/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ /* vim: set ts=8 sts=2 et sw=2 tw=80: */ /* This Source Code Form is subject to the terms of the Mozilla Public * License, v. 2.0. If a copy of the MPL was not distributed with this * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ #include "mozilla/dom/PopupBlocker.h" #include "mozilla/EventStateManager.h" #include "mozilla/Preferences.h" #include "mozilla/StaticPrefs.h" #include "mozilla/TextEvents.h" #include "mozilla/TimeStamp.h" #include "nsXULPopupManager.h" #include "nsIPermissionManager.h" namespace mozilla { namespace dom { namespace { static char* sPopupAllowedEvents; static PopupBlocker::PopupControlState sPopupControlState = PopupBlocker::openAbused; static uint32_t sPopupStatePusherCount = 0; static TimeStamp sLastAllowedExternalProtocolIFrameTimeStamp; // This token is by default set to false. When a popup/filePicker is shown, it // is set to true. static bool sUnusedPopupToken = false; void PopupAllowedEventsChanged() { if (sPopupAllowedEvents) { free(sPopupAllowedEvents); } nsAutoCString str; Preferences::GetCString("dom.popup_allowed_events", str); // We'll want to do this even if str is empty to avoid looking up // this pref all the time if it's not set. sPopupAllowedEvents = ToNewCString(str); } // return true if eventName is contained within events, delimited by // spaces bool PopupAllowedForEvent(const char* eventName) { if (!sPopupAllowedEvents) { PopupAllowedEventsChanged(); if (!sPopupAllowedEvents) { return false; } } nsDependentCString events(sPopupAllowedEvents); nsCString::const_iterator start, end; nsCString::const_iterator startiter(events.BeginReading(start)); events.EndReading(end); while (startiter != end) { nsCString::const_iterator enditer(end); if (!FindInReadable(nsDependentCString(eventName), startiter, enditer)) return false; // the match is surrounded by spaces, or at a string boundary if ((startiter == start || *--startiter == ' ') && (enditer == end || *enditer == ' ')) { return true; } // Move on and see if there are other matches. (The delimitation // requirement makes it pointless to begin the next search before // the end of the invalid match just found.) startiter = enditer; } return false; } // static void OnPrefChange(const char* aPrefName, void*) { nsDependentCString prefName(aPrefName); if (prefName.EqualsLiteral("dom.popup_allowed_events")) { PopupAllowedEventsChanged(); } } } // namespace /* static */ PopupBlocker::PopupControlState PopupBlocker::PushPopupControlState( PopupBlocker::PopupControlState aState, bool aForce) { MOZ_ASSERT(NS_IsMainThread()); PopupBlocker::PopupControlState old = sPopupControlState; if (aState < old || aForce) { sPopupControlState = aState; } return old; } /* static */ void PopupBlocker::PopPopupControlState( PopupBlocker::PopupControlState aState) { MOZ_ASSERT(NS_IsMainThread()); sPopupControlState = aState; } /* static */ PopupBlocker::PopupControlState PopupBlocker::GetPopupControlState() { return sPopupControlState; } /* static */ bool PopupBlocker::CanShowPopupByPermission( nsIPrincipal* aPrincipal) { MOZ_ASSERT(aPrincipal); uint32_t permit; nsCOMPtr permissionManager = services::GetPermissionManager(); if (permissionManager && NS_SUCCEEDED(permissionManager->TestPermissionFromPrincipal( aPrincipal, "popup", &permit))) { if (permit == nsIPermissionManager::ALLOW_ACTION) { return true; } if (permit == nsIPermissionManager::DENY_ACTION) { return false; } } return !StaticPrefs::dom_disable_open_during_load(); } /* static */ bool PopupBlocker::TryUsePopupOpeningToken() { MOZ_ASSERT(sPopupStatePusherCount); if (!sUnusedPopupToken) { sUnusedPopupToken = true; return true; } return false; } /* static */ bool PopupBlocker::IsPopupOpeningTokenUnused() { return sUnusedPopupToken; } /* static */ void PopupBlocker::PopupStatePusherCreated() { ++sPopupStatePusherCount; } /* static */ void PopupBlocker::PopupStatePusherDestroyed() { MOZ_ASSERT(sPopupStatePusherCount); if (!--sPopupStatePusherCount) { sUnusedPopupToken = false; } } // static PopupBlocker::PopupControlState PopupBlocker::GetEventPopupControlState( WidgetEvent* aEvent, Event* aDOMEvent) { // generally if an event handler is running, new windows are disallowed. // check for exceptions: PopupBlocker::PopupControlState abuse = PopupBlocker::openAbused; if (aDOMEvent && aDOMEvent->GetWantsPopupControlCheck()) { nsAutoString type; aDOMEvent->GetType(type); if (PopupAllowedForEvent(NS_ConvertUTF16toUTF8(type).get())) { return PopupBlocker::openAllowed; } } switch (aEvent->mClass) { case eBasicEventClass: // For these following events only allow popups if they're // triggered while handling user input. See // nsPresShell::HandleEventInternal() for details. if (EventStateManager::IsHandlingUserInput()) { abuse = PopupBlocker::openBlocked; switch (aEvent->mMessage) { case eFormSelect: if (PopupAllowedForEvent("select")) { abuse = PopupBlocker::openControlled; } break; case eFormChange: if (PopupAllowedForEvent("change")) { abuse = PopupBlocker::openControlled; } break; default: break; } } break; case eEditorInputEventClass: // For this following event only allow popups if it's triggered // while handling user input. See // nsPresShell::HandleEventInternal() for details. if (EventStateManager::IsHandlingUserInput()) { abuse = PopupBlocker::openBlocked; switch (aEvent->mMessage) { case eEditorInput: if (PopupAllowedForEvent("input")) { abuse = PopupBlocker::openControlled; } break; default: break; } } break; case eInputEventClass: // For this following event only allow popups if it's triggered // while handling user input. See // nsPresShell::HandleEventInternal() for details. if (EventStateManager::IsHandlingUserInput()) { abuse = PopupBlocker::openBlocked; switch (aEvent->mMessage) { case eFormChange: if (PopupAllowedForEvent("change")) { abuse = PopupBlocker::openControlled; } break; case eXULCommand: abuse = PopupBlocker::openControlled; break; default: break; } } break; case eKeyboardEventClass: if (aEvent->IsTrusted()) { abuse = PopupBlocker::openBlocked; uint32_t key = aEvent->AsKeyboardEvent()->mKeyCode; switch (aEvent->mMessage) { case eKeyPress: // return key on focused button. see note at eMouseClick. if (key == NS_VK_RETURN) { abuse = PopupBlocker::openAllowed; } else if (PopupAllowedForEvent("keypress")) { abuse = PopupBlocker::openControlled; } break; case eKeyUp: // space key on focused button. see note at eMouseClick. if (key == NS_VK_SPACE) { abuse = PopupBlocker::openAllowed; } else if (PopupAllowedForEvent("keyup")) { abuse = PopupBlocker::openControlled; } break; case eKeyDown: if (PopupAllowedForEvent("keydown")) { abuse = PopupBlocker::openControlled; } break; default: break; } } break; case eTouchEventClass: if (aEvent->IsTrusted()) { abuse = PopupBlocker::openBlocked; switch (aEvent->mMessage) { case eTouchStart: if (PopupAllowedForEvent("touchstart")) { abuse = PopupBlocker::openControlled; } break; case eTouchEnd: if (PopupAllowedForEvent("touchend")) { abuse = PopupBlocker::openControlled; } break; default: break; } } break; case eMouseEventClass: if (aEvent->IsTrusted() && aEvent->AsMouseEvent()->button == WidgetMouseEvent::eLeftButton) { abuse = PopupBlocker::openBlocked; switch (aEvent->mMessage) { case eMouseUp: if (PopupAllowedForEvent("mouseup")) { abuse = PopupBlocker::openControlled; } break; case eMouseDown: if (PopupAllowedForEvent("mousedown")) { abuse = PopupBlocker::openControlled; } break; case eMouseClick: /* Click events get special treatment because of their historical status as a more legitimate event handler. If click popups are enabled in the prefs, clear the popup status completely. */ if (PopupAllowedForEvent("click")) { abuse = PopupBlocker::openAllowed; } break; case eMouseDoubleClick: if (PopupAllowedForEvent("dblclick")) { abuse = PopupBlocker::openControlled; } break; default: break; } } break; case ePointerEventClass: if (aEvent->IsTrusted() && aEvent->AsPointerEvent()->button == WidgetMouseEvent::eLeftButton) { switch (aEvent->mMessage) { case ePointerUp: if (PopupAllowedForEvent("pointerup")) { abuse = PopupBlocker::openControlled; } break; case ePointerDown: if (PopupAllowedForEvent("pointerdown")) { abuse = PopupBlocker::openControlled; } break; default: break; } } break; case eFormEventClass: // For these following events only allow popups if they're // triggered while handling user input. See // nsPresShell::HandleEventInternal() for details. if (EventStateManager::IsHandlingUserInput()) { abuse = PopupBlocker::openBlocked; switch (aEvent->mMessage) { case eFormSubmit: if (PopupAllowedForEvent("submit")) { abuse = PopupBlocker::openControlled; } break; case eFormReset: if (PopupAllowedForEvent("reset")) { abuse = PopupBlocker::openControlled; } break; default: break; } } break; default: break; } return abuse; } /* static */ void PopupBlocker::Initialize() { DebugOnly rv = Preferences::RegisterCallback(OnPrefChange, "dom.popup_allowed_events"); MOZ_ASSERT(NS_SUCCEEDED(rv), "Failed to observe \"dom.popup_allowed_events\""); } /* static */ void PopupBlocker::Shutdown() { if (sPopupAllowedEvents) { free(sPopupAllowedEvents); } Preferences::UnregisterCallback(OnPrefChange, "dom.popup_allowed_events"); } /* static */ bool PopupBlocker::ConsumeTimerTokenForExternalProtocolIframe() { TimeStamp now = TimeStamp::Now(); if (sLastAllowedExternalProtocolIFrameTimeStamp.IsNull()) { sLastAllowedExternalProtocolIFrameTimeStamp = now; return true; } if ((now - sLastAllowedExternalProtocolIFrameTimeStamp).ToSeconds() < (StaticPrefs::dom_delay_block_external_protocol_in_iframes())) { return false; } sLastAllowedExternalProtocolIFrameTimeStamp = now; return true; } /* static */ TimeStamp PopupBlocker::WhenLastExternalProtocolIframeAllowed() { return sLastAllowedExternalProtocolIFrameTimeStamp; } } // namespace dom } // namespace mozilla nsAutoPopupStatePusherInternal::nsAutoPopupStatePusherInternal( mozilla::dom::PopupBlocker::PopupControlState aState, bool aForce) : mOldState( mozilla::dom::PopupBlocker::PushPopupControlState(aState, aForce)) { mozilla::dom::PopupBlocker::PopupStatePusherCreated(); } nsAutoPopupStatePusherInternal::~nsAutoPopupStatePusherInternal() { mozilla::dom::PopupBlocker::PopPopupControlState(mOldState); mozilla::dom::PopupBlocker::PopupStatePusherDestroyed(); }