ef04f54d7d
After CL2738156 landed, the risk of non-existing MojoBinderPolicyApplier was fixed, and we do not receive new crash reports anymore. So we can close this issue https://crbug.com/1174506 and clean up these CHECKs that were added for debugging purpose. Bug: 1174506 Change-Id: I29d541d3ceb4e5396d0e74f683a3c5d1b9a60997 Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/2780760 Commit-Queue: Lingqi Chi <lingqi@chromium.org> Reviewed-by: Matt Falkenhagen <falken@chromium.org> Cr-Commit-Position: refs/heads/master@{#866061}
106 lines
4.3 KiB
C++
106 lines
4.3 KiB
C++
// Copyright 2019 The Chromium Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style license that can be
|
|
// found in the LICENSE file.
|
|
|
|
#ifndef CONTENT_BROWSER_BROWSER_INTERFACE_BROKER_IMPL_H_
|
|
#define CONTENT_BROWSER_BROWSER_INTERFACE_BROKER_IMPL_H_
|
|
|
|
#include "content/browser/browser_interface_binders.h"
|
|
#include "content/browser/mojo_binder_policy_applier.h"
|
|
#include "mojo/public/cpp/bindings/binder_map.h"
|
|
#include "mojo/public/cpp/bindings/generic_pending_receiver.h"
|
|
#include "third_party/blink/public/common/features.h"
|
|
#include "third_party/blink/public/mojom/browser_interface_broker.mojom.h"
|
|
|
|
namespace content {
|
|
|
|
// content's implementation of the BrowserInterfaceBroker interface that binds
|
|
// interfaces requested by the renderer. Every execution context type (frame,
|
|
// worker etc) owns an instance and registers appropriate handlers, called
|
|
// "binders" (see internal::PopulateBinderMap and
|
|
// internal::PopulateBinderMapWithContext).
|
|
//
|
|
// By default, BrowserInterfaceBrokerImpl runs the binder that was registered
|
|
// for a given interface when the interface is requested. However, in some cases
|
|
// such as prerendering pages, it may be desirable to defer running the binder,
|
|
// or take another action. Setting a non-null `MojoBinderPolicyApplier` enables
|
|
// this behavior.
|
|
//
|
|
// Note: BrowserInterfaceBrokerImpl will eventually replace the usage of
|
|
// InterfaceProvider and browser manifests, as well as DocumentInterfaceBroker.
|
|
template <typename ExecutionContextHost, typename InterfaceBinderContext>
|
|
class BrowserInterfaceBrokerImpl : public blink::mojom::BrowserInterfaceBroker {
|
|
public:
|
|
explicit BrowserInterfaceBrokerImpl(ExecutionContextHost* host)
|
|
: host_(host) {
|
|
internal::PopulateBinderMap(host, &binder_map_);
|
|
internal::PopulateBinderMapWithContext(host, &binder_map_with_context_);
|
|
}
|
|
|
|
// Disallows copy and move operations.
|
|
BrowserInterfaceBrokerImpl(const BrowserInterfaceBrokerImpl& other) = delete;
|
|
BrowserInterfaceBrokerImpl& operator=(
|
|
const BrowserInterfaceBrokerImpl& other) = delete;
|
|
BrowserInterfaceBrokerImpl(BrowserInterfaceBrokerImpl&&) = delete;
|
|
BrowserInterfaceBrokerImpl& operator=(BrowserInterfaceBrokerImpl&&) = delete;
|
|
|
|
// blink::mojom::BrowserInterfaceBroker
|
|
void GetInterface(mojo::GenericPendingReceiver receiver) {
|
|
DCHECK(receiver.interface_name().has_value());
|
|
if (!policy_applier_) {
|
|
BindInterface(std::move(receiver));
|
|
} else {
|
|
std::string interface_name = receiver.interface_name().value();
|
|
// base::Unretained is safe because `this` owns `policy_applier_`.
|
|
policy_applier_->ApplyPolicyToBinder(
|
|
interface_name,
|
|
base::BindOnce(&BrowserInterfaceBrokerImpl::BindInterface,
|
|
base::Unretained(this), std::move(receiver)));
|
|
}
|
|
}
|
|
|
|
// Sets MojoBinderPolicyApplier to control when to bind interfaces.
|
|
void ApplyMojoBinderPolicies(
|
|
std::unique_ptr<MojoBinderPolicyApplier> policy_applier) {
|
|
DCHECK(blink::features::IsPrerender2Enabled());
|
|
DCHECK(policy_applier);
|
|
DCHECK(!policy_applier_);
|
|
policy_applier_ = std::move(policy_applier);
|
|
}
|
|
|
|
// Resolves requests that were previously deferred and stops applying policies
|
|
// to binding requests.
|
|
void ReleaseMojoBinderPolicies() {
|
|
DCHECK(blink::features::IsPrerender2Enabled());
|
|
DCHECK(policy_applier_);
|
|
policy_applier_->GrantAll();
|
|
// Reset `policy_applier_` to disable capability control.
|
|
policy_applier_.reset();
|
|
}
|
|
|
|
MojoBinderPolicyApplier* GetMojoBinderPolicyApplier() {
|
|
DCHECK(blink::features::IsPrerender2Enabled());
|
|
return policy_applier_.get();
|
|
}
|
|
|
|
private:
|
|
void BindInterface(mojo::GenericPendingReceiver receiver) {
|
|
if (!binder_map_.TryBind(&receiver)) {
|
|
if (!binder_map_with_context_.TryBind(internal::GetContextForHost(host_),
|
|
&receiver)) {
|
|
host_->ReportNoBinderForInterface("No binder found for interface " +
|
|
*receiver.interface_name());
|
|
}
|
|
}
|
|
}
|
|
|
|
ExecutionContextHost* const host_;
|
|
mojo::BinderMap binder_map_;
|
|
mojo::BinderMapWithContext<InterfaceBinderContext> binder_map_with_context_;
|
|
std::unique_ptr<MojoBinderPolicyApplier> policy_applier_;
|
|
};
|
|
|
|
} // namespace content
|
|
|
|
#endif // CONTENT_BROWSER_BROWSER_INTERFACE_BROKER_IMPL_H_
|