103 lines
3.2 KiB
JavaScript
103 lines
3.2 KiB
JavaScript
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
const XPI_CONTENT_TYPE = "application/x-xpinstall";
|
|
const MSG_INSTALL_ADDON = "WebInstallerInstallAddonFromWebpage";
|
|
|
|
import { XPCOMUtils } from "resource://gre/modules/XPCOMUtils.sys.mjs";
|
|
|
|
const lazy = {};
|
|
|
|
XPCOMUtils.defineLazyServiceGetters(lazy, {
|
|
ThirdPartyUtil: ["@mozilla.org/thirdpartyutil;1", "mozIThirdPartyUtil"],
|
|
});
|
|
|
|
export function amContentHandler() {}
|
|
|
|
amContentHandler.prototype = {
|
|
/**
|
|
* Handles a new request for an application/x-xpinstall file.
|
|
*
|
|
* @param aMimetype
|
|
* The mimetype of the file
|
|
* @param aContext
|
|
* The context passed to nsIChannel.asyncOpen
|
|
* @param aRequest
|
|
* The nsIRequest dealing with the content
|
|
*/
|
|
handleContent(aMimetype, aContext, aRequest) {
|
|
if (aMimetype != XPI_CONTENT_TYPE) {
|
|
throw Components.Exception("", Cr.NS_ERROR_WONT_HANDLE_CONTENT);
|
|
}
|
|
|
|
if (!(aRequest instanceof Ci.nsIChannel)) {
|
|
throw Components.Exception("", Cr.NS_ERROR_WONT_HANDLE_CONTENT);
|
|
}
|
|
|
|
let uri = aRequest.URI;
|
|
|
|
// This check will allow a link to an xpi clicked by the user to trigger the
|
|
// addon install flow, but prevents window.open or window.location from triggering
|
|
// an addon install even when called from inside a event listener triggered by
|
|
// user input.
|
|
if (
|
|
!aRequest.loadInfo.hasValidUserGestureActivation &&
|
|
Services.prefs.getBoolPref("xpinstall.userActivation.required", true)
|
|
) {
|
|
const error = Components.Exception(
|
|
`${uri.spec} install cancelled because of missing user gesture activation`,
|
|
Cr.NS_ERROR_WONT_HANDLE_CONTENT
|
|
);
|
|
// Report the error in the BrowserConsole, the error thrown from here doesn't
|
|
// seem to be visible anywhere.
|
|
Cu.reportError(error);
|
|
throw error;
|
|
}
|
|
|
|
aRequest.cancel(Cr.NS_BINDING_ABORTED);
|
|
|
|
let { loadInfo } = aRequest;
|
|
const { triggeringPrincipal } = loadInfo;
|
|
|
|
let browsingContext = loadInfo.targetBrowsingContext;
|
|
|
|
let sourceHost;
|
|
let sourceURL;
|
|
|
|
try {
|
|
sourceURL =
|
|
triggeringPrincipal.spec != "" ? triggeringPrincipal.spec : undefined;
|
|
sourceHost = triggeringPrincipal.host;
|
|
} catch (error) {
|
|
// Ignore errors when retrieving the host for the principal (e.g. data URIs return
|
|
// an NS_ERROR_FAILURE when principal.host is accessed).
|
|
}
|
|
|
|
let install = {
|
|
uri: uri.spec,
|
|
hash: null,
|
|
name: null,
|
|
icon: null,
|
|
mimetype: XPI_CONTENT_TYPE,
|
|
triggeringPrincipal,
|
|
callbackID: -1,
|
|
method: "link",
|
|
sourceHost,
|
|
sourceURL,
|
|
browsingContext,
|
|
hasCrossOriginAncestor: lazy.ThirdPartyUtil.isThirdPartyChannel(aRequest),
|
|
};
|
|
|
|
Services.cpmm.sendAsyncMessage(MSG_INSTALL_ADDON, install);
|
|
},
|
|
|
|
classID: Components.ID("{7beb3ba8-6ec3-41b4-b67c-da89b8518922}"),
|
|
QueryInterface: ChromeUtils.generateQI(["nsIContentHandler"]),
|
|
|
|
log(aMsg) {
|
|
let msg = "amContentHandler.js: " + (aMsg.join ? aMsg.join("") : aMsg);
|
|
Services.console.logStringMessage(msg);
|
|
dump(msg + "\n");
|
|
},
|
|
};
|