mirror of
https://github.com/mozilla/gecko-dev.git
synced 2024-10-11 12:25:53 +00:00
2310b3bd39
Every JS plugin is assigned a unique ID. When an instance of a JS plugin is created the frame loader that we use to load the plugin's handler URI will create a special TabContext. This TabContext causes the ContentParent to use the process for this specific JS plugin (creating one if it hasn't already) when it creates the PBrowser actors. This causes the iframes for all the instances of a specific JS plugin to be grouped in the same process. --HG-- extra : rebase_source : c39560bdf66cda1a005c7b823b3a46e4734878a4 extra : source : 9cba1db527c7eed4371c9f4caf96fd942608cab6
88 lines
2.8 KiB
C++
88 lines
2.8 KiB
C++
/* -*- Mode: C++; c-basic-offset: 4; indent-tabs-mode: nil; tab-width: 8 -*- */
|
|
/* vim: set sw=4 ts=8 et tw=80 ft=cpp : */
|
|
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
include protocol PBrowser;
|
|
include PBrowserOrId;
|
|
|
|
using UIStateChangeType from "nsPIDOMWindow.h";
|
|
using mozilla::OriginAttributes from "mozilla/ipc/BackgroundUtils.h";
|
|
|
|
namespace mozilla {
|
|
namespace dom {
|
|
|
|
// An IPCTabContext which corresponds to a PBrowser opened by a child when it
|
|
// receives window.open().
|
|
//
|
|
// If isMozBrowserElement is false, this PopupIPCTabContext is either a
|
|
// <xul:browser> or an app frame. The frame's app-id and app-frame-owner-app-id
|
|
// will be equal to the opener's values. For a <xul:browser>, those app IDs
|
|
// will be NO_APP_ID.
|
|
//
|
|
// If isMozBrowserElement is true, the frame's browserFrameOwnerAppId will be
|
|
// equal to the opener's app-id.
|
|
//
|
|
// It's an error to set isMozBrowserElement == false if opener is a mozbrowser
|
|
// element. Such a PopupIPCTabContext should be rejected by code which receives
|
|
// it.
|
|
struct PopupIPCTabContext
|
|
{
|
|
PBrowserOrId opener;
|
|
bool isMozBrowserElement;
|
|
};
|
|
|
|
// An IPCTabContext which corresponds to an app, browser, or normal frame.
|
|
struct FrameIPCTabContext
|
|
{
|
|
// The originAttributes dictionary.
|
|
OriginAttributes originAttributes;
|
|
|
|
// Whether this is a mozbrowser frame. <iframe mozbrowser mozapp> and
|
|
// <xul:browser> are not considered to be mozbrowser frames.
|
|
bool isMozBrowserElement;
|
|
|
|
// Whether this TabContext should work in prerender mode.
|
|
bool isPrerendered;
|
|
|
|
// The requested presentation URL.
|
|
// This value would be empty if the TabContext isn't created for
|
|
// presented content.
|
|
nsString presentationURL;
|
|
|
|
// Keyboard indicator state inherited from the parent.
|
|
UIStateChangeType showAccelerators;
|
|
UIStateChangeType showFocusRings;
|
|
};
|
|
|
|
struct JSPluginFrameIPCTabContext
|
|
{
|
|
uint32_t jsPluginId;
|
|
};
|
|
|
|
// XXXcatalinb: This is only used by ServiceWorkerClients::OpenWindow.
|
|
// Because service workers don't have an associated TabChild
|
|
// we can't satisfy the security constraints on b2g. As such, the parent
|
|
// process will accept this tab context only on desktop.
|
|
struct UnsafeIPCTabContext
|
|
{ };
|
|
|
|
// IPCTabContext is an analog to mozilla::dom::TabContext. Both specify an
|
|
// iframe/PBrowser's own and containing app-ids and tell you whether the
|
|
// iframe/PBrowser is a browser frame. But only IPCTabContext is allowed to
|
|
// travel over IPC.
|
|
//
|
|
// We need IPCTabContext (specifically, PopupIPCTabContext) to prevent a
|
|
// privilege escalation attack by a compromised child process.
|
|
union IPCTabContext
|
|
{
|
|
PopupIPCTabContext;
|
|
FrameIPCTabContext;
|
|
JSPluginFrameIPCTabContext;
|
|
UnsafeIPCTabContext;
|
|
};
|
|
|
|
}
|
|
}
|