/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ /* vim: set sw=2 ts=8 et tw=80 : */ /* This Source Code Form is subject to the terms of the Mozilla Public * License, v. 2.0. If a copy of the MPL was not distributed with this * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ #include "ParentProcessDocumentChannel.h" #include "mozilla/extensions/StreamFilterParent.h" #include "mozilla/net/ParentChannelWrapper.h" #include "mozilla/net/UrlClassifierCommon.h" #include "mozilla/StaticPrefs_extensions.h" #include "nsCRT.h" #include "nsDocShell.h" #include "nsIObserverService.h" #include "nsIClassifiedChannel.h" #include "nsIXULRuntime.h" #include "nsHttpHandler.h" #include "nsDocShellLoadState.h" extern mozilla::LazyLogModule gDocumentChannelLog; #define LOG(fmt) MOZ_LOG(gDocumentChannelLog, mozilla::LogLevel::Verbose, fmt) namespace mozilla { namespace net { using RedirectToRealChannelPromise = typename PDocumentChannelParent::RedirectToRealChannelPromise; NS_IMPL_ISUPPORTS_INHERITED(ParentProcessDocumentChannel, DocumentChannel, nsIAsyncVerifyRedirectCallback, nsIObserver) ParentProcessDocumentChannel::ParentProcessDocumentChannel( nsDocShellLoadState* aLoadState, class LoadInfo* aLoadInfo, nsLoadFlags aLoadFlags, uint32_t aCacheKey, bool aUriModified, bool aIsXFOError) : DocumentChannel(aLoadState, aLoadInfo, aLoadFlags, aCacheKey, aUriModified, aIsXFOError) { LOG(("ParentProcessDocumentChannel ctor [this=%p]", this)); } ParentProcessDocumentChannel::~ParentProcessDocumentChannel() { LOG(("ParentProcessDocumentChannel dtor [this=%p]", this)); } RefPtr ParentProcessDocumentChannel::RedirectToRealChannel( nsTArray>&& aStreamFilterEndpoints, uint32_t aRedirectFlags, uint32_t aLoadFlags, const nsTArray& aEarlyHints) { LOG(("ParentProcessDocumentChannel RedirectToRealChannel [this=%p]", this)); nsCOMPtr channel = mDocumentLoadListener->GetChannel(); channel->SetLoadFlags(aLoadFlags); channel->SetNotificationCallbacks(mCallbacks); if (mLoadGroup) { channel->SetLoadGroup(mLoadGroup); } if (XRE_IsE10sParentProcess()) { nsCOMPtr uri; MOZ_ALWAYS_SUCCEEDS(NS_GetFinalChannelURI(channel, getter_AddRefs(uri))); if (!nsDocShell::CanLoadInParentProcess(uri)) { nsAutoCString msg; uri->GetSpec(msg); msg.Insert( "Attempt to load a non-authorised load in the parent process: ", 0); NS_ASSERTION(false, msg.get()); return RedirectToRealChannelPromise::CreateAndResolve( NS_ERROR_CONTENT_BLOCKED, __func__); } } mStreamFilterEndpoints = std::move(aStreamFilterEndpoints); if (mDocumentLoadListener->IsDocumentLoad() && mozilla::SessionHistoryInParent() && GetDocShell() && mDocumentLoadListener->GetLoadingSessionHistoryInfo()) { GetDocShell()->SetLoadingSessionHistoryInfo( *mDocumentLoadListener->GetLoadingSessionHistoryInfo()); } RefPtr p = mPromise.Ensure(__func__); // We make the promise use direct task dispatch in order to reduce the number // of event loops iterations. mPromise.UseDirectTaskDispatch(__func__); nsresult rv = gHttpHandler->AsyncOnChannelRedirect(this, channel, aRedirectFlags); if (NS_FAILED(rv)) { LOG( ("ParentProcessDocumentChannel RedirectToRealChannel " "AsyncOnChannelRedirect failed [this=%p " "aRv=%d]", this, int(rv))); OnRedirectVerifyCallback(rv); } return p; } NS_IMETHODIMP ParentProcessDocumentChannel::OnRedirectVerifyCallback(nsresult aResult) { LOG( ("ParentProcessDocumentChannel OnRedirectVerifyCallback [this=%p " "aResult=%d]", this, int(aResult))); MOZ_ASSERT(mDocumentLoadListener); if (NS_FAILED(aResult)) { Cancel(aResult); } else if (mCanceled) { aResult = NS_ERROR_ABORT; } else { const nsCOMPtr channel = mDocumentLoadListener->GetChannel(); mLoadGroup->AddRequest(channel, nullptr); // Adding the channel to the loadgroup could have triggered a status // change with an observer being called destroying the docShell, resulting // in the PPDC to be canceled. if (mCanceled) { aResult = NS_ERROR_ABORT; } else { mLoadGroup->RemoveRequest(this, nullptr, NS_BINDING_REDIRECTED); for (auto& endpoint : mStreamFilterEndpoints) { extensions::StreamFilterParent::Attach(channel, std::move(endpoint)); } RefPtr wrapper = new ParentChannelWrapper(channel, mListener); wrapper->Register(mDocumentLoadListener->GetRedirectChannelId()); } } mPromise.Resolve(aResult, __func__); return NS_OK; } NS_IMETHODIMP ParentProcessDocumentChannel::AsyncOpen( nsIStreamListener* aListener) { LOG(("ParentProcessDocumentChannel AsyncOpen [this=%p]", this)); auto docShell = RefPtr(GetDocShell()); MOZ_ASSERT(docShell); bool isDocumentLoad = mLoadInfo->GetExternalContentPolicyType() != ExtContentPolicy::TYPE_OBJECT; mDocumentLoadListener = MakeRefPtr( docShell->GetBrowsingContext()->Canonical(), isDocumentLoad); LOG(("Created PPDocumentChannel with listener=%p", mDocumentLoadListener.get())); // Add observers. nsCOMPtr observerService = mozilla::services::GetObserverService(); if (observerService) { MOZ_ALWAYS_SUCCEEDS(observerService->AddObserver( this, NS_HTTP_ON_MODIFY_REQUEST_TOPIC, false)); } gHttpHandler->OnOpeningDocumentRequest(this); if (isDocumentLoad) { // Return value of setting synced field should be checked. See bug 1656492. Unused << GetDocShell()->GetBrowsingContext()->SetCurrentLoadIdentifier( Some(mLoadState->GetLoadIdentifier())); } nsresult rv = NS_OK; Maybe initialClientInfo = mInitialClientInfo; RefPtr promise; if (isDocumentLoad) { promise = mDocumentLoadListener->OpenDocument( mLoadState, mCacheKey, Some(mChannelId), TimeStamp::Now(), mTiming, std::move(initialClientInfo), Some(mUriModified), Some(mIsXFOError), nullptr /* ContentParent */, &rv); } else { promise = mDocumentLoadListener->OpenObject( mLoadState, mCacheKey, Some(mChannelId), TimeStamp::Now(), mTiming, std::move(initialClientInfo), InnerWindowIDForExtantDoc(docShell), mLoadFlags, mLoadInfo->InternalContentPolicyType(), dom::UserActivation::IsHandlingUserInput(), nullptr /* ContentParent */, nullptr /* ObjectUpgradeHandler */, &rv); } if (NS_FAILED(rv)) { MOZ_ASSERT(!promise); mDocumentLoadListener = nullptr; RemoveObserver(); return rv; } mListener = aListener; if (mLoadGroup) { mLoadGroup->AddRequest(this, nullptr); } RefPtr self = this; promise->Then( GetCurrentSerialEventTarget(), __func__, [self](DocumentLoadListener::OpenPromiseSucceededType&& aResolveValue) { // The DLL is waiting for us to resolve the // RedirectToRealChannelPromise given as parameter. RefPtr p = self->RedirectToRealChannel( std::move(aResolveValue.mStreamFilterEndpoints), aResolveValue.mRedirectFlags, aResolveValue.mLoadFlags, aResolveValue.mEarlyHints) ->Then( GetCurrentSerialEventTarget(), __func__, [self](RedirectToRealChannelPromise::ResolveOrRejectValue&& aValue) -> RefPtr { MOZ_ASSERT(aValue.IsResolve()); nsresult rv = aValue.ResolveValue(); if (NS_FAILED(rv)) { self->DisconnectChildListeners(rv, rv); } self->mLoadGroup = nullptr; self->mListener = nullptr; self->mCallbacks = nullptr; self->RemoveObserver(); auto p = MakeRefPtr( __func__); p->UseDirectTaskDispatch(__func__); p->ResolveOrReject(std::move(aValue), __func__); return p; }); // We chain the promise the DLL is waiting on to the one returned by // RedirectToRealChannel. As soon as the promise returned is // resolved or rejected, so will the DLL's promise. p->ChainTo(aResolveValue.mPromise.forget(), __func__); }, [self](DocumentLoadListener::OpenPromiseFailedType&& aRejectValue) { // If this is a normal failure, then we want to disconnect our listeners // and notify them of the failure. If this is a process switch, then we // can just ignore it silently, and trust that the switch will shut down // our docshell and cancel us when it's ready. if (!aRejectValue.mContinueNavigating) { self->DisconnectChildListeners(aRejectValue.mStatus, aRejectValue.mLoadGroupStatus); } self->RemoveObserver(); }); return NS_OK; } NS_IMETHODIMP ParentProcessDocumentChannel::Cancel(nsresult aStatus) { return CancelWithReason(aStatus, "ParentProcessDocumentChannel::Cancel"_ns); } NS_IMETHODIMP ParentProcessDocumentChannel::CancelWithReason( nsresult aStatusCode, const nsACString& aReason) { LOG(("ParentProcessDocumentChannel CancelWithReason [this=%p]", this)); if (mCanceled) { return NS_OK; } mCanceled = true; // This will force the DocumentListener to abort the promise if there's one // pending. mDocumentLoadListener->Cancel(aStatusCode, aReason); return NS_OK; } void ParentProcessDocumentChannel::RemoveObserver() { if (nsCOMPtr observerService = mozilla::services::GetObserverService()) { observerService->RemoveObserver(this, NS_HTTP_ON_MODIFY_REQUEST_TOPIC); } } //////////////////////////////////////////////////////////////////////////////// // nsIObserver //////////////////////////////////////////////////////////////////////////////// NS_IMETHODIMP ParentProcessDocumentChannel::Observe(nsISupports* aSubject, const char* aTopic, const char16_t* aData) { MOZ_ASSERT(NS_IsMainThread()); if (mRequestObserversCalled) { // We have already emitted the event, we don't want to emit it again. // We only care about forwarding the first NS_HTTP_ON_MODIFY_REQUEST_TOPIC // encountered. return NS_OK; } nsCOMPtr channel = do_QueryInterface(aSubject); if (!channel || mDocumentLoadListener->GetChannel() != channel) { // Not a channel we are interested with. return NS_OK; } LOG(("DocumentChannelParent Observe [this=%p aChannel=%p]", this, channel.get())); if (!nsCRT::strcmp(aTopic, NS_HTTP_ON_MODIFY_REQUEST_TOPIC)) { mRequestObserversCalled = true; gHttpHandler->OnModifyDocumentRequest(this); } return NS_OK; } } // namespace net } // namespace mozilla #undef LOG