1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
|
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
/* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
#ifndef __SANDBOXPRIVATE_H__
#define __SANDBOXPRIVATE_H__
#include "mozilla/WeakPtr.h"
#include "mozilla/StaticPrefs_dom.h"
#include "mozilla/StorageAccess.h"
#include "mozilla/net/CookieJarSettings.h"
#include "nsContentUtils.h"
#include "nsIGlobalObject.h"
#include "nsIScriptObjectPrincipal.h"
#include "nsIPrincipal.h"
#include "nsGlobalWindowInner.h"
#include "nsWeakReference.h"
#include "nsWrapperCache.h"
#include "js/loader/ModuleLoaderBase.h"
#include "js/Object.h" // JS::GetPrivate, JS::SetPrivate
#include "js/RootingAPI.h"
class SandboxPrivate : public nsIGlobalObject,
public nsIScriptObjectPrincipal,
public nsSupportsWeakReference,
public mozilla::SupportsWeakPtr,
public nsWrapperCache {
public:
NS_DECL_CYCLE_COLLECTING_ISUPPORTS
NS_DECL_CYCLE_COLLECTION_WRAPPERCACHE_CLASS_AMBIGUOUS(SandboxPrivate,
nsIGlobalObject)
static void Create(nsIPrincipal* principal, JS::Handle<JSObject*> global) {
RefPtr<SandboxPrivate> sbp = new SandboxPrivate(principal);
sbp->SetWrapper(global);
sbp->PreserveWrapper(ToSupports(sbp.get()));
// Pass on ownership of sbp to |global|.
// The type used to cast to void needs to match the one in GetPrivate.
nsIScriptObjectPrincipal* sop =
static_cast<nsIScriptObjectPrincipal*>(sbp.forget().take());
JS::SetObjectISupports(global, sop);
}
static SandboxPrivate* GetPrivate(JSObject* obj) {
// The type used to cast to void needs to match the one in Create.
nsIScriptObjectPrincipal* sop =
JS::GetObjectISupports<nsIScriptObjectPrincipal>(obj);
return static_cast<SandboxPrivate*>(sop);
}
mozilla::OriginTrials Trials() const final { return {}; }
nsIPrincipal* GetPrincipal() override { return mPrincipal; }
nsIPrincipal* GetEffectiveCookiePrincipal() override { return mPrincipal; }
nsIPrincipal* GetEffectiveStoragePrincipal() override { return mPrincipal; }
nsIPrincipal* PartitionedPrincipal() override { return mPrincipal; }
JSObject* GetGlobalJSObject() override { return GetWrapper(); }
JSObject* GetGlobalJSObjectPreserveColor() const override {
return GetWrapperPreserveColor();
}
mozilla::StorageAccess GetStorageAccess() final {
MOZ_ASSERT(NS_IsMainThread());
if (mozilla::StaticPrefs::dom_serviceWorkers_testing_enabled()) {
// XXX: This is a hack to workaround bug 1732159 and is not intended
return mozilla::StorageAccess::eAllow;
}
nsCOMPtr<nsICookieJarSettings> cookieJarSettings =
mozilla::net::CookieJarSettings::Create(mPrincipal);
return mozilla::StorageAllowedForServiceWorker(mPrincipal,
cookieJarSettings);
}
void ForgetGlobalObject(JSObject* obj) { ClearWrapper(obj); }
virtual JSObject* WrapObject(JSContext* cx,
JS::Handle<JSObject*> aGivenProto) override {
MOZ_CRASH("SandboxPrivate doesn't use DOM bindings!");
}
JS::loader::ModuleLoaderBase* GetModuleLoader(JSContext* aCx) override;
mozilla::Result<mozilla::ipc::PrincipalInfo, nsresult> GetStorageKey()
override;
size_t ObjectMoved(JSObject* obj, JSObject* old) {
UpdateWrapper(obj, old);
return 0;
}
bool ShouldResistFingerprinting(
RFPTarget aTarget = RFPTarget::Unknown) const override {
return nsContentUtils::ShouldResistFingerprinting(
"Presently we don't have enough context to make an informed decision"
"on JS Sandboxes. See 1782853",
aTarget);
}
private:
explicit SandboxPrivate(nsIPrincipal* principal) : mPrincipal(principal) {}
virtual ~SandboxPrivate() = default;
nsCOMPtr<nsIPrincipal> mPrincipal;
RefPtr<JS::loader::ModuleLoaderBase> mModuleLoader;
};
#endif // __SANDBOXPRIVATE_H__
|
