// Copyright (c) 2012 The Chromium Authors. All rights reserved. // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. #include "content/browser/site_instance_impl.h" #include "base/command_line.h" #include "content/browser/browsing_instance.h" #include "content/browser/child_process_security_policy_impl.h" #include "content/browser/frame_host/debug_urls.h" #include "content/browser/renderer_host/render_process_host_impl.h" #include "content/browser/storage_partition_impl.h" #include "content/public/browser/content_browser_client.h" #include "content/public/browser/render_process_host_factory.h" #include "content/public/browser/web_ui_controller_factory.h" #include "content/public/common/content_switches.h" #include "content/public/common/url_constants.h" #include "net/base/registry_controlled_domains/registry_controlled_domain.h" namespace content { const RenderProcessHostFactory* SiteInstanceImpl::g_render_process_host_factory_ = NULL; int32 SiteInstanceImpl::next_site_instance_id_ = 1; SiteInstanceImpl::SiteInstanceImpl(BrowsingInstance* browsing_instance) : id_(next_site_instance_id_++), active_view_count_(0), browsing_instance_(browsing_instance), process_(NULL), has_site_(false) { DCHECK(browsing_instance); } SiteInstanceImpl::~SiteInstanceImpl() { GetContentClient()->browser()->SiteInstanceDeleting(this); if (process_) process_->RemoveObserver(this); // Now that no one is referencing us, we can safely remove ourselves from // the BrowsingInstance. Any future visits to a page from this site // (within the same BrowsingInstance) can safely create a new SiteInstance. if (has_site_) browsing_instance_->UnregisterSiteInstance( static_cast<SiteInstance*>(this)); } int32 SiteInstanceImpl::GetId() { return id_; } bool SiteInstanceImpl::HasProcess() const { if (process_ != NULL) return true; // If we would use process-per-site for this site, also check if there is an // existing process that we would use if GetProcess() were called. BrowserContext* browser_context = browsing_instance_->browser_context(); if (has_site_ && RenderProcessHost::ShouldUseProcessPerSite(browser_context, site_) && RenderProcessHostImpl::GetProcessHostForSite(browser_context, site_)) { return true; } return false; } RenderProcessHost* SiteInstanceImpl::GetProcess() { // TODO(erikkay) It would be nice to ensure that the renderer type had been // properly set before we get here. The default tab creation case winds up // with no site set at this point, so it will default to TYPE_NORMAL. This // may not be correct, so we'll wind up potentially creating a process that // we then throw away, or worse sharing a process with the wrong process type. // See crbug.com/43448. // Create a new process if ours went away or was reused. if (!process_) { BrowserContext* browser_context = browsing_instance_->browser_context(); // If we should use process-per-site mode (either in general or for the // given site), then look for an existing RenderProcessHost for the site. bool use_process_per_site = has_site_ && RenderProcessHost::ShouldUseProcessPerSite(browser_context, site_); if (use_process_per_site) { process_ = RenderProcessHostImpl::GetProcessHostForSite(browser_context, site_); } // If not (or if none found), see if we should reuse an existing process. if (!process_ && RenderProcessHostImpl::ShouldTryToUseExistingProcessHost( browser_context, site_)) { process_ = RenderProcessHostImpl::GetExistingProcessHost(browser_context, site_); } // Otherwise (or if that fails), create a new one. if (!process_) { if (g_render_process_host_factory_) { process_ = g_render_process_host_factory_->CreateRenderProcessHost( browser_context, this); } else { StoragePartitionImpl* partition = static_cast<StoragePartitionImpl*>( BrowserContext::GetStoragePartition(browser_context, this)); process_ = new RenderProcessHostImpl(browser_context, partition, site_.SchemeIs(kGuestScheme)); } } CHECK(process_); process_->AddObserver(this); // If we are using process-per-site, we need to register this process // for the current site so that we can find it again. (If no site is set // at this time, we will register it in SetSite().) if (use_process_per_site) { RenderProcessHostImpl::RegisterProcessHostForSite(browser_context, process_, site_); } GetContentClient()->browser()->SiteInstanceGotProcess(this); if (has_site_) LockToOrigin(); } DCHECK(process_); return process_; } void SiteInstanceImpl::SetSite(const GURL& url) { // A SiteInstance's site should not change. // TODO(creis): When following links or script navigations, we can currently // render pages from other sites in this SiteInstance. This will eventually // be fixed, but until then, we should still not set the site of a // SiteInstance more than once. DCHECK(!has_site_); // Remember that this SiteInstance has been used to load a URL, even if the // URL is invalid. has_site_ = true; BrowserContext* browser_context = browsing_instance_->browser_context(); site_ = GetSiteForURL(browser_context, url); // Now that we have a site, register it with the BrowsingInstance. This // ensures that we won't create another SiteInstance for this site within // the same BrowsingInstance, because all same-site pages within a // BrowsingInstance can script each other. browsing_instance_->RegisterSiteInstance(this); if (process_) { LockToOrigin(); // Ensure the process is registered for this site if necessary. if (RenderProcessHost::ShouldUseProcessPerSite(browser_context, site_)) { RenderProcessHostImpl::RegisterProcessHostForSite( browser_context, process_, site_); } } } const GURL& SiteInstanceImpl::GetSiteURL() const { return site_; } bool SiteInstanceImpl::HasSite() const { return has_site_; } bool SiteInstanceImpl::HasRelatedSiteInstance(const GURL& url) { return browsing_instance_->HasSiteInstance(url); } SiteInstance* SiteInstanceImpl::GetRelatedSiteInstance(const GURL& url) { return browsing_instance_->GetSiteInstanceForURL(url); } bool SiteInstanceImpl::IsRelatedSiteInstance(const SiteInstance* instance) { return browsing_instance_.get() == static_cast<const SiteInstanceImpl*>( instance)->browsing_instance_.get(); } size_t SiteInstanceImpl::GetRelatedActiveContentsCount() { return browsing_instance_->active_contents_count(); } bool SiteInstanceImpl::HasWrongProcessForURL(const GURL& url) { // Having no process isn't a problem, since we'll assign it correctly. // Note that HasProcess() may return true if process_ is null, in // process-per-site cases where there's an existing process available. // We want to use such a process in the IsSuitableHost check, so we // may end up assigning process_ in the GetProcess() call below. if (!HasProcess()) return false; // If the URL to navigate to can be associated with any site instance, // we want to keep it in the same process. if (IsRendererDebugURL(url)) return false; // If the site URL is an extension (e.g., for hosted apps or WebUI) but the // process is not (or vice versa), make sure we notice and fix it. GURL site_url = GetSiteForURL(browsing_instance_->browser_context(), url); return !RenderProcessHostImpl::IsSuitableHost( GetProcess(), browsing_instance_->browser_context(), site_url); } void SiteInstanceImpl::IncrementRelatedActiveContentsCount() { browsing_instance_->increment_active_contents_count(); } void SiteInstanceImpl::DecrementRelatedActiveContentsCount() { browsing_instance_->decrement_active_contents_count(); } void SiteInstanceImpl::set_render_process_host_factory( const RenderProcessHostFactory* rph_factory) { g_render_process_host_factory_ = rph_factory; } BrowserContext* SiteInstanceImpl::GetBrowserContext() const { return browsing_instance_->browser_context(); } /*static*/ SiteInstance* SiteInstance::Create(BrowserContext* browser_context) { return new SiteInstanceImpl(new BrowsingInstance(browser_context)); } /*static*/ SiteInstance* SiteInstance::CreateForURL(BrowserContext* browser_context, const GURL& url) { // This BrowsingInstance may be deleted if it returns an existing // SiteInstance. scoped_refptr<BrowsingInstance> instance( new BrowsingInstance(browser_context)); return instance->GetSiteInstanceForURL(url); } /*static*/ bool SiteInstance::IsSameWebSite(BrowserContext* browser_context, const GURL& real_url1, const GURL& real_url2) { GURL url1 = SiteInstanceImpl::GetEffectiveURL(browser_context, real_url1); GURL url2 = SiteInstanceImpl::GetEffectiveURL(browser_context, real_url2); // We infer web site boundaries based on the registered domain name of the // top-level page and the scheme. We do not pay attention to the port if // one is present, because pages served from different ports can still // access each other if they change their document.domain variable. // Some special URLs will match the site instance of any other URL. This is // done before checking both of them for validity, since we want these URLs // to have the same site instance as even an invalid one. if (IsRendererDebugURL(url1) || IsRendererDebugURL(url2)) return true; // If either URL is invalid, they aren't part of the same site. if (!url1.is_valid() || !url2.is_valid()) return false; // If the schemes differ, they aren't part of the same site. if (url1.scheme() != url2.scheme()) return false; return net::registry_controlled_domains::SameDomainOrHost( url1, url2, net::registry_controlled_domains::INCLUDE_PRIVATE_REGISTRIES); } /*static*/ GURL SiteInstance::GetSiteForURL(BrowserContext* browser_context, const GURL& real_url) { // TODO(fsamuel, creis): For some reason appID is not recognized as a host. if (real_url.SchemeIs(kGuestScheme)) return real_url; GURL url = SiteInstanceImpl::GetEffectiveURL(browser_context, real_url); // URLs with no host should have an empty site. GURL site; // TODO(creis): For many protocols, we should just treat the scheme as the // site, since there is no host. e.g., file:, about:, chrome: // If the url has a host, then determine the site. if (url.has_host()) { // Only keep the scheme and registered domain as given by GetOrigin. This // may also include a port, which we need to drop. site = url.GetOrigin(); // Remove port, if any. if (site.has_port()) { GURL::Replacements rep; rep.ClearPort(); site = site.ReplaceComponents(rep); } // If this URL has a registered domain, we only want to remember that part. std::string domain = net::registry_controlled_domains::GetDomainAndRegistry( url, net::registry_controlled_domains::INCLUDE_PRIVATE_REGISTRIES); if (!domain.empty()) { GURL::Replacements rep; rep.SetHostStr(domain); site = site.ReplaceComponents(rep); } } return site; } /*static*/ GURL SiteInstanceImpl::GetEffectiveURL(BrowserContext* browser_context, const GURL& url) { return GetContentClient()->browser()-> GetEffectiveURL(browser_context, url); } void SiteInstanceImpl::RenderProcessHostDestroyed(RenderProcessHost* host) { DCHECK_EQ(process_, host); process_->RemoveObserver(this); process_ = NULL; } void SiteInstanceImpl::LockToOrigin() { // We currently only restrict this process to a particular site if the // --enable-strict-site-isolation or --site-per-process flags are present. const CommandLine& command_line = *CommandLine::ForCurrentProcess(); if (command_line.HasSwitch(switches::kEnableStrictSiteIsolation) || command_line.HasSwitch(switches::kSitePerProcess)) { ChildProcessSecurityPolicyImpl* policy = ChildProcessSecurityPolicyImpl::GetInstance(); policy->LockToOrigin(process_->GetID(), site_); } } } // namespace content