blob: 57da592e38e0f3189913c5ceb155653570c09807 [file] [log] [blame]
[email protected]64c820732012-01-05 20:50:341// Copyright (c) 2012 The Chromium Authors. All rights reserved.
[email protected]bfdffe2b2009-04-24 22:05:352// Use of this source code is governed by a BSD-style license that can be
3// found in the LICENSE file.
4
5#include "chrome/browser/extensions/extension_function_dispatcher.h"
6
[email protected]4b64d712013-01-17 17:53:177#include "base/bind.h"
[email protected]ffbec692012-02-26 20:26:428#include "base/json/json_string_value_serializer.h"
[email protected]5bc248a2012-04-04 23:38:119#include "base/lazy_instance.h"
[email protected]35548ab2013-05-15 08:59:4710#include "base/logging.h"
[email protected]3b63f8f42011-03-28 01:54:1511#include "base/memory/ref_counted.h"
[email protected]d09a4ce1c2013-07-24 17:37:0212#include "base/process/process.h"
[email protected]bfdffe2b2009-04-24 22:05:3513#include "base/values.h"
[email protected]17d40f02010-07-01 01:18:0614#include "build/build_config.h"
[email protected]05602fa32013-08-01 06:30:4315#include "chrome/browser/extensions/activity_log/activity_action_constants.h"
[email protected]17263b22013-05-16 03:29:2216#include "chrome/browser/extensions/activity_log/activity_log.h"
[email protected]05602fa32013-08-01 06:30:4317#include "chrome/browser/extensions/api/activity_log_private/activity_log_private_api.h"
[email protected]ae33d322012-03-19 22:24:3518#include "chrome/browser/extensions/extension_function_registry.h"
[email protected]2f69b382011-02-19 00:34:2519#include "chrome/browser/extensions/extension_service.h"
[email protected]efb4b082012-10-17 22:28:2820#include "chrome/browser/extensions/extension_system.h"
[email protected]a7ff4b72013-10-17 20:56:0221#include "chrome/browser/extensions/extension_util.h"
[email protected]8f9d4eb2011-02-05 01:39:1022#include "chrome/browser/extensions/extension_web_ui.h"
[email protected]ed2b1002011-05-25 14:12:1023#include "chrome/browser/external_protocol/external_protocol_handler.h"
[email protected]8ecad5e2010-12-02 21:18:3324#include "chrome/browser/profiles/profile.h"
[email protected]c357acb42011-06-09 20:52:4225#include "chrome/browser/renderer_host/chrome_render_message_filter.h"
[email protected]44c49c92011-03-28 16:17:2326#include "chrome/common/extensions/extension_messages.h"
[email protected]615d88f2011-12-13 01:47:4427#include "chrome/common/extensions/extension_set.h"
[email protected]9c45b7182009-08-04 16:44:4328#include "chrome/common/url_constants.h"
[email protected]4b64d712013-01-17 17:53:1729#include "content/public/browser/browser_thread.h"
[email protected]c333e792012-01-06 16:57:3930#include "content/public/browser/render_process_host.h"
[email protected]9c1662b2012-03-06 15:44:3331#include "content/public/browser/render_view_host.h"
[email protected]d6ec84a2013-11-01 13:07:3832#include "content/public/browser/user_metrics.h"
[email protected]ab2a7e3c2013-10-22 03:41:3633#include "content/public/browser/web_contents.h"
34#include "content/public/browser/web_contents_observer.h"
[email protected]35548ab2013-05-15 08:59:4735#include "content/public/common/result_codes.h"
[email protected]50de9aa22013-11-14 06:30:3436#include "extensions/browser/process_map.h"
[email protected]38427a12013-11-09 17:34:2037#include "extensions/browser/quota_service.h"
[email protected]d6ec84a2013-11-01 13:07:3838#include "extensions/common/extension_api.h"
[email protected]f82d57b52011-04-27 19:13:1739#include "ipc/ipc_message.h"
40#include "ipc/ipc_message_macros.h"
[email protected]d0fcff72013-07-23 02:45:4341#include "webkit/common/resource_type.h"
[email protected]61b55b62011-03-24 09:03:1042
[email protected]1c321ee2012-05-21 03:02:3443using extensions::Extension;
[email protected]83820d42011-11-12 22:03:1144using extensions::ExtensionAPI;
[email protected]b5b26b72013-08-02 00:25:1145using extensions::Feature;
[email protected]eaabba22012-03-07 15:02:1146using content::RenderViewHost;
[email protected]83820d42011-11-12 22:03:1147
[email protected]5bc248a2012-04-04 23:38:1148namespace {
49
[email protected]e5a440c2013-06-04 21:55:1250void LogSuccess(const std::string& extension_id,
[email protected]4b64d712013-01-17 17:53:1751 const std::string& api_name,
[email protected]aeca23f2013-06-21 22:34:4152 scoped_ptr<base::ListValue> args,
[email protected]4b64d712013-01-17 17:53:1753 Profile* profile) {
54 // The ActivityLog can only be accessed from the main (UI) thread. If we're
55 // running on the wrong thread, re-dispatch from the main thread.
56 if (!BrowserThread::CurrentlyOn(BrowserThread::UI)) {
57 BrowserThread::PostTask(BrowserThread::UI,
58 FROM_HERE,
59 base::Bind(&LogSuccess,
[email protected]e5a440c2013-06-04 21:55:1260 extension_id,
[email protected]4b64d712013-01-17 17:53:1761 api_name,
[email protected]c02087b512013-02-04 03:09:2062 base::Passed(&args),
[email protected]4b64d712013-01-17 17:53:1763 profile));
64 } else {
65 extensions::ActivityLog* activity_log =
66 extensions::ActivityLog::GetInstance(profile);
[email protected]05602fa32013-08-01 06:30:4367 scoped_refptr<extensions::Action> action =
68 new extensions::Action(extension_id,
69 base::Time::Now(),
70 extensions::Action::ACTION_API_CALL,
71 api_name);
72 action->set_args(args.Pass());
73 activity_log->LogAction(action);
[email protected]efd75992011-12-15 22:42:4274 }
75}
76
[email protected]5bc248a2012-04-04 23:38:1177// Separate copy of ExtensionAPI used for IO thread extension functions. We need
78// this because ExtensionAPI has mutable data. It should be possible to remove
79// this once all the extension APIs are updated to the feature system.
80struct Static {
81 Static()
82 : api(extensions::ExtensionAPI::CreateWithDefaultConfiguration()) {
83 }
84 scoped_ptr<extensions::ExtensionAPI> api;
85};
86base::LazyInstance<Static> g_global_io_data = LAZY_INSTANCE_INITIALIZER;
87
[email protected]35548ab2013-05-15 08:59:4788// Kills the specified process because it sends us a malformed message.
89void KillBadMessageSender(base::ProcessHandle process) {
90 NOTREACHED();
91 content::RecordAction(content::UserMetricsAction("BadMessageTerminate_EFD"));
92 if (process)
93 base::KillProcess(process, content::RESULT_CODE_KILLED_BAD_MESSAGE, false);
94}
95
96void CommonResponseCallback(IPC::Sender* ipc_sender,
97 int routing_id,
98 base::ProcessHandle peer_process,
99 int request_id,
100 ExtensionFunction::ResponseType type,
101 const base::ListValue& results,
102 const std::string& error) {
103 DCHECK(ipc_sender);
104
105 if (type == ExtensionFunction::BAD_MESSAGE) {
106 // The renderer has done validation before sending extension api requests.
107 // Therefore, we should never receive a request that is invalid in a way
108 // that JSON validation in the renderer should have caught. It could be an
109 // attacker trying to exploit the browser, so we crash the renderer instead.
110 LOG(ERROR) <<
111 "Terminating renderer because of malformed extension message.";
112 if (content::RenderProcessHost::run_renderer_in_process()) {
113 // In single process mode it is better if we don't suicide but just crash.
114 CHECK(false);
115 } else {
116 KillBadMessageSender(peer_process);
117 }
118
119 return;
120 }
121
122 ipc_sender->Send(new ExtensionMsg_Response(
123 routing_id, request_id, type == ExtensionFunction::SUCCEEDED, results,
124 error));
125}
126
127void IOThreadResponseCallback(
128 const base::WeakPtr<ChromeRenderMessageFilter>& ipc_sender,
129 int routing_id,
130 int request_id,
131 ExtensionFunction::ResponseType type,
132 const base::ListValue& results,
133 const std::string& error) {
[email protected]e8dad9b2013-06-04 04:43:45134 if (!ipc_sender.get())
[email protected]35548ab2013-05-15 08:59:47135 return;
136
[email protected]e8dad9b2013-06-04 04:43:45137 CommonResponseCallback(ipc_sender.get(),
138 routing_id,
[email protected]950be552013-07-10 19:13:02139 ipc_sender->PeerHandle(),
[email protected]e8dad9b2013-06-04 04:43:45140 request_id,
141 type,
142 results,
143 error);
[email protected]35548ab2013-05-15 08:59:47144}
145
[email protected]5bc248a2012-04-04 23:38:11146} // namespace
147
[email protected]35548ab2013-05-15 08:59:47148class ExtensionFunctionDispatcher::UIThreadResponseCallbackWrapper
[email protected]ab2a7e3c2013-10-22 03:41:36149 : public content::WebContentsObserver {
[email protected]35548ab2013-05-15 08:59:47150 public:
151 UIThreadResponseCallbackWrapper(
152 const base::WeakPtr<ExtensionFunctionDispatcher>& dispatcher,
153 RenderViewHost* render_view_host)
[email protected]ab2a7e3c2013-10-22 03:41:36154 : content::WebContentsObserver(
155 content::WebContents::FromRenderViewHost(render_view_host)),
[email protected]35548ab2013-05-15 08:59:47156 dispatcher_(dispatcher),
[email protected]ab2a7e3c2013-10-22 03:41:36157 render_view_host_(render_view_host),
[email protected]35548ab2013-05-15 08:59:47158 weak_ptr_factory_(this) {
159 }
160
161 virtual ~UIThreadResponseCallbackWrapper() {
162 }
163
[email protected]ab2a7e3c2013-10-22 03:41:36164 // content::WebContentsObserver overrides.
165 virtual void RenderViewDeleted(
[email protected]35548ab2013-05-15 08:59:47166 RenderViewHost* render_view_host) OVERRIDE {
167 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI));
[email protected]ab2a7e3c2013-10-22 03:41:36168 if (render_view_host != render_view_host_)
169 return;
170
[email protected]e8dad9b2013-06-04 04:43:45171 if (dispatcher_.get()) {
172 dispatcher_->ui_thread_response_callback_wrappers_
173 .erase(render_view_host);
[email protected]35548ab2013-05-15 08:59:47174 }
175
[email protected]ab2a7e3c2013-10-22 03:41:36176 delete this;
[email protected]35548ab2013-05-15 08:59:47177 }
178
179 ExtensionFunction::ResponseCallback CreateCallback(int request_id) {
180 return base::Bind(
181 &UIThreadResponseCallbackWrapper::OnExtensionFunctionCompleted,
182 weak_ptr_factory_.GetWeakPtr(),
183 request_id);
184 }
185
186 private:
187 void OnExtensionFunctionCompleted(int request_id,
188 ExtensionFunction::ResponseType type,
189 const base::ListValue& results,
190 const std::string& error) {
191 CommonResponseCallback(
[email protected]ab2a7e3c2013-10-22 03:41:36192 render_view_host_, render_view_host_->GetRoutingID(),
193 render_view_host_->GetProcess()->GetHandle(), request_id, type,
[email protected]35548ab2013-05-15 08:59:47194 results, error);
195 }
196
197 base::WeakPtr<ExtensionFunctionDispatcher> dispatcher_;
[email protected]ab2a7e3c2013-10-22 03:41:36198 content::RenderViewHost* render_view_host_;
[email protected]35548ab2013-05-15 08:59:47199 base::WeakPtrFactory<UIThreadResponseCallbackWrapper> weak_ptr_factory_;
200
201 DISALLOW_COPY_AND_ASSIGN(UIThreadResponseCallbackWrapper);
202};
203
[email protected]44f4b132012-07-17 20:36:57204extensions::WindowController*
205ExtensionFunctionDispatcher::Delegate::GetExtensionWindowController()
[email protected]d72d3a62012-05-10 03:45:08206 const {
207 return NULL;
208}
209
210content::WebContents*
[email protected]44f4b132012-07-17 20:36:57211ExtensionFunctionDispatcher::Delegate::GetAssociatedWebContents() const {
[email protected]d72d3a62012-05-10 03:45:08212 return NULL;
213}
[email protected]5bc248a2012-04-04 23:38:11214
[email protected]1ce88e82013-06-28 05:17:10215content::WebContents*
216ExtensionFunctionDispatcher::Delegate::GetVisibleWebContents() const {
217 return GetAssociatedWebContents();
218}
219
[email protected]bfdffe2b2009-04-24 22:05:35220void ExtensionFunctionDispatcher::GetAllFunctionNames(
221 std::vector<std::string>* names) {
[email protected]ae33d322012-03-19 22:24:35222 ExtensionFunctionRegistry::GetInstance()->GetAllNames(names);
[email protected]bfdffe2b2009-04-24 22:05:35223}
224
[email protected]b83e4602009-05-15 22:58:33225bool ExtensionFunctionDispatcher::OverrideFunction(
226 const std::string& name, ExtensionFunctionFactory factory) {
[email protected]ae33d322012-03-19 22:24:35227 return ExtensionFunctionRegistry::GetInstance()->OverrideFunction(name,
228 factory);
[email protected]b83e4602009-05-15 22:58:33229}
230
231void ExtensionFunctionDispatcher::ResetFunctions() {
[email protected]ae33d322012-03-19 22:24:35232 ExtensionFunctionRegistry::GetInstance()->ResetFunctions();
[email protected]b83e4602009-05-15 22:58:33233}
234
[email protected]c357acb42011-06-09 20:52:42235// static
236void ExtensionFunctionDispatcher::DispatchOnIOThread(
[email protected]38427a12013-11-09 17:34:20237 extensions::InfoMap* extension_info_map,
[email protected]673514522011-07-13 18:17:18238 void* profile,
[email protected]c357acb42011-06-09 20:52:42239 int render_process_id,
240 base::WeakPtr<ChromeRenderMessageFilter> ipc_sender,
[email protected]74e21e72012-07-09 21:20:53241 int routing_id,
[email protected]c357acb42011-06-09 20:52:42242 const ExtensionHostMsg_Request_Params& params) {
243 const Extension* extension =
[email protected]83820d42011-11-12 22:03:11244 extension_info_map->extensions().GetByID(params.extension_id);
[email protected]4b64d712013-01-17 17:53:17245 Profile* profile_cast = static_cast<Profile*>(profile);
[email protected]35548ab2013-05-15 08:59:47246
247 ExtensionFunction::ResponseCallback callback(
248 base::Bind(&IOThreadResponseCallback, ipc_sender, routing_id,
249 params.request_id));
250
[email protected]6f371442011-11-09 06:45:46251 scoped_refptr<ExtensionFunction> function(
252 CreateExtensionFunction(params, extension, render_process_id,
[email protected]5bc248a2012-04-04 23:38:11253 extension_info_map->process_map(),
254 g_global_io_data.Get().api.get(),
[email protected]35548ab2013-05-15 08:59:47255 profile, callback));
[email protected]4b64d712013-01-17 17:53:17256 scoped_ptr<ListValue> args(params.arguments.DeepCopy());
257
[email protected]ecc854a2013-08-22 10:12:42258 if (!function.get())
[email protected]c357acb42011-06-09 20:52:42259 return;
260
261 IOThreadExtensionFunction* function_io =
262 function->AsIOThreadExtensionFunction();
263 if (!function_io) {
264 NOTREACHED();
265 return;
266 }
[email protected]44295a12013-06-05 08:45:46267 function_io->set_ipc_sender(ipc_sender, routing_id);
[email protected]c357acb42011-06-09 20:52:42268 function_io->set_extension_info_map(extension_info_map);
269 function->set_include_incognito(
270 extension_info_map->IsIncognitoEnabled(extension->id()));
[email protected]fd50e7b2011-11-03 09:20:25271
[email protected]ecc854a2013-08-22 10:12:42272 if (!CheckPermissions(function.get(), extension, params, callback))
[email protected]d2fe22ff2012-10-03 00:40:07273 return;
[email protected]d2fe22ff2012-10-03 00:40:07274
[email protected]38427a12013-11-09 17:34:20275 extensions::QuotaService* quota = extension_info_map->GetQuotaService();
[email protected]85231d72012-08-31 09:45:29276 std::string violation_error = quota->Assess(extension->id(),
[email protected]dc24976f2013-06-02 21:15:09277 function.get(),
[email protected]85231d72012-08-31 09:45:29278 &params.arguments,
279 base::TimeTicks::Now());
280 if (violation_error.empty()) {
[email protected]e5a440c2013-06-04 21:55:12281 LogSuccess(extension->id(),
[email protected]4b64d712013-01-17 17:53:17282 params.name,
283 args.Pass(),
284 profile_cast);
[email protected]fd50e7b2011-11-03 09:20:25285 function->Run();
286 } else {
[email protected]85231d72012-08-31 09:45:29287 function->OnQuotaExceeded(violation_error);
[email protected]fd50e7b2011-11-03 09:20:25288 }
[email protected]c357acb42011-06-09 20:52:42289}
290
[email protected]96e6a1032013-11-28 06:58:03291ExtensionFunctionDispatcher::ExtensionFunctionDispatcher(
292 content::BrowserContext* browser_context,
293 Delegate* delegate)
294 : profile_(Profile::FromBrowserContext(browser_context)),
295 delegate_(delegate) {
[email protected]bfdffe2b2009-04-24 22:05:35296}
297
[email protected]32dda362009-06-05 19:07:01298ExtensionFunctionDispatcher::~ExtensionFunctionDispatcher() {
[email protected]32dda362009-06-05 19:07:01299}
300
[email protected]c5dbef02011-05-13 05:06:09301void ExtensionFunctionDispatcher::Dispatch(
302 const ExtensionHostMsg_Request_Params& params,
303 RenderViewHost* render_view_host) {
[email protected]35548ab2013-05-15 08:59:47304 UIThreadResponseCallbackWrapperMap::const_iterator
305 iter = ui_thread_response_callback_wrappers_.find(render_view_host);
306 UIThreadResponseCallbackWrapper* callback_wrapper = NULL;
307 if (iter == ui_thread_response_callback_wrappers_.end()) {
308 callback_wrapper = new UIThreadResponseCallbackWrapper(AsWeakPtr(),
309 render_view_host);
310 ui_thread_response_callback_wrappers_[render_view_host] = callback_wrapper;
311 } else {
312 callback_wrapper = iter->second;
313 }
314
315 DispatchWithCallback(params, render_view_host,
316 callback_wrapper->CreateCallback(params.request_id));
317}
318
319void ExtensionFunctionDispatcher::DispatchWithCallback(
320 const ExtensionHostMsg_Request_Params& params,
321 RenderViewHost* render_view_host,
322 const ExtensionFunction::ResponseCallback& callback) {
323 // TODO(yzshen): There is some shared logic between this method and
324 // DispatchOnIOThread(). It is nice to deduplicate.
[email protected]c5dbef02011-05-13 05:06:09325 ExtensionService* service = profile()->GetExtensionService();
[email protected]98b6d942013-11-10 00:34:07326 extensions::ProcessManager* process_manager =
[email protected]efb4b082012-10-17 22:28:28327 extensions::ExtensionSystem::Get(profile())->process_manager();
[email protected]6f371442011-11-09 06:45:46328 extensions::ProcessMap* process_map = service->process_map();
329 if (!service || !process_map)
[email protected]c5dbef02011-05-13 05:06:09330 return;
331
[email protected]615d88f2011-12-13 01:47:44332 const Extension* extension = service->extensions()->GetByID(
333 params.extension_id);
[email protected]c5dbef02011-05-13 05:06:09334 if (!extension)
[email protected]be9915fb2013-07-18 09:28:55335 extension = service->extensions()->GetHostedAppByURL(params.source_url);
[email protected]c5dbef02011-05-13 05:06:09336
[email protected]8add5412011-10-01 21:02:14337 scoped_refptr<ExtensionFunction> function(
[email protected]74e21e72012-07-09 21:20:53338 CreateExtensionFunction(params, extension,
[email protected]9f76c1e2012-03-05 15:15:58339 render_view_host->GetProcess()->GetID(),
[email protected]6f371442011-11-09 06:45:46340 *(service->process_map()),
[email protected]5bc248a2012-04-04 23:38:11341 extensions::ExtensionAPI::GetSharedInstance(),
[email protected]35548ab2013-05-15 08:59:47342 profile(), callback));
[email protected]4b64d712013-01-17 17:53:17343 scoped_ptr<ListValue> args(params.arguments.DeepCopy());
344
[email protected]ecc854a2013-08-22 10:12:42345 if (!function.get())
[email protected]f82d57b52011-04-27 19:13:17346 return;
[email protected]f82d57b52011-04-27 19:13:17347
[email protected]a2aef2e2011-05-26 22:48:12348 UIThreadExtensionFunction* function_ui =
349 function->AsUIThreadExtensionFunction();
350 if (!function_ui) {
351 NOTREACHED();
352 return;
353 }
[email protected]35548ab2013-05-15 08:59:47354 function_ui->SetRenderViewHost(render_view_host);
[email protected]a2aef2e2011-05-26 22:48:12355 function_ui->set_dispatcher(AsWeakPtr());
[email protected]21a40082013-10-28 21:19:23356 function_ui->set_context(profile_);
[email protected]a7ff4b72013-10-17 20:56:02357 function->set_include_incognito(extension_util::CanCrossIncognito(extension,
358 service));
[email protected]cb0ce1e022010-03-10 19:54:41359
[email protected]ecc854a2013-08-22 10:12:42360 if (!CheckPermissions(function.get(), extension, params, callback))
[email protected]d2fe22ff2012-10-03 00:40:07361 return;
[email protected]d2fe22ff2012-10-03 00:40:07362
[email protected]38427a12013-11-09 17:34:20363 extensions::QuotaService* quota = service->quota_service();
[email protected]85231d72012-08-31 09:45:29364 std::string violation_error = quota->Assess(extension->id(),
[email protected]dc24976f2013-06-02 21:15:09365 function.get(),
[email protected]85231d72012-08-31 09:45:29366 &params.arguments,
367 base::TimeTicks::Now());
368 if (violation_error.empty()) {
[email protected]d070ec62010-07-27 21:28:26369 // See crbug.com/39178.
370 ExternalProtocolHandler::PermitLaunchUrl();
[email protected]e5a440c2013-06-04 21:55:12371 LogSuccess(extension->id(), params.name, args.Pass(), profile());
[email protected]d13950e2009-12-04 01:43:02372 function->Run();
373 } else {
[email protected]85231d72012-08-31 09:45:29374 function->OnQuotaExceeded(violation_error);
[email protected]d13950e2009-12-04 01:43:02375 }
[email protected]720ad1312012-02-27 23:07:36376
[email protected]efb4b082012-10-17 22:28:28377 // Note: do not access |this| after this point. We may have been deleted
378 // if function->Run() ended up closing the tab that owns us.
379
[email protected]5734e882012-05-04 22:17:56380 // Check if extension was uninstalled by management.uninstall.
381 if (!service->extensions()->GetByID(params.extension_id))
382 return;
383
[email protected]720ad1312012-02-27 23:07:36384 // We only adjust the keepalive count for UIThreadExtensionFunction for
385 // now, largely for simplicity's sake. This is OK because currently, only
386 // the webRequest API uses IOThreadExtensionFunction, and that API is not
387 // compatible with lazy background pages.
[email protected]efb4b082012-10-17 22:28:28388 process_manager->IncrementLazyKeepaliveCount(extension);
[email protected]720ad1312012-02-27 23:07:36389}
390
391void ExtensionFunctionDispatcher::OnExtensionFunctionCompleted(
392 const Extension* extension) {
[email protected]be93bba02012-10-24 16:44:03393 extensions::ExtensionSystem::Get(profile())->process_manager()->
394 DecrementLazyKeepaliveCount(extension);
[email protected]bfdffe2b2009-04-24 22:05:35395}
396
[email protected]c357acb42011-06-09 20:52:42397// static
[email protected]d2fe22ff2012-10-03 00:40:07398bool ExtensionFunctionDispatcher::CheckPermissions(
399 ExtensionFunction* function,
400 const Extension* extension,
401 const ExtensionHostMsg_Request_Params& params,
[email protected]35548ab2013-05-15 08:59:47402 const ExtensionFunction::ResponseCallback& callback) {
[email protected]d2fe22ff2012-10-03 00:40:07403 if (!function->HasPermission()) {
404 LOG(ERROR) << "Extension " << extension->id() << " does not have "
405 << "permission to function: " << params.name;
[email protected]35548ab2013-05-15 08:59:47406 SendAccessDenied(callback);
[email protected]d2fe22ff2012-10-03 00:40:07407 return false;
408 }
409 return true;
410}
411
[email protected]f33542112013-02-04 16:52:38412namespace {
413
414// Only COMPONENT hosted apps may call extension APIs, and they are limited
415// to just the permissions they explicitly request. They should not have access
416// to extension APIs like eg chrome.runtime, chrome.windows, etc. that normally
417// are available without permission.
[email protected]b5b26b72013-08-02 00:25:11418// TODO(mpcomplete): move this to ExtensionFunction::HasPermission (or remove
419// it altogether).
[email protected]f33542112013-02-04 16:52:38420bool AllowHostedAppAPICall(const Extension& extension,
421 const GURL& source_url,
422 const std::string& function_name) {
423 if (extension.location() != extensions::Manifest::COMPONENT)
424 return false;
425
426 if (!extension.web_extent().MatchesURL(source_url))
427 return false;
428
[email protected]b5b26b72013-08-02 00:25:11429 Feature::Availability availability =
430 ExtensionAPI::GetSharedInstance()->IsAvailable(
431 function_name, &extension, Feature::BLESSED_EXTENSION_CONTEXT,
432 source_url);
433 return availability.is_available();
[email protected]f33542112013-02-04 16:52:38434}
435
436} // namespace
437
438
[email protected]d2fe22ff2012-10-03 00:40:07439// static
[email protected]c357acb42011-06-09 20:52:42440ExtensionFunction* ExtensionFunctionDispatcher::CreateExtensionFunction(
441 const ExtensionHostMsg_Request_Params& params,
442 const Extension* extension,
[email protected]6f371442011-11-09 06:45:46443 int requesting_process_id,
444 const extensions::ProcessMap& process_map,
[email protected]5bc248a2012-04-04 23:38:11445 extensions::ExtensionAPI* api,
[email protected]673514522011-07-13 18:17:18446 void* profile,
[email protected]35548ab2013-05-15 08:59:47447 const ExtensionFunction::ResponseCallback& callback) {
[email protected]c357acb42011-06-09 20:52:42448 if (!extension) {
[email protected]6f371442011-11-09 06:45:46449 LOG(ERROR) << "Specified extension does not exist.";
[email protected]35548ab2013-05-15 08:59:47450 SendAccessDenied(callback);
[email protected]6f371442011-11-09 06:45:46451 return NULL;
452 }
453
[email protected]f33542112013-02-04 16:52:38454 // Most hosted apps can't call APIs.
455 bool allowed = true;
456 if (extension->is_hosted_app())
[email protected]35548ab2013-05-15 08:59:47457 allowed = AllowHostedAppAPICall(*extension, params.source_url, params.name);
[email protected]f33542112013-02-04 16:52:38458
459 // Privileged APIs can only be called from the process the extension
460 // is running in.
461 if (allowed && api->IsPrivileged(params.name))
462 allowed = process_map.Contains(extension->id(), requesting_process_id);
463
464 if (!allowed) {
465 LOG(ERROR) << "Extension API call disallowed - name:" << params.name
466 << " pid:" << requesting_process_id
[email protected]6f371442011-11-09 06:45:46467 << " from URL " << params.source_url.spec();
[email protected]35548ab2013-05-15 08:59:47468 SendAccessDenied(callback);
[email protected]c357acb42011-06-09 20:52:42469 return NULL;
470 }
471
[email protected]c357acb42011-06-09 20:52:42472 ExtensionFunction* function =
[email protected]ae33d322012-03-19 22:24:35473 ExtensionFunctionRegistry::GetInstance()->NewFunction(params.name);
[email protected]42681ec82013-04-09 12:40:14474 if (!function) {
475 LOG(ERROR) << "Unknown Extension API - " << params.name;
[email protected]35548ab2013-05-15 08:59:47476 SendAccessDenied(callback);
[email protected]42681ec82013-04-09 12:40:14477 return NULL;
478 }
479
[email protected]c357acb42011-06-09 20:52:42480 function->SetArgs(&params.arguments);
481 function->set_source_url(params.source_url);
482 function->set_request_id(params.request_id);
483 function->set_has_callback(params.has_callback);
484 function->set_user_gesture(params.user_gesture);
485 function->set_extension(extension);
[email protected]637bf322011-10-01 20:46:32486 function->set_profile_id(profile);
[email protected]35548ab2013-05-15 08:59:47487 function->set_response_callback(callback);
[email protected]3d0e2262012-08-02 15:32:16488
[email protected]c357acb42011-06-09 20:52:42489 return function;
490}
491
492// static
[email protected]c5dbef02011-05-13 05:06:09493void ExtensionFunctionDispatcher::SendAccessDenied(
[email protected]35548ab2013-05-15 08:59:47494 const ExtensionFunction::ResponseCallback& callback) {
[email protected]602542d2012-04-20 02:48:01495 ListValue empty_list;
[email protected]35548ab2013-05-15 08:59:47496 callback.Run(ExtensionFunction::FAILED, empty_list,
497 "Access to extension API denied.");
[email protected]bfdffe2b2009-04-24 22:05:35498}