Disable windows reserved characters and reserved names in manifest resources

From [0], file name on windows platform can't contain the reserved characters
(\ / : * ? " < > |) and can't use the reserved names(CON, PRN, AUX, NUL, COM1
COM2, COM3, COM4, COM5, COM6, COM7, COM8, COM9, LPT1, LPT2, LPT3, LPT4, LPT5
LPT6, LPT7, LPT8, LPT9)

On Linux/Mac, only chararacters / and NULL('\0') are disallowed.

So We disable the \ : * ? " < > | characters and windows reserved names in
extension manifest resources to make extensions work cross platform better.

[0]: http://msdn.microsoft.com/en-us/library/aa365247.aspx

BUG=274768
TEST = unit_tests --gtest_filter=ExtensionTest.GetResource
TEST = load/package unpacked extension which contains the disallow character
* ? | < >) and see results.

Review URL: https://chromiumcodereview.appspot.com/23079008

git-svn-id: svn://svn.chromium.org/chrome/trunk/src@222493 0039d316-1c4b-4281-b951-d872f2087c98

1 files changed, 16 insertions, 0 deletions

diff --git a/chrome/common/extensions/extension.cc b/chrome/common/extensions/extension.cc
index ad28efd..b5e91e5 100644
--- a/chrome/common/extensions/extension.cc
+++ b/chrome/common/extensions/extension.cc
@@ -35,6 +35,7 @@
 #include "extensions/common/url_pattern_set.h"
 #include "grit/chromium_strings.h"
 #include "grit/theme_resources.h"
+#include "net/base/net_util.h"
 #include "third_party/skia/include/core/SkBitmap.h"
 #include "url/url_util.h"
 
@@ -97,6 +98,17 @@ class ExtensionConfig {
   Extension::ScriptingWhitelist scripting_whitelist_;
 };
 
+bool ContainsReservedCharacters(const base::FilePath& path) {
+  // We should disallow backslash '\\' as file path separator even on Windows,
+  // because the backslash is not regarded as file path separator on Linux/Mac.
+  // Extensions are cross-platform.
+  // Since FilePath uses backslash '\\' as file path separator on Windows, so we
+  // need to check manually.
+  if (path.value().find('\\') != path.value().npos)
+    return true;
+  return !net::IsSafePortableRelativePath(path);
+}
+
 }  // namespace
 
 #if defined(OS_WIN)
@@ -222,6 +234,8 @@ ExtensionResource Extension::GetResource(
   if (!new_path.empty() && new_path.at(0) == '/')
     new_path.erase(0, 1);
   base::FilePath relative_file_path = base::FilePath::FromUTF8Unsafe(new_path);
+  if (ContainsReservedCharacters(relative_file_path))
+    return ExtensionResource();
   ExtensionResource r(id(), path(), relative_file_path);
   if ((creation_flags() & Extension::FOLLOW_SYMLINKS_ANYWHERE)) {
     r.set_follow_symlinks_anywhere();
@@ -231,6 +245,8 @@ ExtensionResource Extension::GetResource(
 
 ExtensionResource Extension::GetResource(
     const base::FilePath& relative_file_path) const {
+  if (ContainsReservedCharacters(relative_file_path))
+    return ExtensionResource();
   ExtensionResource r(id(), path(), relative_file_path);
   if ((creation_flags() & Extension::FOLLOW_SYMLINKS_ANYWHERE)) {
     r.set_follow_symlinks_anywhere();