
1850 notification_details);
1853 // static
1854 size_t NavigationControllerImpl::max_entry_count() {
1855 if (max_entry_count_for_testing_ != kMaxEntryCountForTestingNotSet)
1856 return max_entry_count_for_testing_;
1857 return kMaxSessionHistoryEntries;
1860 void NavigationControllerImpl::SetActive(bool is_active) {
1861 if (is_active && needs_reload_)
1862 LoadIfNecessary();
1865 void NavigationControllerImpl::LoadIfNecessary() {
1866 if (!needs_reload_)
1867 return;
1869 // Calling Reload() results in ignoring state, and not loading.
1870 // Explicitly use NavigateToPendingEntry so that the renderer uses the
1871 // cached state.
1872 if (pending_entry_) {
1873 NavigateToPendingEntry(NO_RELOAD);
1874 } else if (last_committed_entry_index_ != -1) {
1875 pending_entry_index_ = last_committed_entry_index_;
1876 NavigateToPendingEntry(NO_RELOAD);
1877 } else {
1878 // If there is something to reload, the successful reload will clear the
1879 // |needs_reload_| flag. Otherwise, just do it here.
1880 needs_reload_ = false;
1884 void NavigationControllerImpl::NotifyEntryChanged(
1885 const NavigationEntry* entry) {
1886 EntryChangedDetails det;
1887 det.changed_entry = entry;
1888 det.index = GetIndexOfEntry(
1889 NavigationEntryImpl::FromNavigationEntry(entry));
1890 NotificationService::current()->Notify(
1891 NOTIFICATION_NAV_ENTRY_CHANGED,
1892 Source<NavigationController>(this),
1893 Details<EntryChangedDetails>(&det));
1896 void NavigationControllerImpl::FinishRestore(int selected_index,
1897 RestoreType type) {
1898 DCHECK(selected_index >= 0 && selected_index < GetEntryCount());
1899 ConfigureEntriesForRestore(&entries_, type);
1901 SetMaxRestoredPageID(static_cast<int32>(GetEntryCount()));
1903 last_committed_entry_index_ = selected_index;
1906 void NavigationControllerImpl::DiscardNonCommittedEntriesInternal() {
1907 DiscardPendingEntry(false);
1908 DiscardTransientEntry();
1911 void NavigationControllerImpl::DiscardPendingEntry(bool was_failure) {
1912 // It is not safe to call DiscardPendingEntry while NavigateToEntry is in
1913 // progress, since this will cause a use-after-free. (We only allow this
1914 // when the tab is being destroyed for shutdown, since it won't return to
1915 // NavigateToEntry in that case.) http://crbug.com/347742.
1916 CHECK(!in_navigate_to_pending_entry_ || delegate_->IsBeingDestroyed());
1918 if (was_failure && pending_entry_) {
1919 failed_pending_entry_id_ = pending_entry_->GetUniqueID();
1920 failed_pending_entry_should_replace_ =
1921 pending_entry_->should_replace_entry();
1922 } else {
1923 failed_pending_entry_id_ = 0;
1926 if (pending_entry_index_ == -1)
1927 delete pending_entry_;
1928 pending_entry_ = NULL;
1929 pending_entry_index_ = -1;
1932 void NavigationControllerImpl::DiscardTransientEntry() {
1933 if (transient_entry_index_ == -1)
1934 return;
1935 entries_.erase(entries_.begin() + transient_entry_index_);
1936 if (last_committed_entry_index_ > transient_entry_index_)
1937 last_committed_entry_index_--;
1938 transient_entry_index_ = -1;
1941 int NavigationControllerImpl::GetEntryIndexWithPageID(
1942 SiteInstance* instance, int32 page_id) const {
1943 for (int i = static_cast<int>(entries_.size()) - 1; i >= 0; --i) {
1944 if ((entries_[i]->site_instance() == instance) &&
1945 (entries_[i]->GetPageID() == page_id))
1946 return i;
1948 return -1;
1951 int NavigationControllerImpl::GetEntryIndexWithUniqueID(
1952 int nav_entry_id) const {
1953 for (int i = static_cast<int>(entries_.size()) - 1; i >= 0; --i) {
1954 if (entries_[i]->GetUniqueID() == nav_entry_id)
1955 return i;
1957 return -1;
1960 NavigationEntryImpl* NavigationControllerImpl::GetTransientEntry() const {
1961 if (transient_entry_index_ == -1)
1962 return NULL;
1963 return entries_[transient_entry_index_];
1966 void NavigationControllerImpl::SetTransientEntry(
1967 scoped_ptr<NavigationEntry> entry) {
1968 // Discard any current transient entry, we can only have one at a time.
1969 int index = 0;
1970 if (last_committed_entry_index_ != -1)
1971 index = last_committed_entry_index_ + 1;
1972 DiscardTransientEntry();
1973 entries_.insert(entries_.begin() + index,
1974 NavigationEntryImpl::FromNavigationEntry(entry.release()));
1975 transient_entry_index_ = index;
1976 delegate_->NotifyNavigationStateChanged(INVALIDATE_TYPE_ALL);
1979 void NavigationControllerImpl::InsertEntriesFrom(
1980 const NavigationControllerImpl& source,
1981 int max_index) {
1982 DCHECK_LE(max_index, source.GetEntryCount());
1983 size_t insert_index = 0;
1984 for (int i = 0; i < max_index; i++) {
1985 // When cloning a tab, copy all entries except interstitial pages.
1986 if (source.entries_[i]->GetPageType() != PAGE_TYPE_INTERSTITIAL) {
1987 // TODO(creis): Once we start sharing FrameNavigationEntries between
1988 // NavigationEntries, it will not be safe to share them with another tab.
1989 // Must have a version of Clone that recreates them.
1990 entries_.insert(entries_.begin() + insert_index++,
1991 source.entries_[i]->Clone().Pass());
1996 void NavigationControllerImpl::SetGetTimestampCallbackForTest(
1997 const base::Callback<base::Time()>& get_timestamp_callback) {
1998 get_timestamp_callback_ = get_timestamp_callback;
2001 } // namespace content