// Copyright 2012 The Chromium Authors // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. #include "content/browser/browser_url_handler_impl.h" #include <stddef.h> #include <algorithm> #include "base/not_fatal_until.h" #include "base/strings/string_util.h" #include "content/browser/renderer_host/debug_urls.h" #include "content/browser/webui/web_ui_impl.h" #include "content/public/browser/content_browser_client.h" #include "content/public/common/content_client.h" #include "content/public/common/url_constants.h" #include "content/public/common/url_utils.h" #include "third_party/blink/public/common/chrome_debug_urls.h" #include "url/gurl.h" namespace content { // Handles rewriting view-source URLs for what we'll actually load. static bool HandleViewSource(GURL* url, BrowserContext* browser_context) { if (!url->SchemeIs(kViewSourceScheme)) { return false; } // Load the inner URL instead. *url = GURL(url->GetContent()); // https://crbug.com/40077794: limit view-source to view the content and // not any other kind of 'active' url scheme like 'javascript' or 'data'. std::vector<std::string> all_allowed_sub_schemes({ url::kHttpScheme, url::kHttpsScheme, kChromeUIScheme, url::kFileScheme, url::kFileSystemScheme, }); // Merge all the schemes for which view-source is allowed by default, with // the view-source schemes defined by the ContentBrowserClient. GetContentClient()->browser()->GetAdditionalViewSourceSchemes( &all_allowed_sub_schemes); for (const auto& allowed_sub_scheme : all_allowed_sub_schemes) { if (url->SchemeIs(allowed_sub_scheme)) { return true; } } *url = GURL(url::kAboutBlankURL); return false; } // Turns a non view-source URL into the corresponding view-source URL. static bool ReverseViewSource(GURL* url, BrowserContext* browser_context) { // No action necessary if the URL is already view-source: if (url->SchemeIs(kViewSourceScheme)) return false; // Recreate the url with the view-source scheme. *url = GURL(kViewSourceScheme + std::string(":") + url->spec()); return true; } static bool DebugURLHandler(GURL* url, BrowserContext* browser_context) { // Circumvent processing URLs that the renderer process will handle. return blink::IsRendererDebugURL(*url); } // static BrowserURLHandler* BrowserURLHandler::GetInstance() { return BrowserURLHandlerImpl::GetInstance(); } // static BrowserURLHandler::URLHandler BrowserURLHandler::null_handler() { // Required for VS2010: http://connect.microsoft.com/VisualStudio/feedback/details/520043/error-converting-from-null-to-a-pointer-type-in-std-pair return nullptr; } // static BrowserURLHandlerImpl* BrowserURLHandlerImpl::GetInstance() { return base::Singleton<BrowserURLHandlerImpl>::get(); } BrowserURLHandlerImpl::BrowserURLHandlerImpl() { AddHandlerPair(&DebugURLHandler, BrowserURLHandlerImpl::null_handler()); // view-source: should take precedence over other rewriters, so it's // important to add it before calling up to the content client. AddHandlerPair(&HandleViewSource, &ReverseViewSource); GetContentClient()->browser()->BrowserURLHandlerCreated(this); } BrowserURLHandlerImpl::~BrowserURLHandlerImpl() { } void BrowserURLHandlerImpl::AddHandlerPair(URLHandler handler, URLHandler reverse_handler) { url_handlers_.push_back(HandlerPair(handler, reverse_handler)); } void BrowserURLHandlerImpl::RewriteURLIfNecessary( GURL* url, BrowserContext* browser_context) { DCHECK(url); DCHECK(browser_context); bool ignored_reverse_on_redirect; RewriteURLIfNecessary(url, browser_context, &ignored_reverse_on_redirect); } std::vector<GURL> BrowserURLHandlerImpl::GetPossibleRewrites( const GURL& url, BrowserContext* browser_context) { std::vector<GURL> rewrites; for (const auto& it : url_handlers_) { const URLHandler& handler = it.first; if (!handler) continue; GURL mutable_url(url); if (handler(&mutable_url, browser_context)) rewrites.push_back(std::move(mutable_url)); } return rewrites; } void BrowserURLHandlerImpl::RewriteURLIfNecessary( GURL* url, BrowserContext* browser_context, bool* reverse_on_redirect) { DCHECK(url); DCHECK(browser_context); DCHECK(reverse_on_redirect); if (!url->is_valid()) { *reverse_on_redirect = false; return; } for (const auto& it : url_handlers_) { const URLHandler& handler = it.first; bool has_reverse_rewriter = it.second; if (handler && handler(url, browser_context)) { *reverse_on_redirect = has_reverse_rewriter; return; } } } bool BrowserURLHandlerImpl::ReverseURLRewrite( GURL* url, const GURL& original, BrowserContext* browser_context) { for (const auto& it : url_handlers_) { const URLHandler& handler = it.first; const URLHandler& reverse_rewriter = it.second; if (reverse_rewriter) { GURL test_url(original); if (!handler) { if (reverse_rewriter(url, browser_context)) return true; } else if (handler(&test_url, browser_context)) { return reverse_rewriter(url, browser_context); } } } return false; } void BrowserURLHandlerImpl::RemoveHandlerForTesting(URLHandler handler) { const auto it = std::ranges::find(url_handlers_, handler, &HandlerPair::first); CHECK(url_handlers_.end() != it, base::NotFatalUntil::M130); url_handlers_.erase(it); } } // namespace content