blob: cf093d89c2e3a3b9ecd93d301a2060e335c4b310 [file] [log] [blame]
[email protected]144a8102012-01-14 01:05:311// Copyright (c) 2012 The Chromium Authors. All rights reserved.
license.botbf09a502008-08-24 00:55:552// Use of this source code is governed by a BSD-style license that can be
3// found in the LICENSE file.
initial.commit09911bf2008-07-26 23:55:294
[email protected]b6583592012-01-25 19:52:335#include "content/browser/site_instance_impl.h"
initial.commit09911bf2008-07-26 23:55:296
[email protected]313b80bd2011-11-23 03:49:107#include "base/command_line.h"
[email protected]39365212011-02-24 01:01:008#include "content/browser/browsing_instance.h"
[email protected]b9535422012-02-09 01:47:599#include "content/browser/child_process_security_policy_impl.h"
[email protected]f3b1a082011-11-18 00:34:3010#include "content/browser/renderer_host/render_process_host_impl.h"
[email protected]4c3a23582012-08-18 08:54:3411#include "content/browser/storage_partition_impl.h"
[email protected]87f3c082011-10-19 18:07:4412#include "content/public/browser/content_browser_client.h"
[email protected]f3b1a082011-11-18 00:34:3013#include "content/public/browser/render_process_host_factory.h"
[email protected]41fb79a52012-06-29 16:34:3314#include "content/public/browser/web_ui_controller_factory.h"
[email protected]313b80bd2011-11-23 03:49:1015#include "content/public/common/content_switches.h"
[email protected]a1d29162011-10-14 17:14:0316#include "content/public/common/url_constants.h"
[email protected]be28b5f42012-07-20 11:31:2517#include "net/base/registry_controlled_domains/registry_controlled_domain.h"
initial.commit09911bf2008-07-26 23:55:2918
[email protected]46488322012-10-30 03:22:2019namespace content {
[email protected]b6583592012-01-25 19:52:3320
[email protected]2ee0418e2009-06-26 21:00:4321static bool IsURLSameAsAnySiteInstance(const GURL& url) {
22 if (!url.is_valid())
23 return false;
[email protected]0f012df82011-05-19 14:15:2924
[email protected]89f550b2011-06-08 18:34:0325 // We treat javascript: as the same site as any URL since it is actually
26 // a modifier on existing pages.
[email protected]44b05812013-08-19 07:59:3527 if (url.SchemeIs(kJavaScriptScheme))
[email protected]0f012df82011-05-19 14:15:2928 return true;
[email protected]0f012df82011-05-19 14:15:2929
[email protected]f8a6d732013-03-02 22:46:0330 return url == GURL(kChromeUICrashURL) ||
31 url == GURL(kChromeUIKillURL) ||
32 url == GURL(kChromeUIHangURL) ||
[email protected]50f86bc2012-11-01 19:59:1333 url == GURL(kChromeUIShorthangURL);
[email protected]2ee0418e2009-06-26 21:00:4334}
35
[email protected]3059caa2013-06-06 03:48:4136const RenderProcessHostFactory*
37 SiteInstanceImpl::g_render_process_host_factory_ = NULL;
[email protected]b6583592012-01-25 19:52:3338int32 SiteInstanceImpl::next_site_instance_id_ = 1;
[email protected]992db4c2011-05-12 15:37:1539
[email protected]b6583592012-01-25 19:52:3340SiteInstanceImpl::SiteInstanceImpl(BrowsingInstance* browsing_instance)
[email protected]992db4c2011-05-12 15:37:1541 : id_(next_site_instance_id_++),
[email protected]cee12ab2013-07-12 01:53:0742 active_view_count_(0),
[email protected]992db4c2011-05-12 15:37:1543 browsing_instance_(browsing_instance),
[email protected]4566f132009-03-12 01:55:1344 process_(NULL),
[email protected]4566f132009-03-12 01:55:1345 has_site_(false) {
46 DCHECK(browsing_instance);
[email protected]4566f132009-03-12 01:55:1347}
48
[email protected]b6583592012-01-25 19:52:3349SiteInstanceImpl::~SiteInstanceImpl() {
[email protected]46488322012-10-30 03:22:2050 GetContentClient()->browser()->SiteInstanceDeleting(this);
[email protected]056ad2a2011-07-12 02:13:5551
[email protected]40bfaf32013-11-19 01:35:4352 if (process_)
53 process_->RemoveObserver(this);
54
initial.commit09911bf2008-07-26 23:55:2955 // Now that no one is referencing us, we can safely remove ourselves from
56 // the BrowsingInstance. Any future visits to a page from this site
57 // (within the same BrowsingInstance) can safely create a new SiteInstance.
58 if (has_site_)
[email protected]b6583592012-01-25 19:52:3359 browsing_instance_->UnregisterSiteInstance(
60 static_cast<SiteInstance*>(this));
initial.commit09911bf2008-07-26 23:55:2961}
62
[email protected]b6583592012-01-25 19:52:3363int32 SiteInstanceImpl::GetId() {
64 return id_;
65}
66
67bool SiteInstanceImpl::HasProcess() const {
[email protected]41fb79a52012-06-29 16:34:3368 if (process_ != NULL)
69 return true;
70
71 // If we would use process-per-site for this site, also check if there is an
72 // existing process that we would use if GetProcess() were called.
[email protected]46488322012-10-30 03:22:2073 BrowserContext* browser_context =
[email protected]41fb79a52012-06-29 16:34:3374 browsing_instance_->browser_context();
75 if (has_site_ &&
[email protected]1ae93fb12013-06-14 03:38:5676 RenderProcessHost::ShouldUseProcessPerSite(browser_context, site_) &&
[email protected]41fb79a52012-06-29 16:34:3377 RenderProcessHostImpl::GetProcessHostForSite(browser_context, site_)) {
78 return true;
79 }
80
81 return false;
[email protected]5ab79b02010-04-26 16:47:1182}
83
[email protected]41fb79a52012-06-29 16:34:3384RenderProcessHost* SiteInstanceImpl::GetProcess() {
[email protected]08c8ec7e2010-07-11 17:14:4885 // TODO(erikkay) It would be nice to ensure that the renderer type had been
86 // properly set before we get here. The default tab creation case winds up
87 // with no site set at this point, so it will default to TYPE_NORMAL. This
88 // may not be correct, so we'll wind up potentially creating a process that
89 // we then throw away, or worse sharing a process with the wrong process type.
90 // See crbug.com/43448.
91
initial.commit09911bf2008-07-26 23:55:2992 // Create a new process if ours went away or was reused.
[email protected]4566f132009-03-12 01:55:1393 if (!process_) {
[email protected]4c3a23582012-08-18 08:54:3494 BrowserContext* browser_context = browsing_instance_->browser_context();
[email protected]41fb79a52012-06-29 16:34:3395
96 // If we should use process-per-site mode (either in general or for the
97 // given site), then look for an existing RenderProcessHost for the site.
98 bool use_process_per_site = has_site_ &&
[email protected]1ae93fb12013-06-14 03:38:5699 RenderProcessHost::ShouldUseProcessPerSite(browser_context, site_);
[email protected]41fb79a52012-06-29 16:34:33100 if (use_process_per_site) {
101 process_ = RenderProcessHostImpl::GetProcessHostForSite(browser_context,
102 site_);
103 }
104
105 // If not (or if none found), see if we should reuse an existing process.
106 if (!process_ && RenderProcessHostImpl::ShouldTryToUseExistingProcessHost(
107 browser_context, site_)) {
108 process_ = RenderProcessHostImpl::GetExistingProcessHost(browser_context,
109 site_);
110 }
initial.commit09911bf2008-07-26 23:55:29111
112 // Otherwise (or if that fails), create a new one.
[email protected]4566f132009-03-12 01:55:13113 if (!process_) {
[email protected]3059caa2013-06-06 03:48:41114 if (g_render_process_host_factory_) {
115 process_ = g_render_process_host_factory_->CreateRenderProcessHost(
[email protected]f681b072013-06-06 21:53:12116 browser_context, this);
[email protected]a6df5112009-01-21 23:50:15117 } else {
[email protected]4c3a23582012-08-18 08:54:34118 StoragePartitionImpl* partition =
119 static_cast<StoragePartitionImpl*>(
120 BrowserContext::GetStoragePartition(browser_context, this));
[email protected]7b38b192013-03-23 18:39:31121 bool supports_browser_plugin = GetContentClient()->browser()->
122 SupportsBrowserPlugin(browser_context, site_);
[email protected]6eb1a11e2013-10-09 00:54:37123 process_ = new RenderProcessHostImpl(browser_context,
124 partition,
125 supports_browser_plugin,
126 site_.SchemeIs(kGuestScheme));
[email protected]a6df5112009-01-21 23:50:15127 }
128 }
[email protected]41fb79a52012-06-29 16:34:33129 CHECK(process_);
[email protected]40bfaf32013-11-19 01:35:43130 process_->AddObserver(this);
[email protected]41fb79a52012-06-29 16:34:33131
132 // If we are using process-per-site, we need to register this process
133 // for the current site so that we can find it again. (If no site is set
134 // at this time, we will register it in SetSite().)
135 if (use_process_per_site) {
136 RenderProcessHostImpl::RegisterProcessHostForSite(browser_context,
137 process_, site_);
138 }
initial.commit09911bf2008-07-26 23:55:29139
[email protected]46488322012-10-30 03:22:20140 GetContentClient()->browser()->SiteInstanceGotProcess(this);
[email protected]6f371442011-11-09 06:45:46141
[email protected]313b80bd2011-11-23 03:49:10142 if (has_site_)
143 LockToOrigin();
initial.commit09911bf2008-07-26 23:55:29144 }
[email protected]4566f132009-03-12 01:55:13145 DCHECK(process_);
initial.commit09911bf2008-07-26 23:55:29146
[email protected]4566f132009-03-12 01:55:13147 return process_;
initial.commit09911bf2008-07-26 23:55:29148}
149
[email protected]b6583592012-01-25 19:52:33150void SiteInstanceImpl::SetSite(const GURL& url) {
initial.commit09911bf2008-07-26 23:55:29151 // A SiteInstance's site should not change.
152 // TODO(creis): When following links or script navigations, we can currently
153 // render pages from other sites in this SiteInstance. This will eventually
154 // be fixed, but until then, we should still not set the site of a
155 // SiteInstance more than once.
156 DCHECK(!has_site_);
157
158 // Remember that this SiteInstance has been used to load a URL, even if the
159 // URL is invalid.
160 has_site_ = true;
[email protected]4c3a23582012-08-18 08:54:34161 BrowserContext* browser_context = browsing_instance_->browser_context();
[email protected]41fb79a52012-06-29 16:34:33162 site_ = GetSiteForURL(browser_context, url);
initial.commit09911bf2008-07-26 23:55:29163
164 // Now that we have a site, register it with the BrowsingInstance. This
165 // ensures that we won't create another SiteInstance for this site within
166 // the same BrowsingInstance, because all same-site pages within a
167 // BrowsingInstance can script each other.
168 browsing_instance_->RegisterSiteInstance(this);
[email protected]313b80bd2011-11-23 03:49:10169
[email protected]41fb79a52012-06-29 16:34:33170 if (process_) {
[email protected]313b80bd2011-11-23 03:49:10171 LockToOrigin();
[email protected]41fb79a52012-06-29 16:34:33172
173 // Ensure the process is registered for this site if necessary.
[email protected]1ae93fb12013-06-14 03:38:56174 if (RenderProcessHost::ShouldUseProcessPerSite(browser_context, site_)) {
[email protected]41fb79a52012-06-29 16:34:33175 RenderProcessHostImpl::RegisterProcessHostForSite(
176 browser_context, process_, site_);
177 }
178 }
initial.commit09911bf2008-07-26 23:55:29179}
180
[email protected]77ab17312012-09-28 15:34:59181const GURL& SiteInstanceImpl::GetSiteURL() const {
[email protected]b6583592012-01-25 19:52:33182 return site_;
183}
184
185bool SiteInstanceImpl::HasSite() const {
186 return has_site_;
187}
188
189bool SiteInstanceImpl::HasRelatedSiteInstance(const GURL& url) {
initial.commit09911bf2008-07-26 23:55:29190 return browsing_instance_->HasSiteInstance(url);
191}
192
[email protected]b6583592012-01-25 19:52:33193SiteInstance* SiteInstanceImpl::GetRelatedSiteInstance(const GURL& url) {
initial.commit09911bf2008-07-26 23:55:29194 return browsing_instance_->GetSiteInstanceForURL(url);
195}
196
[email protected]14392a52012-05-02 20:28:44197bool SiteInstanceImpl::IsRelatedSiteInstance(const SiteInstance* instance) {
[email protected]fc72bb12013-06-02 21:13:46198 return browsing_instance_.get() == static_cast<const SiteInstanceImpl*>(
199 instance)->browsing_instance_.get();
[email protected]14392a52012-05-02 20:28:44200}
201
[email protected]f88628d02012-11-11 17:58:59202bool SiteInstanceImpl::HasWrongProcessForURL(const GURL& url) {
[email protected]d292d8a2011-05-25 03:47:11203 // Having no process isn't a problem, since we'll assign it correctly.
[email protected]f88628d02012-11-11 17:58:59204 // Note that HasProcess() may return true if process_ is null, in
205 // process-per-site cases where there's an existing process available.
206 // We want to use such a process in the IsSuitableHost check, so we
207 // may end up assigning process_ in the GetProcess() call below.
208 if (!HasProcess())
[email protected]d292d8a2011-05-25 03:47:11209 return false;
210
[email protected]144a8102012-01-14 01:05:31211 // If the URL to navigate to can be associated with any site instance,
212 // we want to keep it in the same process.
213 if (IsURLSameAsAnySiteInstance(url))
214 return false;
215
[email protected]88aae972011-12-16 01:14:18216 // If the site URL is an extension (e.g., for hosted apps or WebUI) but the
[email protected]d292d8a2011-05-25 03:47:11217 // process is not (or vice versa), make sure we notice and fix it.
[email protected]2a5221b2011-09-27 23:07:31218 GURL site_url = GetSiteForURL(browsing_instance_->browser_context(), url);
[email protected]88aae972011-12-16 01:14:18219 return !RenderProcessHostImpl::IsSuitableHost(
[email protected]f88628d02012-11-11 17:58:59220 GetProcess(), browsing_instance_->browser_context(), site_url);
[email protected]d292d8a2011-05-25 03:47:11221}
222
[email protected]3059caa2013-06-06 03:48:41223void SiteInstanceImpl::set_render_process_host_factory(
224 const RenderProcessHostFactory* rph_factory) {
225 g_render_process_host_factory_ = rph_factory;
226}
227
[email protected]4c3a23582012-08-18 08:54:34228BrowserContext* SiteInstanceImpl::GetBrowserContext() const {
[email protected]72daaa92012-01-18 13:39:02229 return browsing_instance_->browser_context();
230}
231
initial.commit09911bf2008-07-26 23:55:29232/*static*/
[email protected]4c3a23582012-08-18 08:54:34233SiteInstance* SiteInstance::Create(BrowserContext* browser_context) {
[email protected]b6583592012-01-25 19:52:33234 return new SiteInstanceImpl(new BrowsingInstance(browser_context));
initial.commit09911bf2008-07-26 23:55:29235}
236
237/*static*/
[email protected]4c3a23582012-08-18 08:54:34238SiteInstance* SiteInstance::CreateForURL(BrowserContext* browser_context,
239 const GURL& url) {
[email protected]633fbc42009-05-07 23:39:47240 // This BrowsingInstance may be deleted if it returns an existing
241 // SiteInstance.
[email protected]3d7474ff2011-07-27 17:47:37242 scoped_refptr<BrowsingInstance> instance(
243 new BrowsingInstance(browser_context));
[email protected]633fbc42009-05-07 23:39:47244 return instance->GetSiteInstanceForURL(url);
[email protected]d8a96622009-05-07 19:21:16245}
246
247/*static*/
[email protected]399583b2012-12-11 09:33:42248bool SiteInstance::IsSameWebSite(BrowserContext* browser_context,
249 const GURL& real_url1,
250 const GURL& real_url2) {
251 GURL url1 = SiteInstanceImpl::GetEffectiveURL(browser_context, real_url1);
252 GURL url2 = SiteInstanceImpl::GetEffectiveURL(browser_context, real_url2);
253
254 // We infer web site boundaries based on the registered domain name of the
255 // top-level page and the scheme. We do not pay attention to the port if
256 // one is present, because pages served from different ports can still
257 // access each other if they change their document.domain variable.
258
259 // Some special URLs will match the site instance of any other URL. This is
260 // done before checking both of them for validity, since we want these URLs
261 // to have the same site instance as even an invalid one.
262 if (IsURLSameAsAnySiteInstance(url1) || IsURLSameAsAnySiteInstance(url2))
263 return true;
264
265 // If either URL is invalid, they aren't part of the same site.
266 if (!url1.is_valid() || !url2.is_valid())
267 return false;
268
269 // If the schemes differ, they aren't part of the same site.
270 if (url1.scheme() != url2.scheme())
271 return false;
272
[email protected]ed32c212013-05-14 20:49:29273 return net::registry_controlled_domains::SameDomainOrHost(
274 url1,
275 url2,
[email protected]aabe1792014-01-30 21:37:46276 net::registry_controlled_domains::INCLUDE_PRIVATE_REGISTRIES);
[email protected]399583b2012-12-11 09:33:42277}
278
279/*static*/
280GURL SiteInstance::GetSiteForURL(BrowserContext* browser_context,
281 const GURL& real_url) {
[email protected]25a9e8e532012-06-22 06:16:28282 // TODO(fsamuel, creis): For some reason appID is not recognized as a host.
[email protected]6eb1a11e2013-10-09 00:54:37283 if (real_url.SchemeIs(kGuestScheme))
[email protected]25a9e8e532012-06-22 06:16:28284 return real_url;
285
[email protected]b6583592012-01-25 19:52:33286 GURL url = SiteInstanceImpl::GetEffectiveURL(browser_context, real_url);
[email protected]3a8eecb2010-04-22 23:56:30287
initial.commit09911bf2008-07-26 23:55:29288 // URLs with no host should have an empty site.
289 GURL site;
290
291 // TODO(creis): For many protocols, we should just treat the scheme as the
[email protected]76a010b2008-12-07 23:48:03292 // site, since there is no host. e.g., file:, about:, chrome:
initial.commit09911bf2008-07-26 23:55:29293
294 // If the url has a host, then determine the site.
295 if (url.has_host()) {
[email protected]6705b232008-11-26 00:16:51296 // Only keep the scheme and registered domain as given by GetOrigin. This
297 // may also include a port, which we need to drop.
initial.commit09911bf2008-07-26 23:55:29298 site = url.GetOrigin();
299
[email protected]6705b232008-11-26 00:16:51300 // Remove port, if any.
301 if (site.has_port()) {
302 GURL::Replacements rep;
303 rep.ClearPort();
304 site = site.ReplaceComponents(rep);
305 }
306
initial.commit09911bf2008-07-26 23:55:29307 // If this URL has a registered domain, we only want to remember that part.
308 std::string domain =
[email protected]ed32c212013-05-14 20:49:29309 net::registry_controlled_domains::GetDomainAndRegistry(
310 url,
[email protected]aabe1792014-01-30 21:37:46311 net::registry_controlled_domains::INCLUDE_PRIVATE_REGISTRIES);
initial.commit09911bf2008-07-26 23:55:29312 if (!domain.empty()) {
313 GURL::Replacements rep;
314 rep.SetHostStr(domain);
315 site = site.ReplaceComponents(rep);
316 }
317 }
318 return site;
319}
320
321/*static*/
[email protected]4c3a23582012-08-18 08:54:34322GURL SiteInstanceImpl::GetEffectiveURL(BrowserContext* browser_context,
323 const GURL& url) {
[email protected]46488322012-10-30 03:22:20324 return GetContentClient()->browser()->
[email protected]3d7474ff2011-07-27 17:47:37325 GetEffectiveURL(browser_context, url);
[email protected]3a8eecb2010-04-22 23:56:30326}
327
[email protected]40bfaf32013-11-19 01:35:43328void SiteInstanceImpl::RenderProcessHostDestroyed(RenderProcessHost* host) {
329 DCHECK_EQ(process_, host);
330 process_->RemoveObserver(this);
331 process_ = NULL;
[email protected]4566f132009-03-12 01:55:13332}
[email protected]313b80bd2011-11-23 03:49:10333
[email protected]b6583592012-01-25 19:52:33334void SiteInstanceImpl::LockToOrigin() {
[email protected]c6f2e672012-11-15 01:47:02335 // We currently only restrict this process to a particular site if the
336 // --enable-strict-site-isolation or --site-per-process flags are present.
[email protected]313b80bd2011-11-23 03:49:10337 const CommandLine& command_line = *CommandLine::ForCurrentProcess();
[email protected]c6f2e672012-11-15 01:47:02338 if (command_line.HasSwitch(switches::kEnableStrictSiteIsolation) ||
339 command_line.HasSwitch(switches::kSitePerProcess)) {
[email protected]b9535422012-02-09 01:47:59340 ChildProcessSecurityPolicyImpl* policy =
341 ChildProcessSecurityPolicyImpl::GetInstance();
[email protected]313b80bd2011-11-23 03:49:10342 policy->LockToOrigin(process_->GetID(), site_);
343 }
344}
[email protected]46488322012-10-30 03:22:20345
346} // namespace content