The Tor Browser / file revision

 /* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 4 -*- */

 /* vim:set ts=4 sw=4 sts=4 et cindent: */

 /* This Source Code Form is subject to the terms of the Mozilla Public

  * License, v. 2.0. If a copy of the MPL was not distributed with this

  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

 #include "nsAboutRedirector.h"

 #include "nsNetUtil.h"

 #include "nsAboutProtocolUtils.h"

 #include "mozilla/ArrayUtils.h"

 NS_IMPL_ISUPPORTS(nsAboutRedirector, nsIAboutModule)

 struct RedirEntry {

     const char* id;

     const char* url;

     uint32_t flags;

 };

 /*

   Entries which do not have URI_SAFE_FOR_UNTRUSTED_CONTENT will run with chrome

   privileges. This is potentially dangerous. Please use

   URI_SAFE_FOR_UNTRUSTED_CONTENT in the third argument to each map item below

   unless your about: page really needs chrome privileges. Security review is

   required before adding new map entries without

   URI_SAFE_FOR_UNTRUSTED_CONTENT.  Also note, however, that adding

   URI_SAFE_FOR_UNTRUSTED_CONTENT will allow random web sites to link to that

   URI.  Perhaps we should separate the two concepts out...

  */

 static RedirEntry kRedirMap[] = {

     { "", "chrome://global/content/about.xhtml",

       nsIAboutModule::ALLOW_SCRIPT },

     { "about", "chrome://global/content/aboutAbout.xhtml", 0 },

     { "credits", "http://www.mozilla.org/credits/",

       nsIAboutModule::URI_SAFE_FOR_UNTRUSTED_CONTENT },

     { "mozilla", "chrome://global/content/mozilla.xhtml",

       nsIAboutModule::URI_SAFE_FOR_UNTRUSTED_CONTENT },

     { "plugins", "chrome://global/content/plugins.html", 0 },

     { "config", "chrome://global/content/config.xul", 0 },

 #ifdef MOZ_CRASHREPORTER

     { "crashes", "chrome://global/content/crashes.xhtml", 0 },

 #endif

     { "logo", "chrome://branding/content/about.png",

       nsIAboutModule::URI_SAFE_FOR_UNTRUSTED_CONTENT},

     { "buildconfig", "chrome://global/content/buildconfig.html",

       nsIAboutModule::URI_SAFE_FOR_UNTRUSTED_CONTENT },

     { "license", "chrome://global/content/license.html",

       nsIAboutModule::URI_SAFE_FOR_UNTRUSTED_CONTENT },

     { "neterror", "chrome://global/content/netError.xhtml",

       nsIAboutModule::URI_SAFE_FOR_UNTRUSTED_CONTENT |

       nsIAboutModule::ALLOW_SCRIPT |

       nsIAboutModule::HIDE_FROM_ABOUTABOUT },

     { "compartments", "chrome://global/content/aboutCompartments.xhtml",

       nsIAboutModule::ALLOW_SCRIPT |

       nsIAboutModule::HIDE_FROM_ABOUTABOUT },

     { "memory", "chrome://global/content/aboutMemory.xhtml",

       nsIAboutModule::ALLOW_SCRIPT },

     { "addons", "chrome://mozapps/content/extensions/extensions.xul",

       nsIAboutModule::ALLOW_SCRIPT },

     { "newaddon", "chrome://mozapps/content/extensions/newaddon.xul",

       nsIAboutModule::ALLOW_SCRIPT |

       nsIAboutModule::HIDE_FROM_ABOUTABOUT },

     { "support", "chrome://global/content/aboutSupport.xhtml",

       nsIAboutModule::ALLOW_SCRIPT },

     { "telemetry", "chrome://global/content/aboutTelemetry.xhtml",

       nsIAboutModule::ALLOW_SCRIPT },

     { "networking", "chrome://global/content/aboutNetworking.xhtml",

        nsIAboutModule::ALLOW_SCRIPT },

     { "webrtc", "chrome://global/content/aboutWebrtc.xhtml",

        nsIAboutModule::ALLOW_SCRIPT },

     // about:srcdoc is unresolvable by specification.  It is included here

     // because the security manager would disallow srcdoc iframes otherwise.

     { "srcdoc", "about:blank",

       nsIAboutModule::URI_SAFE_FOR_UNTRUSTED_CONTENT |

       nsIAboutModule::HIDE_FROM_ABOUTABOUT }

 };

 static const int kRedirTotal = mozilla::ArrayLength(kRedirMap);

 NS_IMETHODIMP

 nsAboutRedirector::NewChannel(nsIURI *aURI, nsIChannel **result)

 {

     NS_ENSURE_ARG_POINTER(aURI);

     NS_ASSERTION(result, "must not be null");

     nsresult rv;

     nsAutoCString path;

     rv = NS_GetAboutModuleName(aURI, path);

     if (NS_FAILED(rv))

         return rv;

     nsCOMPtr<nsIIOService> ioService = do_GetIOService(&rv);

     if (NS_FAILED(rv))

         return rv;

     for (int i=0; i<kRedirTotal; i++) 

     {

         if (!strcmp(path.get(), kRedirMap[i].id))

         {

             nsCOMPtr<nsIChannel> tempChannel;

             rv = ioService->NewChannel(nsDependentCString(kRedirMap[i].url),

                                        nullptr, nullptr, getter_AddRefs(tempChannel));

             if (NS_FAILED(rv))

                 return rv;

             tempChannel->SetOriginalURI(aURI);

             NS_ADDREF(*result = tempChannel);

             return rv;

         }

     }

     NS_ERROR("nsAboutRedirector called for unknown case");

     return NS_ERROR_ILLEGAL_VALUE;

 }

 NS_IMETHODIMP

 nsAboutRedirector::GetURIFlags(nsIURI *aURI, uint32_t *result)

 {

     NS_ENSURE_ARG_POINTER(aURI);

     nsAutoCString name;

     nsresult rv = NS_GetAboutModuleName(aURI, name);

     NS_ENSURE_SUCCESS(rv, rv);

     for (int i=0; i < kRedirTotal; i++) 

     {

         if (name.EqualsASCII(kRedirMap[i].id))

         {

             *result = kRedirMap[i].flags;

             return NS_OK;

         }

     }

     NS_ERROR("nsAboutRedirector called for unknown case");

     return NS_ERROR_ILLEGAL_VALUE;

 }

 nsresult

 nsAboutRedirector::Create(nsISupports *aOuter, REFNSIID aIID, void **aResult)

 {

     nsAboutRedirector* about = new nsAboutRedirector();

     if (about == nullptr)

         return NS_ERROR_OUT_OF_MEMORY;

     NS_ADDREF(about);

     nsresult rv = about->QueryInterface(aIID, aResult);

     NS_RELEASE(about);

     return rv;

 }