static bool canAccessAncestor(const SecurityOrigin& activeSecurityOrigin,
const Frame* targetFrame) {
// targetFrame can be 0 when we're trying to navigate a top-level frame
// that has a 0 opener.
if (!targetFrame)
return false;
const bool isLocalActiveOrigin = activeSecurityOrigin.isLocal();
for (const Frame* ancestorFrame = targetFrame; ancestorFrame;
ancestorFrame = ancestorFrame->tree().parent()) {
const SecurityOrigin* ancestorSecurityOrigin =
ancestorFrame->securityContext()->getSecurityOrigin();
if (activeSecurityOrigin.canAccess(ancestorSecurityOrigin))
return true;
// Allow file URL descendant navigation even when
// allowFileAccessFromFileURLs is false.
// FIXME: It's a bit strange to special-case local origins here. Should we
// be doing something more general instead?
if (isLocalActiveOrigin && ancestorSecurityOrigin->isLocal())
return true;
}
return false;
}
void Deprecation::countDeprecationCrossOriginIframe(const LocalFrame* frame, UseCounter::Feature feature)
{
// Check to see if the frame can script into the top level document.
SecurityOrigin* securityOrigin = frame->securityContext()->getSecurityOrigin();
Frame* top = frame->tree().top();
if (top && !securityOrigin->canAccess(top->securityContext()->getSecurityOrigin()))
countDeprecation(frame, feature);
}
WebInputEventResult TouchEventManager::handleTouchEvent(
const PlatformTouchEvent& event,
const HeapVector<TouchInfo>& touchInfos)
{
// Note that the disposition of any pointer events affects only the generation of touch
// events. If all pointer events were handled (and hence no touch events were fired), that
// is still equivalent to the touch events going unhandled because pointer event handler
// don't block scroll gesture generation.
// TODO(crbug.com/507408): If PE handlers always call preventDefault, we won't see TEs until after
// scrolling starts because the scrolling would suppress upcoming PEs. This sudden "break" in TE
// suppression can make the visible TEs inconsistent (e.g. touchmove without a touchstart).
bool allTouchesReleased = true;
for (const auto& point : event.touchPoints()) {
if (point.state() != PlatformTouchPoint::TouchReleased
&& point.state() != PlatformTouchPoint::TouchCancelled)
allTouchesReleased = false;
}
// Whether a touch should be considered a "user gesture" or not is a tricky question.
// https://docs.google.com/document/d/1oF1T3O7_E4t1PYHV6gyCwHxOi3ystm0eSL5xZu7nvOg/edit#
// The touchend corresponding to a tap is always a user gesture.
bool isTap = event.touchPoints().size() == 1
&& event.touchPoints()[0].state() == PlatformTouchPoint::TouchReleased
&& !event.causesScrollingIfUncanceled();
// For now, disallow dragging as a user gesture when the events are being sent to a
// cross-origin iframe (crbug.com/582140).
bool isSameOrigin = false;
if (m_touchSequenceDocument && m_touchSequenceDocument->frame()) {
SecurityOrigin* securityOrigin = m_touchSequenceDocument->frame()->securityContext()->getSecurityOrigin();
Frame* top = m_frame->tree().top();
if (top && securityOrigin->canAccess(top->securityContext()->getSecurityOrigin()))
isSameOrigin = true;
}
OwnPtr<UserGestureIndicator> gestureIndicator;
if (isTap || isSameOrigin) {
UserGestureUtilizedCallback* callback = 0;
if (!isTap) {
// This is some other touch event that we currently consider a user gesture. So
// use a UserGestureUtilizedCallback to get metrics.
callback = &m_touchSequenceDocument->frame()->eventHandler();
}
if (m_touchSequenceUserGestureToken)
gestureIndicator = adoptPtr(new UserGestureIndicator(m_touchSequenceUserGestureToken.release(), callback));
else
gestureIndicator = adoptPtr(new UserGestureIndicator(DefinitelyProcessingUserGesture, callback));
m_touchSequenceUserGestureToken = UserGestureIndicator::currentToken();
}
return dispatchTouchEvents(event, touchInfos, allTouchesReleased);
}
void UseCounter::countCrossOriginIframe(const Document& document, Feature feature)
{
Frame* frame = document.frame();
if (!frame)
return;
// Check to see if the frame can script into the top level document.
SecurityOrigin* securityOrigin = frame->securityContext()->securityOrigin();
Frame* top = frame->tree().top();
if (top && !securityOrigin->canAccess(top->securityContext()->securityOrigin()))
count(frame, feature);
}