1
    2
    3
    4
    5
    6
    7
    8
    9
   10
   11
   12
   13
   14
   15
   16
   17
   18
   19
   20
   21
   22
   23
   24
   25
   26
   27
   28
   29
   30
   31
   32
   33
   34
   35
   36
   37
   38
   39
   40
   41
   42
   43
   44
   45
   46
   47
   48
   49
   50
   51
   52
   53
   54
   55
   56
   57
   58
   59
   60
   61
   62
   63
   64
   65
   66
   67
   68
   69
   70
   71
   72
   73
   74
   75
   76
   77
   78
   79
   80
   81
   82
   83
   84
   85
   86
   87
   88
   89
   90
   91
   92
   93
   94
   95
   96
   97
   98
   99
  100


content / browser / security / coop / cross_origin_opener_policy_reporter.h [blame]

// Copyright 2020 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef CONTENT_BROWSER_SECURITY_COOP_CROSS_ORIGIN_OPENER_POLICY_REPORTER_H_
#define CONTENT_BROWSER_SECURITY_COOP_CROSS_ORIGIN_OPENER_POLICY_REPORTER_H_

#include <string>

#include "base/memory/raw_ptr.h"
#include "base/values.h"
#include "content/common/content_export.h"
#include "content/public/browser/global_routing_id.h"
#include "mojo/public/cpp/bindings/unique_receiver_set.h"
#include "net/base/network_anonymization_key.h"
#include "services/network/public/mojom/cross_origin_opener_policy.mojom.h"
#include "services/network/public/mojom/source_location.mojom-forward.h"
#include "url/gurl.h"

namespace content {

class FrameTreeNode;
class StoragePartition;
class RenderFrameHostImpl;

// Used to report (potential) COOP breakages.
// A CrossOriginOpenerPolicyReporter lives in the browser process and is either
// held by the NavigationRequest during navigation or by the RenderFrameHostImpl
// after the document has committed.
// To make calls from other processes, create a mojo endpoint using Clone and
// pass the receiver to other processes.
// Any functions other than the destructor must not be called after the
// associated StoragePartition is destructed.
class CONTENT_EXPORT CrossOriginOpenerPolicyReporter {
 public:
  CrossOriginOpenerPolicyReporter(
      StoragePartition* storage_partition,
      const GURL& context_url,
      const GURL& context_referrer_url,
      const network::CrossOriginOpenerPolicy& coop,
      const base::UnguessableToken& reporting_source,
      const net::NetworkAnonymizationKey& network_anonymization_key);
  ~CrossOriginOpenerPolicyReporter();
  CrossOriginOpenerPolicyReporter(const CrossOriginOpenerPolicyReporter&) =
      delete;
  CrossOriginOpenerPolicyReporter& operator=(
      const CrossOriginOpenerPolicyReporter&) = delete;

  void set_storage_partition(StoragePartition* storage_partition) {
    storage_partition_ = storage_partition;
  }
  void set_reporting_source(const base::UnguessableToken& reporting_source) {
    reporting_source_ = reporting_source;
  }

  // Returns the information necessary for the renderer process to report
  // accesses between the COOP document and other pages.
  network::mojom::CrossOriginOpenerPolicyReporterParamsPtr CreateReporterParams(
      bool access_from_coop_page,
      FrameTreeNode* accessing_node,
      FrameTreeNode* accessed_node);

  void QueueAccessReport(network::mojom::CoopAccessReportType report_type,
                         const std::string& property,
                         network::mojom::SourceLocationPtr source_location,
                         const std::string& reported_window_url,
                         const std::string& initial_popup_url) const;

  // Sends reports when COOP causing a browsing context group switch that
  // breaks opener relationships.
  void QueueNavigationToCOOPReport(const GURL& previous_url,
                                   bool same_origin_with_previous,
                                   bool is_report_only);
  void QueueNavigationAwayFromCOOPReport(const GURL& next_url,
                                         bool is_current_source,
                                         bool same_origin_with_next,
                                         bool is_report_only);

 private:
  void QueueNavigationReport(base::Value::Dict body,
                             const std::string& endpoint,
                             bool is_report_only);

  // See the class comment.
  raw_ptr<StoragePartition> storage_partition_;
  base::UnguessableToken reporting_source_;
  GURL source_url_;
  GlobalRenderFrameHostId source_routing_id_;
  const GURL context_url_;
  const std::string context_referrer_url_;
  const network::CrossOriginOpenerPolicy coop_;
  const net::NetworkAnonymizationKey network_anonymization_key_;

  mojo::UniqueReceiverSet<network::mojom::CrossOriginOpenerPolicyReporter>
      receiver_set_;
};

}  // namespace content

#endif  // CONTENT_BROWSER_SECURITY_COOP_CROSS_ORIGIN_OPENER_POLICY_REPORTER_H_