1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
|
// Copyright (c) 2011 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include "chrome/renderer/external_host_bindings.h"
#include "base/values.h"
#include "chrome/common/render_messages.h"
#include "third_party/WebKit/Source/WebKit/chromium/public/WebBindings.h"
#include "third_party/WebKit/Source/WebKit/chromium/public/WebDocument.h"
#include "third_party/WebKit/Source/WebKit/chromium/public/WebFrame.h"
using WebKit::WebBindings;
ExternalHostBindings::ExternalHostBindings() : frame_(NULL) {
BindMethod("postMessage", &ExternalHostBindings::postMessage);
BindProperty("onmessage", &on_message_handler_);
}
ExternalHostBindings::~ExternalHostBindings() {
}
void ExternalHostBindings::postMessage(
const CppArgumentList& args, CppVariant* result) {
DCHECK(result);
// We need at least one argument (message) and at most 2 arguments.
// Also, the first argument must be a string
if (args.size() < 1 || args.size() > 2 || !args[0].isString()) {
result->Set(false);
return;
}
const std::string& message = args[0].ToString();
std::string target;
if (args.size() >= 2 && args[1].isString()) {
target = args[1].ToString();
if (target.compare("*") != 0) {
GURL resolved(target);
if (!resolved.is_valid()) {
DLOG(WARNING) << "Unable to parse the specified target URL. " << target;
result->Set(false);
return;
}
target = resolved.spec();
}
} else {
target = "*";
}
std::string origin = frame_->document().securityOrigin().toString().utf8();
result->Set(sender()->Send(new ViewHostMsg_ForwardMessageToExternalHost(
routing_id(), message, origin, target)));
}
bool ExternalHostBindings::ForwardMessageFromExternalHost(
const std::string& message, const std::string& origin,
const std::string& target) {
if (!on_message_handler_.isObject())
return false;
bool status = false;
if (target.compare("*") != 0) {
// TODO(abarth): This code should use WebSecurityOrigin::toString to
// make origin strings. GURL::GetOrigin() doesn't understand all the
// cases that WebSecurityOrigin::toString understands.
GURL document_url(frame_->document().url());
GURL document_origin(document_url.GetOrigin());
GURL target_origin(GURL(target).GetOrigin());
// We want to compare the origins of the two URLs but first
// we need to make sure that we don't compare an invalid one
// to a valid one.
bool drop = (document_origin.is_valid() != target_origin.is_valid());
if (!drop) {
if (!document_origin.is_valid()) {
// Both origins are invalid, so compare the URLs as opaque strings.
drop = (document_url.spec().compare(target) != 0);
} else {
drop = (document_origin != target_origin);
}
}
if (drop) {
DLOG(WARNING) << "Dropping posted message. Origins don't match";
return false;
}
}
// Construct an event object, assign the origin to the origin member and
// assign message parameter to the 'data' member of the event.
NPObject* event_obj = NULL;
CreateMessageEvent(&event_obj);
if (!event_obj) {
NOTREACHED() << "CreateMessageEvent failed";
} else {
NPIdentifier init_message_event =
WebBindings::getStringIdentifier("initMessageEvent");
NPVariant init_args[8];
STRINGN_TO_NPVARIANT("message", sizeof("message") - 1,
init_args[0]); // type
BOOLEAN_TO_NPVARIANT(false, init_args[1]); // canBubble
BOOLEAN_TO_NPVARIANT(true, init_args[2]); // cancelable
STRINGN_TO_NPVARIANT(message.c_str(), message.length(), \
init_args[3]); // data
STRINGN_TO_NPVARIANT(origin.c_str(), origin.length(), \
init_args[4]); // origin
STRINGN_TO_NPVARIANT("", 0, init_args[5]); // lastEventId
NULL_TO_NPVARIANT(init_args[6]); // source
NULL_TO_NPVARIANT(init_args[7]); // messagePort
NPVariant result;
NULL_TO_NPVARIANT(result);
status = WebBindings::invoke(NULL, event_obj, init_message_event, init_args,
arraysize(init_args), &result);
DCHECK(status) << "Failed to initialize MessageEvent";
WebBindings::releaseVariantValue(&result);
if (status) {
NPVariant event_arg;
OBJECT_TO_NPVARIANT(event_obj, event_arg);
status = WebBindings::invokeDefault(NULL,
on_message_handler_.value.objectValue,
&event_arg, 1, &result);
// Don't DCHECK here in case the reason for the failure is a script error.
DLOG_IF(ERROR, !status) << "NPN_InvokeDefault failed";
WebBindings::releaseVariantValue(&result);
}
WebBindings::releaseObject(event_obj);
}
return status;
}
bool ExternalHostBindings::CreateMessageEvent(NPObject** message_event) {
DCHECK(message_event != NULL);
DCHECK(frame_ != NULL);
NPObject* window = frame_->windowObject();
if (!window) {
NOTREACHED() << "frame_->windowObject";
return false;
}
const char* identifier_names[] = {
"document",
"createEvent",
};
NPIdentifier identifiers[arraysize(identifier_names)] = {0};
WebBindings::getStringIdentifiers(identifier_names,
arraysize(identifier_names), identifiers);
CppVariant document;
bool ok = WebBindings::getProperty(NULL, window, identifiers[0], &document);
DCHECK(document.isObject());
bool success = false;
if (ok && document.isObject()) {
NPVariant result, event_type;
STRINGN_TO_NPVARIANT("MessageEvent", sizeof("MessageEvent") - 1, \
event_type);
success = WebBindings::invoke(NULL, document.value.objectValue,
identifiers[1], &event_type, 1, &result);
DCHECK(!success || result.type == NPVariantType_Object);
if (result.type != NPVariantType_Object) {
DCHECK(success == false);
} else {
DCHECK(success != false);
// Pass the ownership to the caller (don't call ReleaseVariantValue).
*message_event = result.value.objectValue;
}
}
return success;
}
|
