зеркало из https://github.com/mozilla/gecko-dev.git
523 строки
18 KiB
C++
523 строки
18 KiB
C++
/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
|
|
/* vim: set ts=8 sts=2 et sw=2 tw=80: */
|
|
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
/*
|
|
* Class for managing loading of a subframe (creation of the docshell,
|
|
* handling of loads in it, recursion-checking).
|
|
*/
|
|
|
|
#ifndef nsFrameLoader_h_
|
|
#define nsFrameLoader_h_
|
|
|
|
#include "nsDocShell.h"
|
|
#include "nsStringFwd.h"
|
|
#include "nsPoint.h"
|
|
#include "nsSize.h"
|
|
#include "nsWrapperCache.h"
|
|
#include "nsIURI.h"
|
|
#include "nsFrameMessageManager.h"
|
|
#include "mozilla/dom/BindingUtils.h"
|
|
#include "mozilla/dom/BrowsingContext.h"
|
|
#include "mozilla/dom/Element.h"
|
|
#include "mozilla/dom/ParentSHistory.h"
|
|
#include "mozilla/Attributes.h"
|
|
#include "mozilla/layers/LayersTypes.h"
|
|
#include "nsStubMutationObserver.h"
|
|
#include "Units.h"
|
|
#include "nsIFrame.h"
|
|
#include "nsPluginTags.h"
|
|
|
|
class nsIURI;
|
|
class nsSubDocumentFrame;
|
|
class nsView;
|
|
class AutoResetInShow;
|
|
class AutoResetInFrameSwap;
|
|
class nsFrameLoaderOwner;
|
|
class nsIRemoteTab;
|
|
class nsIDocShellTreeItem;
|
|
class nsIDocShellTreeOwner;
|
|
class nsILoadContext;
|
|
class nsIMessageSender;
|
|
class nsIPrintSettings;
|
|
class nsIWebBrowserPersistDocumentReceiver;
|
|
class nsIWebProgressListener;
|
|
|
|
namespace mozilla {
|
|
|
|
class OriginAttributes;
|
|
|
|
namespace dom {
|
|
class ChromeMessageSender;
|
|
class ContentParent;
|
|
class InProcessBrowserChildMessageManager;
|
|
class MessageSender;
|
|
class PBrowserParent;
|
|
class ProcessMessageManager;
|
|
class Promise;
|
|
class BrowserParent;
|
|
class MutableTabContext;
|
|
class BrowserBridgeChild;
|
|
class RemoteFrameChild;
|
|
struct RemotenessOptions;
|
|
|
|
namespace ipc {
|
|
class StructuredCloneData;
|
|
} // namespace ipc
|
|
|
|
} // namespace dom
|
|
|
|
namespace layout {
|
|
class RenderFrame;
|
|
} // namespace layout
|
|
} // namespace mozilla
|
|
|
|
#if defined(MOZ_WIDGET_GTK)
|
|
typedef struct _GtkWidget GtkWidget;
|
|
#endif
|
|
|
|
// IID for nsFrameLoader, because some places want to QI to it.
|
|
#define NS_FRAMELOADER_IID \
|
|
{ \
|
|
0x297fd0ea, 0x1b4a, 0x4c9a, { \
|
|
0xa4, 0x04, 0xe5, 0x8b, 0xe8, 0x95, 0x10, 0x50 \
|
|
} \
|
|
}
|
|
|
|
class nsFrameLoader final : public nsStubMutationObserver,
|
|
public mozilla::dom::ipc::MessageManagerCallback,
|
|
public nsWrapperCache {
|
|
friend class AutoResetInShow;
|
|
friend class AutoResetInFrameSwap;
|
|
typedef mozilla::dom::PBrowserParent PBrowserParent;
|
|
typedef mozilla::dom::Document Document;
|
|
typedef mozilla::dom::BrowserParent BrowserParent;
|
|
typedef mozilla::layout::RenderFrame RenderFrame;
|
|
|
|
public:
|
|
// Called by Frame Elements to create a new FrameLoader.
|
|
static nsFrameLoader* Create(mozilla::dom::Element* aOwner,
|
|
mozilla::dom::BrowsingContext* aOpener,
|
|
bool aNetworkCreated);
|
|
|
|
// Called by nsFrameLoaderOwner::ChangeRemoteness when switching out
|
|
// FrameLoaders.
|
|
static nsFrameLoader* Create(mozilla::dom::Element* aOwner,
|
|
const mozilla::dom::RemotenessOptions& aOptions);
|
|
|
|
NS_DECLARE_STATIC_IID_ACCESSOR(NS_FRAMELOADER_IID)
|
|
|
|
NS_DECL_CYCLE_COLLECTING_ISUPPORTS
|
|
NS_DECL_CYCLE_COLLECTION_SCRIPT_HOLDER_CLASS(nsFrameLoader)
|
|
|
|
NS_DECL_NSIMUTATIONOBSERVER_ATTRIBUTECHANGED
|
|
nsresult CheckForRecursiveLoad(nsIURI* aURI);
|
|
nsresult ReallyStartLoading();
|
|
void StartDestroy();
|
|
void DestroyDocShell();
|
|
void DestroyComplete();
|
|
nsIDocShell* GetExistingDocShell() const {
|
|
return mBrowsingContext ? mBrowsingContext->GetDocShell() : nullptr;
|
|
}
|
|
mozilla::dom::InProcessBrowserChildMessageManager*
|
|
GetBrowserChildMessageManager() const {
|
|
return mChildMessageManager;
|
|
}
|
|
nsresult CreateStaticClone(nsFrameLoader* aDest);
|
|
nsresult UpdatePositionAndSize(nsSubDocumentFrame* aIFrame);
|
|
|
|
// WebIDL methods
|
|
|
|
nsDocShell* GetDocShell(mozilla::ErrorResult& aRv);
|
|
|
|
already_AddRefed<nsIRemoteTab> GetRemoteTab();
|
|
|
|
already_AddRefed<nsILoadContext> LoadContext();
|
|
|
|
already_AddRefed<mozilla::dom::BrowsingContext> GetBrowsingContext();
|
|
|
|
/**
|
|
* Start loading the frame. This method figures out what to load
|
|
* from the owner content in the frame loader.
|
|
*/
|
|
void LoadFrame(bool aOriginalSrc);
|
|
|
|
/**
|
|
* Loads the specified URI in this frame. Behaves identically to loadFrame,
|
|
* except that this method allows specifying the URI to load.
|
|
*
|
|
* @param aURI The URI to load.
|
|
* @param aTriggeringPrincipal The triggering principal for the load. May be
|
|
* null, in which case the node principal of the owner content will be
|
|
* used.
|
|
* @param aCsp The CSP to be used for the load. That is not the CSP to be
|
|
* applied to subresources within the frame, but to the iframe load
|
|
* itself. E.g. if the CSP holds upgrade-insecure-requests the the
|
|
* frame load is upgraded from http to https.
|
|
*/
|
|
nsresult LoadURI(nsIURI* aURI, nsIPrincipal* aTriggeringPrincipal,
|
|
nsIContentSecurityPolicy* aCsp, bool aOriginalSrc);
|
|
|
|
/**
|
|
* Resume a redirected load within this frame.
|
|
*
|
|
* @param aPendingSwitchID ID of a process-switching load to be reusmed
|
|
* within this frame.
|
|
*/
|
|
void ResumeLoad(uint64_t aPendingSwitchID);
|
|
|
|
/**
|
|
* Destroy the frame loader and everything inside it. This will
|
|
* clear the weak owner content reference.
|
|
*/
|
|
void Destroy();
|
|
|
|
void ActivateRemoteFrame(mozilla::ErrorResult& aRv);
|
|
|
|
void DeactivateRemoteFrame(mozilla::ErrorResult& aRv);
|
|
|
|
void SendCrossProcessMouseEvent(const nsAString& aType, float aX, float aY,
|
|
int32_t aButton, int32_t aClickCount,
|
|
int32_t aModifiers,
|
|
bool aIgnoreRootScrollFrame,
|
|
mozilla::ErrorResult& aRv);
|
|
|
|
void ActivateFrameEvent(const nsAString& aType, bool aCapture,
|
|
mozilla::ErrorResult& aRv);
|
|
|
|
void RequestNotifyAfterRemotePaint();
|
|
|
|
void RequestUpdatePosition(mozilla::ErrorResult& aRv);
|
|
|
|
void Print(uint64_t aOuterWindowID, nsIPrintSettings* aPrintSettings,
|
|
nsIWebProgressListener* aProgressListener,
|
|
mozilla::ErrorResult& aRv);
|
|
|
|
already_AddRefed<mozilla::dom::Promise> DrawSnapshot(
|
|
double aX, double aY, double aW, double aH, double aScale,
|
|
const nsAString& aBackgroundColor, mozilla::ErrorResult& aRv);
|
|
|
|
void StartPersistence(uint64_t aOuterWindowID,
|
|
nsIWebBrowserPersistDocumentReceiver* aRecv,
|
|
mozilla::ErrorResult& aRv);
|
|
|
|
// WebIDL getters
|
|
|
|
already_AddRefed<mozilla::dom::MessageSender> GetMessageManager();
|
|
|
|
already_AddRefed<Element> GetOwnerElement();
|
|
|
|
uint32_t LazyWidth() const;
|
|
|
|
uint32_t LazyHeight() const;
|
|
|
|
uint64_t ChildID() const { return mChildID; }
|
|
|
|
bool DepthTooGreat() const { return mDepthTooGreat; }
|
|
|
|
bool IsDead() const { return mDestroyCalled; }
|
|
|
|
/**
|
|
* Is this a frame loader for a bona fide <iframe mozbrowser>?
|
|
* <xul:browser> is not a mozbrowser, so this is false for that case.
|
|
*/
|
|
bool OwnerIsMozBrowserFrame();
|
|
|
|
nsIContent* GetParentObject() const { return mOwnerContent; }
|
|
|
|
/**
|
|
* MessageManagerCallback methods that we override.
|
|
*/
|
|
virtual bool DoLoadMessageManagerScript(const nsAString& aURL,
|
|
bool aRunInGlobalScope) override;
|
|
virtual nsresult DoSendAsyncMessage(
|
|
JSContext* aCx, const nsAString& aMessage,
|
|
mozilla::dom::ipc::StructuredCloneData& aData,
|
|
JS::Handle<JSObject*> aCpows, nsIPrincipal* aPrincipal) override;
|
|
|
|
/**
|
|
* Called from the layout frame associated with this frame loader;
|
|
* this notifies us to hook up with the widget and view.
|
|
*/
|
|
bool Show(int32_t marginWidth, int32_t marginHeight, int32_t scrollbarPrefX,
|
|
int32_t scrollbarPrefY, nsSubDocumentFrame* frame);
|
|
|
|
void MaybeShowFrame();
|
|
|
|
/**
|
|
* Called when the margin properties of the containing frame are changed.
|
|
*/
|
|
void MarginsChanged(uint32_t aMarginWidth, uint32_t aMarginHeight);
|
|
|
|
/**
|
|
* Called from the layout frame associated with this frame loader, when
|
|
* the frame is being torn down; this notifies us that out widget and view
|
|
* are going away and we should unhook from them.
|
|
*/
|
|
void Hide();
|
|
|
|
// Used when content is causing a FrameLoader to be created, and
|
|
// needs to try forcing layout to flush in order to get accurate
|
|
// dimensions for the content area.
|
|
MOZ_CAN_RUN_SCRIPT_BOUNDARY void ForceLayoutIfNecessary();
|
|
|
|
// The guts of an nsFrameLoaderOwner::SwapFrameLoader implementation. A
|
|
// frame loader owner needs to call this, and pass in the two references to
|
|
// nsRefPtrs for frame loaders that need to be swapped.
|
|
nsresult SwapWithOtherLoader(nsFrameLoader* aOther,
|
|
nsFrameLoaderOwner* aThisOwner,
|
|
nsFrameLoaderOwner* aOtherOwner);
|
|
|
|
nsresult SwapWithOtherRemoteLoader(nsFrameLoader* aOther,
|
|
nsFrameLoaderOwner* aThisOwner,
|
|
nsFrameLoaderOwner* aOtherOwner);
|
|
|
|
/**
|
|
* Return the primary frame for our owning content, or null if it
|
|
* can't be found.
|
|
*/
|
|
nsIFrame* GetPrimaryFrameOfOwningContent() const {
|
|
return mOwnerContent ? mOwnerContent->GetPrimaryFrame() : nullptr;
|
|
}
|
|
|
|
/**
|
|
* Return the document that owns this, or null if we don't have
|
|
* an owner.
|
|
*/
|
|
Document* GetOwnerDoc() const {
|
|
return mOwnerContent ? mOwnerContent->OwnerDoc() : nullptr;
|
|
}
|
|
|
|
/**
|
|
* Returns whether this frame is a remote frame.
|
|
*
|
|
* This is true for either a top-level remote browser in the parent process,
|
|
* or a remote subframe in the child process.
|
|
*/
|
|
bool IsRemoteFrame();
|
|
|
|
/**
|
|
* Returns the IPDL actor used if this is a top-level remote browser, or null
|
|
* otherwise.
|
|
*/
|
|
PBrowserParent* GetRemoteBrowser() const;
|
|
|
|
/**
|
|
* Returns the BrowserBridgeChild if this is an out-of-process iframe, or null
|
|
* otherwise.
|
|
*/
|
|
mozilla::dom::BrowserBridgeChild* GetBrowserBridgeChild() const;
|
|
|
|
/**
|
|
* Returns the layers ID that this remote frame is using to render.
|
|
*
|
|
* This must only be called if this is a remote frame.
|
|
*/
|
|
mozilla::layers::LayersId GetLayersId() const;
|
|
|
|
mozilla::dom::ChromeMessageSender* GetFrameMessageManager() {
|
|
return mMessageManager;
|
|
}
|
|
|
|
mozilla::dom::Element* GetOwnerContent() { return mOwnerContent; }
|
|
|
|
mozilla::dom::ParentSHistory* GetParentSHistory() { return mParentSHistory; }
|
|
|
|
/**
|
|
* Tell this FrameLoader to use a particular remote browser.
|
|
*
|
|
* This will assert if mBrowserParent is non-null. In practice,
|
|
* this means you can't have successfully run TryRemoteBrowser() on
|
|
* this object, which means you can't have called ShowRemoteFrame()
|
|
* or ReallyStartLoading().
|
|
*/
|
|
void SetRemoteBrowser(nsIRemoteTab* aBrowserParent);
|
|
|
|
/**
|
|
* Stashes a detached nsIFrame on the frame loader. We do this when we're
|
|
* destroying the nsSubDocumentFrame. If the nsSubdocumentFrame is
|
|
* being reframed we'll restore the detached nsIFrame when it's recreated,
|
|
* otherwise we'll discard the old presentation and set the detached
|
|
* subdoc nsIFrame to null. aContainerDoc is the document containing the
|
|
* the subdoc frame. This enables us to detect when the containing
|
|
* document has changed during reframe, so we can discard the presentation
|
|
* in that case.
|
|
*/
|
|
void SetDetachedSubdocFrame(nsIFrame* aDetachedFrame,
|
|
Document* aContainerDoc);
|
|
|
|
/**
|
|
* Retrieves the detached nsIFrame and the document containing the nsIFrame,
|
|
* as set by SetDetachedSubdocFrame().
|
|
*/
|
|
nsIFrame* GetDetachedSubdocFrame(Document** aContainerDoc) const;
|
|
|
|
/**
|
|
* Applies a new set of sandbox flags. These are merged with the sandbox
|
|
* flags from our owning content's owning document with a logical OR, this
|
|
* ensures that we can only add restrictions and never remove them.
|
|
*/
|
|
void ApplySandboxFlags(uint32_t sandboxFlags);
|
|
|
|
void GetURL(nsString& aURL, nsIPrincipal** aTriggeringPrincipal,
|
|
nsIContentSecurityPolicy** aCsp);
|
|
|
|
// Properly retrieves documentSize of any subdocument type.
|
|
nsresult GetWindowDimensions(nsIntRect& aRect);
|
|
|
|
virtual mozilla::dom::ProcessMessageManager* GetProcessMessageManager()
|
|
const override;
|
|
|
|
// public because a callback needs these.
|
|
RefPtr<mozilla::dom::ChromeMessageSender> mMessageManager;
|
|
RefPtr<mozilla::dom::InProcessBrowserChildMessageManager>
|
|
mChildMessageManager;
|
|
|
|
virtual JSObject* WrapObject(JSContext* cx,
|
|
JS::Handle<JSObject*> aGivenProto) override;
|
|
|
|
private:
|
|
nsFrameLoader(mozilla::dom::Element* aOwner,
|
|
mozilla::dom::BrowsingContext* aBrowsingContext,
|
|
bool aNetworkCreated);
|
|
nsFrameLoader(mozilla::dom::Element* aOwner,
|
|
mozilla::dom::BrowsingContext* aBrowsingContext,
|
|
const mozilla::dom::RemotenessOptions& aOptions);
|
|
~nsFrameLoader();
|
|
|
|
void SetOwnerContent(mozilla::dom::Element* aContent);
|
|
|
|
bool ShouldUseRemoteProcess();
|
|
|
|
/**
|
|
* Is this a frame loader for an isolated <iframe mozbrowser>?
|
|
*
|
|
* By default, mozbrowser frames are isolated. Isolation can be disabled by
|
|
* setting the frame's noisolation attribute. Disabling isolation is
|
|
* only allowed if the containing document is chrome.
|
|
*/
|
|
bool OwnerIsIsolatedMozBrowserFrame();
|
|
|
|
/**
|
|
* Get our owning element's app manifest URL, or return the empty string if
|
|
* our owning element doesn't have an app manifest URL.
|
|
*/
|
|
void GetOwnerAppManifestURL(nsAString& aOut);
|
|
|
|
/**
|
|
* If we are an IPC frame, set mRemoteFrame. Otherwise, create and
|
|
* initialize mDocShell.
|
|
*/
|
|
nsresult MaybeCreateDocShell();
|
|
nsresult EnsureMessageManager();
|
|
nsresult ReallyLoadFrameScripts();
|
|
nsDocShell* GetDocShell() const {
|
|
return mBrowsingContext ? nsDocShell::Cast(mBrowsingContext->GetDocShell())
|
|
: nullptr;
|
|
}
|
|
|
|
// Updates the subdocument position and size. This gets called only
|
|
// when we have our own in-process DocShell.
|
|
void UpdateBaseWindowPositionAndSize(nsSubDocumentFrame* aIFrame);
|
|
|
|
/**
|
|
* Checks whether a load of the given URI should be allowed, and returns an
|
|
* error result if it should not.
|
|
*
|
|
* @param aURI The URI to check.
|
|
* @param aTriggeringPrincipal The triggering principal for the load. May be
|
|
* null, in which case the node principal of the owner content is used.
|
|
*/
|
|
nsresult CheckURILoad(nsIURI* aURI, nsIPrincipal* aTriggeringPrincipal);
|
|
void FireErrorEvent();
|
|
nsresult ReallyStartLoadingInternal();
|
|
|
|
// Return true if remote browser created; nothing else to do
|
|
bool TryRemoteBrowser();
|
|
|
|
// Tell the remote browser that it's now "virtually visible"
|
|
bool ShowRemoteFrame(const mozilla::ScreenIntSize& size,
|
|
nsSubDocumentFrame* aFrame = nullptr);
|
|
|
|
void AddTreeItemToTreeOwner(nsIDocShellTreeItem* aItem,
|
|
nsIDocShellTreeOwner* aOwner);
|
|
|
|
void InitializeBrowserAPI();
|
|
void DestroyBrowserFrameScripts();
|
|
|
|
nsresult GetNewTabContext(mozilla::dom::MutableTabContext* aTabContext,
|
|
nsIURI* aURI = nullptr);
|
|
|
|
enum BrowserParentChange { eBrowserParentRemoved, eBrowserParentChanged };
|
|
void MaybeUpdatePrimaryBrowserParent(BrowserParentChange aChange);
|
|
|
|
nsresult PopulateUserContextIdFromAttribute(mozilla::OriginAttributes& aAttr);
|
|
|
|
RefPtr<mozilla::dom::BrowsingContext> mBrowsingContext;
|
|
nsCOMPtr<nsIURI> mURIToLoad;
|
|
nsCOMPtr<nsIPrincipal> mTriggeringPrincipal;
|
|
nsCOMPtr<nsIContentSecurityPolicy> mCsp;
|
|
mozilla::dom::Element* mOwnerContent; // WEAK
|
|
|
|
// After the frameloader has been removed from the DOM but before all of the
|
|
// messages from the frame have been received, we keep a strong reference to
|
|
// our <browser> element.
|
|
RefPtr<mozilla::dom::Element> mOwnerContentStrong;
|
|
|
|
// Stores the root frame of the subdocument while the subdocument is being
|
|
// reframed. Used to restore the presentation after reframing.
|
|
WeakFrame mDetachedSubdocFrame;
|
|
// Stores the containing document of the frame corresponding to this
|
|
// frame loader. This is reference is kept valid while the subframe's
|
|
// presentation is detached and stored in mDetachedSubdocFrame. This
|
|
// enables us to detect whether the frame has moved documents during
|
|
// a reframe, so that we know not to restore the presentation.
|
|
RefPtr<Document> mContainerDocWhileDetached;
|
|
|
|
// When performing a process switch, this value is used rather than mURIToLoad
|
|
// to identify the process-switching load which should be resumed in the
|
|
// target process.
|
|
uint64_t mPendingSwitchID;
|
|
|
|
RefPtr<BrowserParent> mBrowserParent;
|
|
uint64_t mChildID;
|
|
|
|
// This is used when this refers to a remote sub frame
|
|
RefPtr<mozilla::dom::BrowserBridgeChild> mBrowserBridgeChild;
|
|
|
|
// Holds the last known size of the frame.
|
|
mozilla::ScreenIntSize mLazySize;
|
|
|
|
RefPtr<mozilla::dom::ParentSHistory> mParentSHistory;
|
|
|
|
bool mDepthTooGreat : 1;
|
|
bool mIsTopLevelContent : 1;
|
|
bool mDestroyCalled : 1;
|
|
bool mNeedsAsyncDestroy : 1;
|
|
bool mInSwap : 1;
|
|
bool mInShow : 1;
|
|
bool mHideCalled : 1;
|
|
// True when the object is created for an element which the parser has
|
|
// created using NS_FROM_PARSER_NETWORK flag. If the element is modified,
|
|
// it may lose the flag.
|
|
bool mNetworkCreated : 1;
|
|
|
|
// True if a pending load corresponds to the original src (or srcdoc)
|
|
// attribute of the frame element.
|
|
bool mLoadingOriginalSrc : 1;
|
|
|
|
bool mRemoteBrowserShown : 1;
|
|
bool mIsRemoteFrame : 1;
|
|
bool mObservingOwnerContent : 1;
|
|
};
|
|
|
|
NS_DEFINE_STATIC_IID_ACCESSOR(nsFrameLoader, NS_FRAMELOADER_IID)
|
|
|
|
inline nsISupports* ToSupports(nsFrameLoader* aFrameLoader) {
|
|
return aFrameLoader;
|
|
}
|
|
|
|
#endif
|