blob: 31412c715993bedb4709985ed5e11616793c0333 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
// Copyright (c) 2012 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CHROME_BROWSER_EXTENSIONS_EXTENSION_SPECIAL_STORAGE_POLICY_H_
#define CHROME_BROWSER_EXTENSIONS_EXTENSION_SPECIAL_STORAGE_POLICY_H_
#include <map>
#include <string>
#include "base/synchronization/lock.h"
#include "extensions/common/extension_set.h"
#include "storage/browser/quota/special_storage_policy.h"
#include "url/gurl.h"
namespace content {
class BrowserContext;
}
namespace content_settings {
class CookieSettings;
}
namespace extensions {
class Extension;
}
// Special rights are granted to 'extensions' and 'applications'. The
// storage subsystems and the browsing data remover query this interface
// to determine which origins have these rights.
class ExtensionSpecialStoragePolicy : public storage::SpecialStoragePolicy {
public:
explicit ExtensionSpecialStoragePolicy(
content_settings::CookieSettings* cookie_settings);
// storage::SpecialStoragePolicy methods used by storage subsystems and the
// browsing data remover. These methods are safe to call on any thread.
bool IsStorageProtected(const GURL& origin) override;
bool IsStorageUnlimited(const GURL& origin) override;
bool IsStorageSessionOnly(const GURL& origin) override;
bool CanQueryDiskSize(const GURL& origin) override;
bool HasIsolatedStorage(const GURL& origin) override;
bool HasSessionOnlyOrigins() override;
bool IsStorageDurable(const GURL& origin) override;
// Methods used by the ExtensionService to populate this class.
void GrantRightsForExtension(const extensions::Extension* extension,
content::BrowserContext* browser_context);
void RevokeRightsForExtension(const extensions::Extension* extension);
void RevokeRightsForAllExtensions();
// Decides whether the storage for |extension|'s web extent needs protection.
bool NeedsProtection(const extensions::Extension* extension);
// Returns the set of extensions protecting this origin. The caller does not
// take ownership of the return value.
const extensions::ExtensionSet* ExtensionsProtectingOrigin(
const GURL& origin);
protected:
~ExtensionSpecialStoragePolicy() override;
private:
class SpecialCollection {
public:
SpecialCollection();
~SpecialCollection();
bool Contains(const GURL& origin);
bool GrantsCapabilitiesTo(const GURL& origin);
const extensions::ExtensionSet* ExtensionsContaining(const GURL& origin);
bool ContainsExtension(const std::string& extension_id);
bool Add(const extensions::Extension* extension);
bool Remove(const extensions::Extension* extension);
void Clear();
private:
typedef std::map<GURL, extensions::ExtensionSet*> CachedResults;
void ClearCache();
extensions::ExtensionSet extensions_;
CachedResults cached_results_;
};
void NotifyGranted(const GURL& origin, int change_flags);
void NotifyRevoked(const GURL& origin, int change_flags);
void NotifyCleared();
base::Lock lock_; // Synchronize all access to the collections.
SpecialCollection protected_apps_;
SpecialCollection installed_apps_;
SpecialCollection unlimited_extensions_;
SpecialCollection file_handler_extensions_;
SpecialCollection isolated_extensions_;
SpecialCollection content_capabilities_unlimited_extensions_;
scoped_refptr<content_settings::CookieSettings> cookie_settings_;
};
#endif // CHROME_BROWSER_EXTENSIONS_EXTENSION_SPECIAL_STORAGE_POLICY_H_
|
