1 /*
2 * Copyright (C) 1999 Lars Knoll (knoll@kde.org)
3 * (C) 1999 Antti Koivisto (koivisto@kde.org)
4 * (C) 2000 Stefan Schimanski (1Stein@gmx.de)
5 * Copyright (C) 2004, 2005, 2006, 2008, 2009, 2012 Apple Inc. All rights reserved.
6 * Copyright (C) 2008 Nokia Corporation and/or its subsidiary(-ies)
7 *
8 * This library is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU Library General Public
10 * License as published by the Free Software Foundation; either
11 * version 2 of the License, or (at your option) any later version.
12 *
13 * This library is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * Library General Public License for more details.
17 *
18 * You should have received a copy of the GNU Library General Public License
19 * along with this library; see the file COPYING.LIB. If not, write to
20 * the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
21 * Boston, MA 02110-1301, USA.
22 */
23
24 #include "config.h"
25 #include "core/html/HTMLAppletElement.h"
26
27 #include "core/HTMLNames.h"
28 #include "core/dom/shadow/ShadowRoot.h"
29 #include "core/html/HTMLParamElement.h"
30 #include "core/loader/FrameLoader.h"
31 #include "core/loader/FrameLoaderClient.h"
32 #include "core/frame/LocalFrame.h"
33 #include "core/frame/Settings.h"
34 #include "core/frame/csp/ContentSecurityPolicy.h"
35 #include "core/rendering/RenderApplet.h"
36 #include "platform/Widget.h"
37 #include "platform/weborigin/KURL.h"
38 #include "platform/weborigin/SecurityOrigin.h"
39
40 namespace WebCore {
41
42 using namespace HTMLNames;
43
HTMLAppletElement(Document & document,bool createdByParser)44 HTMLAppletElement::HTMLAppletElement(Document& document, bool createdByParser)
45 : HTMLPlugInElement(appletTag, document, createdByParser, ShouldNotPreferPlugInsForImages)
46 {
47 ScriptWrappable::init(this);
48
49 m_serviceType = "application/x-java-applet";
50 }
51
create(Document & document,bool createdByParser)52 PassRefPtrWillBeRawPtr<HTMLAppletElement> HTMLAppletElement::create(Document& document, bool createdByParser)
53 {
54 RefPtrWillBeRawPtr<HTMLAppletElement> element = adoptRefWillBeNoop(new HTMLAppletElement(document, createdByParser));
55 element->ensureUserAgentShadowRoot();
56 return element.release();
57 }
58
parseAttribute(const QualifiedName & name,const AtomicString & value)59 void HTMLAppletElement::parseAttribute(const QualifiedName& name, const AtomicString& value)
60 {
61 if (name == altAttr
62 || name == archiveAttr
63 || name == codeAttr
64 || name == codebaseAttr
65 || name == mayscriptAttr
66 || name == objectAttr) {
67 // Do nothing.
68 return;
69 }
70
71 HTMLPlugInElement::parseAttribute(name, value);
72 }
73
isURLAttribute(const Attribute & attribute) const74 bool HTMLAppletElement::isURLAttribute(const Attribute& attribute) const
75 {
76 return attribute.name() == codebaseAttr || attribute.name() == objectAttr
77 || HTMLPlugInElement::isURLAttribute(attribute);
78 }
79
hasLegalLinkAttribute(const QualifiedName & name) const80 bool HTMLAppletElement::hasLegalLinkAttribute(const QualifiedName& name) const
81 {
82 return name == codebaseAttr || HTMLPlugInElement::hasLegalLinkAttribute(name);
83 }
84
rendererIsNeeded(const RenderStyle & style)85 bool HTMLAppletElement::rendererIsNeeded(const RenderStyle& style)
86 {
87 if (!fastHasAttribute(codeAttr) && !hasAuthorShadowRoot())
88 return false;
89 return HTMLPlugInElement::rendererIsNeeded(style);
90 }
91
createRenderer(RenderStyle * style)92 RenderObject* HTMLAppletElement::createRenderer(RenderStyle* style)
93 {
94 if (!canEmbedJava() || hasAuthorShadowRoot())
95 return RenderObject::createObject(this, style);
96
97 return new RenderApplet(this);
98 }
99
renderWidgetForJSBindings() const100 RenderWidget* HTMLAppletElement::renderWidgetForJSBindings() const
101 {
102 if (!canEmbedJava())
103 return 0;
104 return HTMLPlugInElement::renderWidgetForJSBindings();
105 }
106
existingRenderWidget() const107 RenderWidget* HTMLAppletElement::existingRenderWidget() const
108 {
109 return renderPart();
110 }
111
updateWidgetInternal()112 void HTMLAppletElement::updateWidgetInternal()
113 {
114 ASSERT(!m_isDelayingLoadEvent);
115 setNeedsWidgetUpdate(false);
116 // FIXME: This should ASSERT isFinishedParsingChildren() instead.
117 if (!isFinishedParsingChildren())
118 return;
119
120 RenderEmbeddedObject* renderer = renderEmbeddedObject();
121
122 LocalFrame* frame = document().frame();
123 ASSERT(frame);
124
125 Vector<String> paramNames;
126 Vector<String> paramValues;
127
128 const AtomicString& codeBase = getAttribute(codebaseAttr);
129 if (!codeBase.isNull()) {
130 KURL codeBaseURL = document().completeURL(codeBase);
131 paramNames.append("codeBase");
132 paramValues.append(codeBase.string());
133 }
134
135 const AtomicString& archive = getAttribute(archiveAttr);
136 if (!archive.isNull()) {
137 paramNames.append("archive");
138 paramValues.append(archive.string());
139 }
140
141 const AtomicString& code = getAttribute(codeAttr);
142 paramNames.append("code");
143 paramValues.append(code.string());
144
145 // If the 'codebase' attribute is set, it serves as a relative root for the file that the Java
146 // plugin will load. If the 'code' attribute is set, and the 'archive' is not set, then we need
147 // to check the url generated by resolving 'code' against 'codebase'. If the 'archive'
148 // attribute is set, then 'code' points to a class inside the archive, so we need to check the
149 // url generated by resolving 'archive' against 'codebase'.
150 KURL urlToCheck;
151 KURL rootURL = codeBase.isNull() ? document().url() : document().completeURL(codeBase);
152 if (!archive.isNull())
153 urlToCheck = KURL(rootURL, archive);
154 else if (!code.isNull())
155 urlToCheck = KURL(rootURL, code);
156 if (!canEmbedURL(urlToCheck))
157 return;
158
159 const AtomicString& name = document().isHTMLDocument() ? getNameAttribute() : getIdAttribute();
160 if (!name.isNull()) {
161 paramNames.append("name");
162 paramValues.append(name.string());
163 }
164
165 paramNames.append("baseURL");
166 KURL baseURL = document().baseURL();
167 paramValues.append(baseURL.string());
168
169 const AtomicString& mayScript = getAttribute(mayscriptAttr);
170 if (!mayScript.isNull()) {
171 paramNames.append("mayScript");
172 paramValues.append(mayScript.string());
173 }
174
175 for (HTMLParamElement* param = Traversal<HTMLParamElement>::firstChild(*this); param; param = Traversal<HTMLParamElement>::nextSibling(*param)) {
176 if (param->name().isEmpty())
177 continue;
178
179 paramNames.append(param->name());
180 paramValues.append(param->value());
181 }
182
183 RefPtr<Widget> widget;
184 if (frame->loader().allowPlugins(AboutToInstantiatePlugin))
185 widget = frame->loader().client()->createJavaAppletWidget(this, baseURL, paramNames, paramValues);
186
187 if (!widget) {
188 if (!renderer->showsUnavailablePluginIndicator())
189 renderer->setPluginUnavailabilityReason(RenderEmbeddedObject::PluginMissing);
190 return;
191 }
192 document().setContainsPlugins();
193 setWidget(widget);
194 }
195
canEmbedJava() const196 bool HTMLAppletElement::canEmbedJava() const
197 {
198 if (document().isSandboxed(SandboxPlugins))
199 return false;
200
201 Settings* settings = document().settings();
202 if (!settings)
203 return false;
204
205 if (!settings->javaEnabled())
206 return false;
207
208 return true;
209 }
210
canEmbedURL(const KURL & url) const211 bool HTMLAppletElement::canEmbedURL(const KURL& url) const
212 {
213 DEFINE_STATIC_LOCAL(String, appletMimeType, ("application/x-java-applet"));
214
215 if (!document().securityOrigin()->canDisplay(url)) {
216 FrameLoader::reportLocalLoadFailed(document().frame(), url.string());
217 return false;
218 }
219
220 if (!document().contentSecurityPolicy()->allowObjectFromSource(url)
221 || !document().contentSecurityPolicy()->allowPluginType(appletMimeType, appletMimeType, url)) {
222 renderEmbeddedObject()->setPluginUnavailabilityReason(RenderEmbeddedObject::PluginBlockedByContentSecurityPolicy);
223 return false;
224 }
225 return true;
226 }
227
228 }
229