/* * Copyright (C) 2006, 2007, 2008, 2009, 2010 Apple Inc. All rights reserved. * Copyright (C) 2008 Collabora Ltd. All rights reserved. * Copyright (C) 2010 Girish Ramakrishnan * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * * THIS SOFTWARE IS PROVIDED BY APPLE COMPUTER, INC. ``AS IS'' AND ANY * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE COMPUTER, INC. OR * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. */ #include "config.h" #include "PluginView.h" #if USE(JSC) #include "BridgeJSC.h" #endif #include "Chrome.h" #include "CookieJar.h" #include "Document.h" #include "DocumentLoader.h" #include "Element.h" #include "FocusController.h" #include "Frame.h" #include "FrameLoader.h" #include "FrameLoaderClient.h" #include "FrameTree.h" #include "FrameView.h" #include "GraphicsContext.h" #include "HTMLNames.h" #include "HTMLPlugInElement.h" #include "Image.h" #include "KeyboardEvent.h" #include "MIMETypeRegistry.h" #include "MouseEvent.h" #include "NotImplemented.h" #include "Page.h" #include "PlatformMouseEvent.h" #include "PluginDatabase.h" #include "PluginDebug.h" #include "PluginMainThreadScheduler.h" #include "PluginPackage.h" #include "ProxyServer.h" #include "RenderBox.h" #include "RenderObject.h" #include "ScriptController.h" #include "ScriptValue.h" #include "SecurityOrigin.h" #include "Settings.h" #include "npruntime_impl.h" #include #if OS(WINDOWS) && ENABLE(NETSCAPE_PLUGIN_API) #include "PluginMessageThrottlerWin.h" #endif #if defined(ANDROID_PLUGINS) #include "TouchEvent.h" #endif #if USE(JSC) #include "JSDOMBinding.h" #include "JSDOMWindow.h" #include "c_instance.h" #include "runtime_root.h" #include #include using JSC::ExecState; using JSC::JSLock; using JSC::JSObject; using JSC::JSValue; using JSC::UString; #endif #if ENABLE(NETSCAPE_PLUGIN_API) using std::min; using namespace WTF; namespace WebCore { using namespace HTMLNames; static int s_callingPlugin; typedef HashMap InstanceMap; static InstanceMap& instanceMap() { static InstanceMap& map = *new InstanceMap; return map; } static String scriptStringIfJavaScriptURL(const KURL& url) { if (!protocolIsJavaScript(url)) return String(); // This returns an unescaped string return decodeURLEscapeSequences(url.string().substring(11)); } PluginView* PluginView::s_currentPluginView = 0; void PluginView::popPopupsStateTimerFired(Timer*) { popPopupsEnabledState(); } IntRect PluginView::windowClipRect() const { // Start by clipping to our bounds. IntRect clipRect(m_windowRect); // Take our element and get the clip rect from the enclosing layer and frame view. RenderLayer* layer = m_element->renderer()->enclosingLayer(); FrameView* parentView = m_element->document()->view(); clipRect.intersect(parentView->windowClipRectForLayer(layer, true)); return clipRect; } void PluginView::setFrameRect(const IntRect& rect) { if (m_element->document()->printing()) return; if (rect != frameRect()) Widget::setFrameRect(rect); updatePluginWidget(); #if OS(WINDOWS) || OS(SYMBIAN) // On Windows and Symbian, always call plugin to change geometry. setNPWindowRect(rect); #elif defined(XP_UNIX) // On Unix, multiple calls to setNPWindow() in windowed mode causes Flash to crash if (m_mode == NP_FULL || !m_isWindowed) setNPWindowRect(rect); #endif } void PluginView::frameRectsChanged() { updatePluginWidget(); } void PluginView::handleEvent(Event* event) { if (!m_plugin || m_isWindowed) return; // Protect the plug-in from deletion while dispatching the event. RefPtr protect(this); if (event->isMouseEvent()) handleMouseEvent(static_cast(event)); else if (event->isKeyboardEvent()) handleKeyboardEvent(static_cast(event)); #if defined(ANDROID_PLUGINS) #if ENABLE(TOUCH_EVENTS) else if (event->isTouchEvent()) handleTouchEvent(static_cast(event)); #endif else if (event->type() == eventNames().DOMFocusOutEvent) handleFocusEvent(false); else if (event->type() == eventNames().DOMFocusInEvent) handleFocusEvent(true); #endif #if defined(XP_UNIX) && ENABLE(NETSCAPE_PLUGIN_API) else if (event->type() == eventNames().focusoutEvent) handleFocusOutEvent(); else if (event->type() == eventNames().focusinEvent) handleFocusInEvent(); #endif } void PluginView::init() { if (m_haveInitialized) return; m_haveInitialized = true; if (!m_plugin) { ASSERT(m_status == PluginStatusCanNotFindPlugin); return; } LOG(Plugins, "PluginView::init(): Initializing plug-in '%s'", m_plugin->name().utf8().data()); if (!m_plugin->load()) { m_plugin = 0; m_status = PluginStatusCanNotLoadPlugin; return; } if (!startOrAddToUnstartedList()) { m_status = PluginStatusCanNotLoadPlugin; return; } m_status = PluginStatusLoadedSuccessfully; } bool PluginView::startOrAddToUnstartedList() { if (!m_parentFrame->page()) return false; // We only delay starting the plug-in if we're going to kick off the load // ourselves. Otherwise, the loader will try to deliver data before we've // started the plug-in. if (!m_loadManually && !m_parentFrame->page()->canStartMedia()) { m_parentFrame->document()->addMediaCanStartListener(this); m_isWaitingToStart = true; return true; } return start(); } bool PluginView::start() { if (m_isStarted) return false; m_isWaitingToStart = false; PluginMainThreadScheduler::scheduler().registerPlugin(m_instance); ASSERT(m_plugin); ASSERT(m_plugin->pluginFuncs()->newp); NPError npErr; { PluginView::setCurrentPluginView(this); #if USE(JSC) JSC::JSLock::DropAllLocks dropAllLocks(JSC::SilenceAssertionsOnly); #endif setCallingPlugin(true); npErr = m_plugin->pluginFuncs()->newp((NPMIMEType)m_mimeType.utf8().data(), m_instance, m_mode, m_paramCount, m_paramNames, m_paramValues, NULL); setCallingPlugin(false); LOG_NPERROR(npErr); PluginView::setCurrentPluginView(0); } if (npErr != NPERR_NO_ERROR) { m_status = PluginStatusCanNotLoadPlugin; PluginMainThreadScheduler::scheduler().unregisterPlugin(m_instance); return false; } m_isStarted = true; if (!m_url.isEmpty() && !m_loadManually) { FrameLoadRequest frameLoadRequest(m_parentFrame->document()->securityOrigin()); frameLoadRequest.resourceRequest().setHTTPMethod("GET"); frameLoadRequest.resourceRequest().setURL(m_url); #ifdef ANDROID_PLUGINS if (!SecurityOrigin::shouldHideReferrer( m_url, m_parentFrame->loader()->outgoingReferrer())) frameLoadRequest.resourceRequest().setHTTPReferrer( m_parentFrame->loader()->outgoingReferrer()); #endif load(frameLoadRequest, false, 0); } m_status = PluginStatusLoadedSuccessfully; if (!platformStart()) m_status = PluginStatusCanNotLoadPlugin; if (m_status != PluginStatusLoadedSuccessfully) return false; if (parentFrame()->page()) parentFrame()->page()->didStartPlugin(this); return true; } void PluginView::mediaCanStart() { ASSERT(!m_isStarted); if (!start()) parentFrame()->loader()->client()->dispatchDidFailToStartPlugin(this); } PluginView::~PluginView() { LOG(Plugins, "PluginView::~PluginView()"); ASSERT(!m_lifeSupportTimer.isActive()); // If we failed to find the plug-in, we'll return early in our constructor, and // m_instance will be 0. if (m_instance) instanceMap().remove(m_instance); if (m_isWaitingToStart) m_parentFrame->document()->removeMediaCanStartListener(this); stop(); deleteAllValues(m_requests); freeStringArray(m_paramNames, m_paramCount); freeStringArray(m_paramValues, m_paramCount); platformDestroy(); m_parentFrame->script()->cleanupScriptObjectsForPlugin(this); #if PLATFORM(ANDROID) // Since we have no legacy plugins to check, we ignore the quirks check. if (m_plugin) #else if (m_plugin && !(m_plugin->quirks().contains(PluginQuirkDontUnloadPlugin))) #endif m_plugin->unload(); } void PluginView::stop() { if (!m_isStarted) return; if (parentFrame()->page()) parentFrame()->page()->didStopPlugin(this); LOG(Plugins, "PluginView::stop(): Stopping plug-in '%s'", m_plugin->name().utf8().data()); HashSet > streams = m_streams; HashSet >::iterator end = streams.end(); for (HashSet >::iterator it = streams.begin(); it != end; ++it) { (*it)->stop(); disconnectStream((*it).get()); } ASSERT(m_streams.isEmpty()); m_isStarted = false; #if USE(JSC) JSC::JSLock::DropAllLocks dropAllLocks(JSC::SilenceAssertionsOnly); #endif #if ENABLE(NETSCAPE_PLUGIN_API) #if defined(XP_WIN) && !PLATFORM(GTK) // Unsubclass the window if (m_isWindowed) { #if OS(WINCE) WNDPROC currentWndProc = (WNDPROC)GetWindowLong(platformPluginWidget(), GWL_WNDPROC); if (currentWndProc == PluginViewWndProc) SetWindowLong(platformPluginWidget(), GWL_WNDPROC, (LONG)m_pluginWndProc); #else WNDPROC currentWndProc = (WNDPROC)GetWindowLongPtr(platformPluginWidget(), GWLP_WNDPROC); if (currentWndProc == PluginViewWndProc) SetWindowLongPtr(platformPluginWidget(), GWLP_WNDPROC, (LONG_PTR)m_pluginWndProc); #endif } #endif // !defined(XP_WIN) || PLATFORM(GTK) #endif // ENABLE(NETSCAPE_PLUGIN_API) #if !defined(XP_MACOSX) // Clear the window m_npWindow.window = 0; if (m_plugin->pluginFuncs()->setwindow && !m_plugin->quirks().contains(PluginQuirkDontSetNullWindowHandleOnDestroy)) { PluginView::setCurrentPluginView(this); setCallingPlugin(true); m_plugin->pluginFuncs()->setwindow(m_instance, &m_npWindow); setCallingPlugin(false); PluginView::setCurrentPluginView(0); } #ifdef XP_UNIX if (m_isWindowed && m_npWindow.ws_info) delete (NPSetWindowCallbackStruct *)m_npWindow.ws_info; m_npWindow.ws_info = 0; #endif #endif // !defined(XP_MACOSX) PluginMainThreadScheduler::scheduler().unregisterPlugin(m_instance); NPSavedData* savedData = 0; PluginView::setCurrentPluginView(this); setCallingPlugin(true); NPError npErr = m_plugin->pluginFuncs()->destroy(m_instance, &savedData); setCallingPlugin(false); LOG_NPERROR(npErr); PluginView::setCurrentPluginView(0); #if ENABLE(NETSCAPE_PLUGIN_API) if (savedData) { // TODO: Actually save this data instead of just discarding it if (savedData->buf) NPN_MemFree(savedData->buf); NPN_MemFree(savedData); } #endif m_instance->pdata = 0; } void PluginView::setCurrentPluginView(PluginView* pluginView) { s_currentPluginView = pluginView; } PluginView* PluginView::currentPluginView() { return s_currentPluginView; } static char* createUTF8String(const String& str) { CString cstr = str.utf8(); char* result = reinterpret_cast(fastMalloc(cstr.length() + 1)); strncpy(result, cstr.data(), cstr.length() + 1); return result; } void PluginView::performRequest(PluginRequest* request) { if (!m_isStarted) return; // don't let a plugin start any loads if it is no longer part of a document that is being // displayed unless the loads are in the same frame as the plugin. const String& targetFrameName = request->frameLoadRequest().frameName(); if (m_parentFrame->loader()->documentLoader() != m_parentFrame->loader()->activeDocumentLoader() && (targetFrameName.isNull() || m_parentFrame->tree()->find(targetFrameName) != m_parentFrame)) return; KURL requestURL = request->frameLoadRequest().resourceRequest().url(); String jsString = scriptStringIfJavaScriptURL(requestURL); if (jsString.isNull()) { // if this is not a targeted request, create a stream for it. otherwise, // just pass it off to the loader if (targetFrameName.isEmpty()) { RefPtr stream = PluginStream::create(this, m_parentFrame.get(), request->frameLoadRequest().resourceRequest(), request->sendNotification(), request->notifyData(), plugin()->pluginFuncs(), instance(), m_plugin->quirks()); m_streams.add(stream); stream->start(); } else { // If the target frame is our frame, we could destroy the // PluginView, so we protect it. RefPtr protect(this); m_parentFrame->loader()->load(request->frameLoadRequest().resourceRequest(), targetFrameName, false); // FIXME: This should be sent when the document has finished loading if (request->sendNotification()) { PluginView::setCurrentPluginView(this); #if USE(JSC) JSC::JSLock::DropAllLocks dropAllLocks(JSC::SilenceAssertionsOnly); #endif setCallingPlugin(true); m_plugin->pluginFuncs()->urlnotify(m_instance, requestURL.string().utf8().data(), NPRES_DONE, request->notifyData()); setCallingPlugin(false); PluginView::setCurrentPluginView(0); } } return; } // Targeted JavaScript requests are only allowed on the frame that contains the JavaScript plugin // and this has been made sure in ::load. ASSERT(targetFrameName.isEmpty() || m_parentFrame->tree()->find(targetFrameName) == m_parentFrame); // Executing a script can cause the plugin view to be destroyed, so we keep a reference to it. RefPtr protector(this); ScriptValue result = m_parentFrame->script()->executeScript(jsString, request->shouldAllowPopups()); if (targetFrameName.isNull()) { String resultString; #if USE(JSC) ScriptState* scriptState = m_parentFrame->script()->globalObject(pluginWorld())->globalExec(); #elif USE(V8) ScriptState* scriptState = 0; // Not used with V8 #endif CString cstr; if (result.getString(scriptState, resultString)) cstr = resultString.utf8(); RefPtr stream = PluginStream::create(this, m_parentFrame.get(), request->frameLoadRequest().resourceRequest(), request->sendNotification(), request->notifyData(), plugin()->pluginFuncs(), instance(), m_plugin->quirks()); m_streams.add(stream); stream->sendJavaScriptStream(requestURL, cstr); } } void PluginView::requestTimerFired(Timer* timer) { ASSERT(timer == &m_requestTimer); ASSERT(m_requests.size() > 0); ASSERT(!m_isJavaScriptPaused); PluginRequest* request = m_requests[0]; m_requests.remove(0); // Schedule a new request before calling performRequest since the call to // performRequest can cause the plugin view to be deleted. if (m_requests.size() > 0) m_requestTimer.startOneShot(0); performRequest(request); delete request; } void PluginView::scheduleRequest(PluginRequest* request) { m_requests.append(request); if (!m_isJavaScriptPaused) m_requestTimer.startOneShot(0); } NPError PluginView::load(const FrameLoadRequest& frameLoadRequest, bool sendNotification, void* notifyData) { ASSERT(frameLoadRequest.resourceRequest().httpMethod() == "GET" || frameLoadRequest.resourceRequest().httpMethod() == "POST"); KURL url = frameLoadRequest.resourceRequest().url(); if (url.isEmpty()) return NPERR_INVALID_URL; // Don't allow requests to be made when the document loader is stopping all loaders. DocumentLoader* loader = m_parentFrame->loader()->documentLoader(); if (!loader || loader->isStopping()) return NPERR_GENERIC_ERROR; const String& targetFrameName = frameLoadRequest.frameName(); String jsString = scriptStringIfJavaScriptURL(url); if (!jsString.isNull()) { // Return NPERR_GENERIC_ERROR if JS is disabled. This is what Mozilla does. if (!m_parentFrame->script()->canExecuteScripts(NotAboutToExecuteScript)) return NPERR_GENERIC_ERROR; // For security reasons, only allow JS requests to be made on the frame that contains the plug-in. if (!targetFrameName.isNull() && m_parentFrame->tree()->find(targetFrameName) != m_parentFrame) return NPERR_INVALID_PARAM; } else if (!m_parentFrame->document()->securityOrigin()->canDisplay(url)) return NPERR_GENERIC_ERROR; PluginRequest* request = new PluginRequest(frameLoadRequest, sendNotification, notifyData, arePopupsAllowed()); scheduleRequest(request); return NPERR_NO_ERROR; } static KURL makeURL(const KURL& baseURL, const char* relativeURLString) { String urlString = relativeURLString; // Strip return characters. urlString.replace('\n', ""); urlString.replace('\r', ""); return KURL(baseURL, urlString); } NPError PluginView::getURLNotify(const char* url, const char* target, void* notifyData) { FrameLoadRequest frameLoadRequest(m_parentFrame->document()->securityOrigin()); frameLoadRequest.setFrameName(target); frameLoadRequest.resourceRequest().setHTTPMethod("GET"); frameLoadRequest.resourceRequest().setURL(makeURL(m_baseURL, url)); #ifdef ANDROID_PLUGINS if (!SecurityOrigin::shouldHideReferrer( frameLoadRequest.resourceRequest().url(), m_url)) frameLoadRequest.resourceRequest().setHTTPReferrer(m_url); #endif return load(frameLoadRequest, true, notifyData); } NPError PluginView::getURL(const char* url, const char* target) { FrameLoadRequest frameLoadRequest(m_parentFrame->document()->securityOrigin()); frameLoadRequest.setFrameName(target); frameLoadRequest.resourceRequest().setHTTPMethod("GET"); frameLoadRequest.resourceRequest().setURL(makeURL(m_baseURL, url)); #ifdef ANDROID_PLUGINS if (!SecurityOrigin::shouldHideReferrer( frameLoadRequest.resourceRequest().url(), m_url)) frameLoadRequest.resourceRequest().setHTTPReferrer(m_url); #endif return load(frameLoadRequest, false, 0); } NPError PluginView::postURLNotify(const char* url, const char* target, uint32_t len, const char* buf, NPBool file, void* notifyData) { return handlePost(url, target, len, buf, file, notifyData, true, true); } NPError PluginView::postURL(const char* url, const char* target, uint32_t len, const char* buf, NPBool file) { // As documented, only allow headers to be specified via NPP_PostURL when using a file. return handlePost(url, target, len, buf, file, 0, false, file); } NPError PluginView::newStream(NPMIMEType type, const char* target, NPStream** stream) { notImplemented(); // Unsupported return NPERR_GENERIC_ERROR; } int32_t PluginView::write(NPStream* stream, int32_t len, void* buffer) { notImplemented(); // Unsupported return -1; } NPError PluginView::destroyStream(NPStream* stream, NPReason reason) { if (!stream || PluginStream::ownerForStream(stream) != m_instance) return NPERR_INVALID_INSTANCE_ERROR; PluginStream* browserStream = static_cast(stream->ndata); browserStream->cancelAndDestroyStream(reason); return NPERR_NO_ERROR; } void PluginView::status(const char* message) { if (Page* page = m_parentFrame->page()) page->chrome()->setStatusbarText(m_parentFrame.get(), String::fromUTF8(message)); } NPError PluginView::setValue(NPPVariable variable, void* value) { LOG(Plugins, "PluginView::setValue(%s): ", prettyNameForNPPVariable(variable, value).data()); switch (variable) { case NPPVpluginWindowBool: m_isWindowed = value; return NPERR_NO_ERROR; case NPPVpluginTransparentBool: m_isTransparent = value; return NPERR_NO_ERROR; #if defined(XP_MACOSX) case NPPVpluginDrawingModel: { // Can only set drawing model inside NPP_New() if (this != currentPluginView()) return NPERR_GENERIC_ERROR; NPDrawingModel newDrawingModel = NPDrawingModel(uintptr_t(value)); switch (newDrawingModel) { case NPDrawingModelCoreGraphics: m_drawingModel = newDrawingModel; return NPERR_NO_ERROR; #ifndef NP_NO_QUICKDRAW case NPDrawingModelQuickDraw: #endif case NPDrawingModelCoreAnimation: default: LOG(Plugins, "Plugin asked for unsupported drawing model: %s", prettyNameForDrawingModel(newDrawingModel)); return NPERR_GENERIC_ERROR; } } case NPPVpluginEventModel: { // Can only set event model inside NPP_New() if (this != currentPluginView()) return NPERR_GENERIC_ERROR; NPEventModel newEventModel = NPEventModel(uintptr_t(value)); switch (newEventModel) { #ifndef NP_NO_CARBON case NPEventModelCarbon: #endif case NPEventModelCocoa: m_eventModel = newEventModel; return NPERR_NO_ERROR; default: LOG(Plugins, "Plugin asked for unsupported event model: %s", prettyNameForEventModel(newEventModel)); return NPERR_GENERIC_ERROR; } } #endif // defined(XP_MACOSX) #if PLATFORM(QT) && defined(MOZ_PLATFORM_MAEMO) && (MOZ_PLATFORM_MAEMO >= 5) case NPPVpluginWindowlessLocalBool: m_renderToImage = true; return NPERR_NO_ERROR; #endif default: #ifdef PLUGIN_PLATFORM_SETVALUE return platformSetValue(variable, value); #else notImplemented(); return NPERR_GENERIC_ERROR; #endif } } void PluginView::invalidateTimerFired(Timer* timer) { ASSERT(timer == &m_invalidateTimer); for (unsigned i = 0; i < m_invalidRects.size(); i++) invalidateRect(m_invalidRects[i]); m_invalidRects.clear(); } void PluginView::pushPopupsEnabledState(bool state) { m_popupStateStack.append(state); } void PluginView::popPopupsEnabledState() { m_popupStateStack.removeLast(); } bool PluginView::arePopupsAllowed() const { if (!m_popupStateStack.isEmpty()) return m_popupStateStack.last(); return false; } void PluginView::setJavaScriptPaused(bool paused) { if (m_isJavaScriptPaused == paused) return; m_isJavaScriptPaused = paused; if (m_isJavaScriptPaused) m_requestTimer.stop(); else if (!m_requests.isEmpty()) m_requestTimer.startOneShot(0); } #if ENABLE(NETSCAPE_PLUGIN_API) NPObject* PluginView::npObject() { NPObject* object = 0; if (!m_isStarted || !m_plugin || !m_plugin->pluginFuncs()->getvalue) return 0; // On Windows, calling Java's NPN_GetValue can allow the message loop to // run, allowing loading to take place or JavaScript to run. Protect the // PluginView from destruction. RefPtr protect(this); NPError npErr; { PluginView::setCurrentPluginView(this); #if USE(JSC) JSC::JSLock::DropAllLocks dropAllLocks(JSC::SilenceAssertionsOnly); #endif setCallingPlugin(true); npErr = m_plugin->pluginFuncs()->getvalue(m_instance, NPPVpluginScriptableNPObject, &object); setCallingPlugin(false); PluginView::setCurrentPluginView(0); } if (npErr != NPERR_NO_ERROR) return 0; return object; } #endif #if USE(JSC) PassRefPtr PluginView::bindingInstance() { #if ENABLE(NETSCAPE_PLUGIN_API) NPObject* object = npObject(); if (!object) return 0; if (hasOneRef()) { // The renderer for the PluginView was destroyed during the above call, and // the PluginView will be destroyed when this function returns, so we // return null. return 0; } RefPtr root = m_parentFrame->script()->createRootObject(this); RefPtr instance = JSC::Bindings::CInstance::create(object, root.release()); _NPN_ReleaseObject(object); return instance.release(); #else return 0; #endif } #endif NPObject* PluginView::getNPObject() { #if ENABLE(NETSCAPE_PLUGIN_API) if (!m_plugin || !m_plugin->pluginFuncs()->getvalue) return 0; NPObject* object = 0; NPError npErr; { PluginView::setCurrentPluginView(this); setCallingPlugin(true); npErr = m_plugin->pluginFuncs()->getvalue(m_instance, NPPVpluginScriptableNPObject, &object); setCallingPlugin(false); PluginView::setCurrentPluginView(0); } if (npErr != NPERR_NO_ERROR || !object) return 0; // Bindings::CInstance (used in JSC version) retains the object, so in ~PluginView() it calls // cleanupScriptObjectsForPlugin() to releases the object. To maintain the reference count, // don't call _NPN_ReleaseObject(object) here. return object; #else return 0; #endif // NETSCAPE_PLUGIN_API } void PluginView::disconnectStream(PluginStream* stream) { ASSERT(m_streams.contains(stream)); m_streams.remove(stream); } void PluginView::setParameters(const Vector& paramNames, const Vector& paramValues) { ASSERT(paramNames.size() == paramValues.size()); unsigned size = paramNames.size(); unsigned paramCount = 0; m_paramNames = reinterpret_cast(fastMalloc(sizeof(char*) * size)); m_paramValues = reinterpret_cast(fastMalloc(sizeof(char*) * size)); for (unsigned i = 0; i < size; i++) { if (m_plugin->quirks().contains(PluginQuirkRemoveWindowlessVideoParam) && equalIgnoringCase(paramNames[i], "windowlessvideo")) continue; if (paramNames[i] == "pluginspage") m_pluginsPage = paramValues[i]; m_paramNames[paramCount] = createUTF8String(paramNames[i]); m_paramValues[paramCount] = createUTF8String(paramValues[i]); paramCount++; } m_paramCount = paramCount; } PluginView::PluginView(Frame* parentFrame, const IntSize& size, PluginPackage* plugin, Element* element, const KURL& url, const Vector& paramNames, const Vector& paramValues, const String& mimeType, bool loadManually) : m_parentFrame(parentFrame) , m_plugin(plugin) , m_element(element) , m_isStarted(false) , m_url(url) , m_baseURL(m_parentFrame->loader()->completeURL(m_parentFrame->document()->baseURL().string())) , m_status(PluginStatusLoadedSuccessfully) , m_requestTimer(this, &PluginView::requestTimerFired) , m_invalidateTimer(this, &PluginView::invalidateTimerFired) , m_popPopupsStateTimer(this, &PluginView::popPopupsStateTimerFired) , m_lifeSupportTimer(this, &PluginView::lifeSupportTimerFired) , m_mode(loadManually ? NP_FULL : NP_EMBED) , m_paramNames(0) , m_paramValues(0) , m_mimeType(mimeType) , m_instance(0) #if defined(XP_MACOSX) , m_isWindowed(false) #else , m_isWindowed(true) #endif , m_isTransparent(false) , m_haveInitialized(false) , m_isWaitingToStart(false) #if defined(XP_UNIX) , m_needsXEmbed(false) #endif #if OS(WINDOWS) && ENABLE(NETSCAPE_PLUGIN_API) , m_pluginWndProc(0) , m_lastMessage(0) , m_isCallingPluginWndProc(false) , m_wmPrintHDC(0) , m_haveUpdatedPluginWidget(false) #endif #if (PLATFORM(QT) && OS(WINDOWS)) || defined(XP_MACOSX) , m_window(0) #endif #if defined(XP_MACOSX) , m_drawingModel(NPDrawingModel(-1)) , m_eventModel(NPEventModel(-1)) , m_contextRef(0) , m_fakeWindow(0) #endif #if defined(XP_UNIX) && ENABLE(NETSCAPE_PLUGIN_API) , m_hasPendingGeometryChange(true) , m_drawable(0) , m_visual(0) , m_colormap(0) , m_pluginDisplay(0) #endif #if PLATFORM(QT) && defined(MOZ_PLATFORM_MAEMO) && (MOZ_PLATFORM_MAEMO >= 5) , m_renderToImage(false) #endif , m_loadManually(loadManually) , m_manualStream(0) , m_isJavaScriptPaused(false) , m_isHalted(false) , m_hasBeenHalted(false) , m_haveCalledSetWindow(false) { #if defined(ANDROID_PLUGINS) platformInit(); #endif if (!m_plugin) { m_status = PluginStatusCanNotFindPlugin; return; } m_instance = &m_instanceStruct; m_instance->ndata = this; m_instance->pdata = 0; instanceMap().add(m_instance, this); setParameters(paramNames, paramValues); memset(&m_npWindow, 0, sizeof(m_npWindow)); #if defined(XP_MACOSX) memset(&m_npCgContext, 0, sizeof(m_npCgContext)); #endif resize(size); } void PluginView::focusPluginElement() { // Focus the plugin if (Page* page = m_parentFrame->page()) page->focusController()->setFocusedFrame(m_parentFrame); m_parentFrame->document()->setFocusedNode(m_element); } void PluginView::didReceiveResponse(const ResourceResponse& response) { if (m_status != PluginStatusLoadedSuccessfully) return; ASSERT(m_loadManually); ASSERT(!m_manualStream); m_manualStream = PluginStream::create(this, m_parentFrame.get(), m_parentFrame->loader()->activeDocumentLoader()->request(), false, 0, plugin()->pluginFuncs(), instance(), m_plugin->quirks()); m_manualStream->setLoadManually(true); m_manualStream->didReceiveResponse(0, response); } void PluginView::didReceiveData(const char* data, int length) { if (m_status != PluginStatusLoadedSuccessfully) return; ASSERT(m_loadManually); ASSERT(m_manualStream); m_manualStream->didReceiveData(0, data, length); } void PluginView::didFinishLoading() { if (m_status != PluginStatusLoadedSuccessfully) return; ASSERT(m_loadManually); ASSERT(m_manualStream); m_manualStream->didFinishLoading(0); } void PluginView::didFail(const ResourceError& error) { if (m_status != PluginStatusLoadedSuccessfully) return; ASSERT(m_loadManually); if (m_manualStream) m_manualStream->didFail(0, error); } void PluginView::setCallingPlugin(bool b) const { if (!m_plugin->quirks().contains(PluginQuirkHasModalMessageLoop)) return; if (b) ++s_callingPlugin; else --s_callingPlugin; ASSERT(s_callingPlugin >= 0); } bool PluginView::isCallingPlugin() { return s_callingPlugin > 0; } PassRefPtr PluginView::create(Frame* parentFrame, const IntSize& size, Element* element, const KURL& url, const Vector& paramNames, const Vector& paramValues, const String& mimeType, bool loadManually) { // if we fail to find a plugin for this MIME type, findPlugin will search for // a plugin by the file extension and update the MIME type, so pass a mutable String String mimeTypeCopy = mimeType; PluginPackage* plugin = PluginDatabase::installedPlugins()->findPlugin(url, mimeTypeCopy); // No plugin was found, try refreshing the database and searching again if (!plugin && PluginDatabase::installedPlugins()->refresh()) { mimeTypeCopy = mimeType; plugin = PluginDatabase::installedPlugins()->findPlugin(url, mimeTypeCopy); } return adoptRef(new PluginView(parentFrame, size, plugin, element, url, paramNames, paramValues, mimeTypeCopy, loadManually)); } void PluginView::freeStringArray(char** stringArray, int length) { if (!stringArray) return; for (int i = 0; i < length; i++) fastFree(stringArray[i]); fastFree(stringArray); } static inline bool startsWithBlankLine(const Vector& buffer) { return buffer.size() > 0 && buffer[0] == '\n'; } static inline int locationAfterFirstBlankLine(const Vector& buffer) { const char* bytes = buffer.data(); unsigned length = buffer.size(); for (unsigned i = 0; i < length - 4; i++) { // Support for Acrobat. It sends "\n\n". if (bytes[i] == '\n' && bytes[i + 1] == '\n') return i + 2; // Returns the position after 2 CRLF's or 1 CRLF if it is the first line. if (bytes[i] == '\r' && bytes[i + 1] == '\n') { i += 2; if (i == 2) return i; else if (bytes[i] == '\n') // Support for Director. It sends "\r\n\n" (3880387). return i + 1; else if (bytes[i] == '\r' && bytes[i + 1] == '\n') // Support for Flash. It sends "\r\n\r\n" (3758113). return i + 2; } } return -1; } static inline const char* findEOL(const char* bytes, unsigned length) { // According to the HTTP specification EOL is defined as // a CRLF pair. Unfortunately, some servers will use LF // instead. Worse yet, some servers will use a combination // of both (e.g.
CRLFLF), so findEOL needs // to be more forgiving. It will now accept CRLF, LF or // CR. // // It returns NULL if EOLF is not found or it will return // a pointer to the first terminating character. for (unsigned i = 0; i < length; i++) { if (bytes[i] == '\n') return bytes + i; if (bytes[i] == '\r') { // Check to see if spanning buffer bounds // (CRLF is across reads). If so, wait for // next read. if (i + 1 == length) break; return bytes + i; } } return 0; } static inline String capitalizeRFC822HeaderFieldName(const String& name) { bool capitalizeCharacter = true; String result; for (unsigned i = 0; i < name.length(); i++) { UChar c; if (capitalizeCharacter && name[i] >= 'a' && name[i] <= 'z') c = toASCIIUpper(name[i]); else if (!capitalizeCharacter && name[i] >= 'A' && name[i] <= 'Z') c = toASCIILower(name[i]); else c = name[i]; if (name[i] == '-') capitalizeCharacter = true; else capitalizeCharacter = false; result.append(c); } return result; } static inline HTTPHeaderMap parseRFC822HeaderFields(const Vector& buffer, unsigned length) { const char* bytes = buffer.data(); const char* eol; String lastKey; HTTPHeaderMap headerFields; // Loop ove rlines until we're past the header, or we can't find any more end-of-lines while ((eol = findEOL(bytes, length))) { const char* line = bytes; int lineLength = eol - bytes; // Move bytes to the character after the terminator as returned by findEOL. bytes = eol + 1; if ((*eol == '\r') && (*bytes == '\n')) bytes++; // Safe since findEOL won't return a spanning CRLF. length -= (bytes - line); if (lineLength == 0) // Blank line; we're at the end of the header break; else if (*line == ' ' || *line == '\t') { // Continuation of the previous header if (lastKey.isNull()) { // malformed header; ignore it and continue continue; } else { // Merge the continuation of the previous header String currentValue = headerFields.get(lastKey); String newValue(line, lineLength); headerFields.set(lastKey, currentValue + newValue); } } else { // Brand new header const char* colon; for (colon = line; *colon != ':' && colon != eol; colon++) { // empty loop } if (colon == eol) // malformed header; ignore it and continue continue; else { lastKey = capitalizeRFC822HeaderFieldName(String(line, colon - line)); String value; for (colon++; colon != eol; colon++) { if (*colon != ' ' && *colon != '\t') break; } if (colon == eol) value = ""; else value = String(colon, eol - colon); String oldValue = headerFields.get(lastKey); if (!oldValue.isNull()) { String tmp = oldValue; tmp += ", "; tmp += value; value = tmp; } headerFields.set(lastKey, value); } } } return headerFields; } NPError PluginView::handlePost(const char* url, const char* target, uint32_t len, const char* buf, bool file, void* notifyData, bool sendNotification, bool allowHeaders) { if (!url || !len || !buf) return NPERR_INVALID_PARAM; FrameLoadRequest frameLoadRequest(m_parentFrame->document()->securityOrigin()); HTTPHeaderMap headerFields; Vector buffer; if (file) { NPError readResult = handlePostReadFile(buffer, len, buf); if(readResult != NPERR_NO_ERROR) return readResult; } else { buffer.resize(len); memcpy(buffer.data(), buf, len); } const char* postData = buffer.data(); int postDataLength = buffer.size(); if (allowHeaders) { if (startsWithBlankLine(buffer)) { postData++; postDataLength--; } else { int location = locationAfterFirstBlankLine(buffer); if (location != -1) { // If the blank line is somewhere in the middle of the buffer, everything before is the header headerFields = parseRFC822HeaderFields(buffer, location); unsigned dataLength = buffer.size() - location; // Sometimes plugins like to set Content-Length themselves when they post, // but WebFoundation does not like that. So we will remove the header // and instead truncate the data to the requested length. String contentLength = headerFields.get("Content-Length"); if (!contentLength.isNull()) dataLength = min(contentLength.toInt(), (int)dataLength); headerFields.remove("Content-Length"); postData += location; postDataLength = dataLength; } } } frameLoadRequest.resourceRequest().setHTTPMethod("POST"); frameLoadRequest.resourceRequest().setURL(makeURL(m_baseURL, url)); frameLoadRequest.resourceRequest().addHTTPHeaderFields(headerFields); frameLoadRequest.resourceRequest().setHTTPBody(FormData::create(postData, postDataLength)); frameLoadRequest.setFrameName(target); return load(frameLoadRequest, sendNotification, notifyData); } #ifdef PLUGIN_SCHEDULE_TIMER uint32_t PluginView::scheduleTimer(NPP instance, uint32_t interval, bool repeat, void (*timerFunc)(NPP, uint32_t timerID)) { return m_timerList.schedule(instance, interval, repeat, timerFunc); } void PluginView::unscheduleTimer(NPP instance, uint32_t timerID) { m_timerList.unschedule(instance, timerID); } #endif void PluginView::invalidateWindowlessPluginRect(const IntRect& rect) { if (!isVisible()) return; if (!m_element->renderer()) return; RenderBox* renderer = toRenderBox(m_element->renderer()); IntRect dirtyRect = rect; dirtyRect.move(renderer->borderLeft() + renderer->paddingLeft(), renderer->borderTop() + renderer->paddingTop()); renderer->repaintRectangle(dirtyRect); } void PluginView::paintMissingPluginIcon(GraphicsContext* context, const IntRect& rect) { static RefPtr nullPluginImage; if (!nullPluginImage) nullPluginImage = Image::loadPlatformResource("nullPlugin"); IntRect imageRect(frameRect().x(), frameRect().y(), nullPluginImage->width(), nullPluginImage->height()); int xOffset = (frameRect().width() - imageRect.width()) / 2; int yOffset = (frameRect().height() - imageRect.height()) / 2; imageRect.move(xOffset, yOffset); if (!rect.intersects(imageRect)) return; context->save(); context->clip(windowClipRect()); context->drawImage(nullPluginImage.get(), ColorSpaceDeviceRGB, imageRect.location()); context->restore(); } static const char* MozillaUserAgent = "Mozilla/5.0 (" #if defined(XP_MACOSX) "Macintosh; U; Intel Mac OS X;" #elif defined(XP_WIN) "Windows; U; Windows NT 5.1;" #elif defined(XP_UNIX) // The Gtk port uses X11 plugins in Mac. #if OS(DARWIN) && PLATFORM(GTK) "X11; U; Intel Mac OS X;" #else "X11; U; Linux i686;" #endif #endif " en-US; rv:1.8.1) Gecko/20061010 Firefox/2.0"; const char* PluginView::userAgent() { #if !PLATFORM(ANDROID) if (m_plugin->quirks().contains(PluginQuirkWantsMozillaUserAgent)) return MozillaUserAgent; #endif if (m_userAgent.isNull()) m_userAgent = m_parentFrame->loader()->userAgent(m_url).utf8(); return m_userAgent.data(); } #if ENABLE(NETSCAPE_PLUGIN_API) const char* PluginView::userAgentStatic() { return MozillaUserAgent; } #endif Node* PluginView::node() const { return m_element; } String PluginView::pluginName() const { return m_plugin->name(); } void PluginView::lifeSupportTimerFired(Timer*) { deref(); } void PluginView::keepAlive() { if (m_lifeSupportTimer.isActive()) return; ref(); m_lifeSupportTimer.startOneShot(0); } #if ENABLE(NETSCAPE_PLUGIN_API) void PluginView::keepAlive(NPP instance) { PluginView* view = instanceMap().get(instance); if (!view) return; view->keepAlive(); } NPError PluginView::getValueStatic(NPNVariable variable, void* value) { LOG(Plugins, "PluginView::getValueStatic(%s)", prettyNameForNPNVariable(variable).data()); NPError result; if (platformGetValueStatic(variable, value, &result)) return result; return NPERR_GENERIC_ERROR; } NPError PluginView::getValue(NPNVariable variable, void* value) { LOG(Plugins, "PluginView::getValue(%s)", prettyNameForNPNVariable(variable).data()); NPError result; if (platformGetValue(variable, value, &result)) return result; if (platformGetValueStatic(variable, value, &result)) return result; switch (variable) { case NPNVWindowNPObject: { if (m_isJavaScriptPaused) return NPERR_GENERIC_ERROR; NPObject* windowScriptObject = m_parentFrame->script()->windowScriptNPObject(); // Return value is expected to be retained, as described here: if (windowScriptObject) _NPN_RetainObject(windowScriptObject); void** v = (void**)value; *v = windowScriptObject; return NPERR_NO_ERROR; } case NPNVPluginElementNPObject: { if (m_isJavaScriptPaused) return NPERR_GENERIC_ERROR; NPObject* pluginScriptObject = 0; if (m_element->hasTagName(appletTag) || m_element->hasTagName(embedTag) || m_element->hasTagName(objectTag)) pluginScriptObject = static_cast(m_element)->getNPObject(); // Return value is expected to be retained, as described here: if (pluginScriptObject) _NPN_RetainObject(pluginScriptObject); void** v = (void**)value; *v = pluginScriptObject; return NPERR_NO_ERROR; } case NPNVprivateModeBool: { Page* page = m_parentFrame->page(); if (!page) return NPERR_GENERIC_ERROR; *((NPBool*)value) = !page->settings() || page->settings()->privateBrowsingEnabled(); return NPERR_NO_ERROR; } default: return NPERR_GENERIC_ERROR; } } static Frame* getFrame(Frame* parentFrame, Element* element) { if (parentFrame) return parentFrame; Document* document = element->document(); if (!document) document = element->ownerDocument(); if (document) return document->frame(); return 0; } NPError PluginView::getValueForURL(NPNURLVariable variable, const char* url, char** value, uint32_t* len) { LOG(Plugins, "PluginView::getValueForURL(%s)", prettyNameForNPNURLVariable(variable).data()); NPError result = NPERR_NO_ERROR; switch (variable) { case NPNURLVCookie: { KURL u(m_baseURL, url); if (u.isValid()) { Frame* frame = getFrame(parentFrame(), m_element); if (frame) { const CString cookieStr = cookies(frame->document(), u).utf8(); if (!cookieStr.isNull()) { const int size = cookieStr.length(); *value = static_cast(NPN_MemAlloc(size+1)); if (*value) { memset(*value, 0, size+1); memcpy(*value, cookieStr.data(), size+1); if (len) *len = size; } else result = NPERR_OUT_OF_MEMORY_ERROR; } } } else result = NPERR_INVALID_URL; break; } case NPNURLVProxy: { KURL u(m_baseURL, url); if (u.isValid()) { Frame* frame = getFrame(parentFrame(), m_element); const FrameLoader* frameLoader = frame ? frame->loader() : 0; const NetworkingContext* context = frameLoader ? frameLoader->networkingContext() : 0; const CString proxyStr = toString(proxyServersForURL(u, context)).utf8(); if (!proxyStr.isNull()) { const int size = proxyStr.length(); *value = static_cast(NPN_MemAlloc(size+1)); if (*value) { memset(*value, 0, size+1); memcpy(*value, proxyStr.data(), size+1); if (len) *len = size; } else result = NPERR_OUT_OF_MEMORY_ERROR; } } else result = NPERR_INVALID_URL; break; } default: result = NPERR_GENERIC_ERROR; LOG(Plugins, "PluginView::getValueForURL: %s", prettyNameForNPNURLVariable(variable).data()); break; } return result; } NPError PluginView::setValueForURL(NPNURLVariable variable, const char* url, const char* value, uint32_t len) { LOG(Plugins, "PluginView::setValueForURL(%s)", prettyNameForNPNURLVariable(variable).data()); NPError result = NPERR_NO_ERROR; switch (variable) { case NPNURLVCookie: { KURL u(m_baseURL, url); if (u.isValid()) { const String cookieStr = String::fromUTF8(value, len); Frame* frame = getFrame(parentFrame(), m_element); if (frame && !cookieStr.isEmpty()) setCookies(frame->document(), u, cookieStr); } else result = NPERR_INVALID_URL; break; } case NPNURLVProxy: LOG(Plugins, "PluginView::setValueForURL(%s): Plugins are NOT allowed to set proxy information.", prettyNameForNPNURLVariable(variable).data()); result = NPERR_GENERIC_ERROR; break; default: LOG(Plugins, "PluginView::setValueForURL: %s", prettyNameForNPNURLVariable(variable).data()); result = NPERR_GENERIC_ERROR; break; } return result; } NPError PluginView::getAuthenticationInfo(const char* protocol, const char* host, int32_t port, const char* scheme, const char* realm, char** username, uint32_t* ulen, char** password, uint32_t* plen) { LOG(Plugins, "PluginView::getAuthenticationInfo: protocol=%s, host=%s, port=%d", protocol, host, port); notImplemented(); return NPERR_GENERIC_ERROR; } #endif void PluginView::privateBrowsingStateChanged(bool privateBrowsingEnabled) { NPP_SetValueProcPtr setValue = m_plugin->pluginFuncs()->setvalue; if (!setValue) return; PluginView::setCurrentPluginView(this); #if USE(JSC) JSC::JSLock::DropAllLocks dropAllLocks(JSC::SilenceAssertionsOnly); #endif setCallingPlugin(true); NPBool value = privateBrowsingEnabled; setValue(m_instance, NPNVprivateModeBool, &value); setCallingPlugin(false); PluginView::setCurrentPluginView(0); } } // namespace WebCore #endif // ENABLE(NETSCAPE_PLUGIN_API)