diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-07 17:32:43 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-07 17:32:43 +0000 |
commit | 6bf0a5cb5034a7e684dcc3500e841785237ce2dd (patch) | |
tree | a68f146d7fa01f0134297619fbe7e33db084e0aa /toolkit/mozapps/extensions/amContentHandler.sys.mjs | |
parent | Initial commit. (diff) | |
download | thunderbird-6bf0a5cb5034a7e684dcc3500e841785237ce2dd.tar.xz thunderbird-6bf0a5cb5034a7e684dcc3500e841785237ce2dd.zip |
Adding upstream version 1:115.7.0.upstream/1%115.7.0upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to '')
-rw-r--r-- | toolkit/mozapps/extensions/amContentHandler.sys.mjs | 103 |
1 files changed, 103 insertions, 0 deletions
diff --git a/toolkit/mozapps/extensions/amContentHandler.sys.mjs b/toolkit/mozapps/extensions/amContentHandler.sys.mjs new file mode 100644 index 0000000000..7da2355dcb --- /dev/null +++ b/toolkit/mozapps/extensions/amContentHandler.sys.mjs @@ -0,0 +1,103 @@ +/* This Source Code Form is subject to the terms of the Mozilla Public + * License, v. 2.0. If a copy of the MPL was not distributed with this + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ + +const XPI_CONTENT_TYPE = "application/x-xpinstall"; +const MSG_INSTALL_ADDON = "WebInstallerInstallAddonFromWebpage"; + +import { XPCOMUtils } from "resource://gre/modules/XPCOMUtils.sys.mjs"; + +const lazy = {}; + +XPCOMUtils.defineLazyServiceGetters(lazy, { + ThirdPartyUtil: ["@mozilla.org/thirdpartyutil;1", "mozIThirdPartyUtil"], +}); + +export function amContentHandler() {} + +amContentHandler.prototype = { + /** + * Handles a new request for an application/x-xpinstall file. + * + * @param aMimetype + * The mimetype of the file + * @param aContext + * The context passed to nsIChannel.asyncOpen + * @param aRequest + * The nsIRequest dealing with the content + */ + handleContent(aMimetype, aContext, aRequest) { + if (aMimetype != XPI_CONTENT_TYPE) { + throw Components.Exception("", Cr.NS_ERROR_WONT_HANDLE_CONTENT); + } + + if (!(aRequest instanceof Ci.nsIChannel)) { + throw Components.Exception("", Cr.NS_ERROR_WONT_HANDLE_CONTENT); + } + + let uri = aRequest.URI; + + // This check will allow a link to an xpi clicked by the user to trigger the + // addon install flow, but prevents window.open or window.location from triggering + // an addon install even when called from inside a event listener triggered by + // user input. + if ( + !aRequest.loadInfo.hasValidUserGestureActivation && + Services.prefs.getBoolPref("xpinstall.userActivation.required", true) + ) { + const error = Components.Exception( + `${uri.spec} install cancelled because of missing user gesture activation`, + Cr.NS_ERROR_WONT_HANDLE_CONTENT + ); + // Report the error in the BrowserConsole, the error thrown from here doesn't + // seem to be visible anywhere. + Cu.reportError(error); + throw error; + } + + aRequest.cancel(Cr.NS_BINDING_ABORTED); + + let { loadInfo } = aRequest; + const { triggeringPrincipal } = loadInfo; + + let browsingContext = loadInfo.targetBrowsingContext; + + let sourceHost; + let sourceURL; + + try { + sourceURL = + triggeringPrincipal.spec != "" ? triggeringPrincipal.spec : undefined; + sourceHost = triggeringPrincipal.host; + } catch (error) { + // Ignore errors when retrieving the host for the principal (e.g. data URIs return + // an NS_ERROR_FAILURE when principal.host is accessed). + } + + let install = { + uri: uri.spec, + hash: null, + name: null, + icon: null, + mimetype: XPI_CONTENT_TYPE, + triggeringPrincipal, + callbackID: -1, + method: "link", + sourceHost, + sourceURL, + browsingContext, + hasCrossOriginAncestor: lazy.ThirdPartyUtil.isThirdPartyChannel(aRequest), + }; + + Services.cpmm.sendAsyncMessage(MSG_INSTALL_ADDON, install); + }, + + classID: Components.ID("{7beb3ba8-6ec3-41b4-b67c-da89b8518922}"), + QueryInterface: ChromeUtils.generateQI(["nsIContentHandler"]), + + log(aMsg) { + let msg = "amContentHandler.js: " + (aMsg.join ? aMsg.join("") : aMsg); + Services.console.logStringMessage(msg); + dump(msg + "\n"); + }, +}; |