blob: 6a649ff9626082274375e4eb9668cf9d9505866e [file] [log] [blame]
/*
* Copyright (C) 2012 Google Inc. All rights reserved.
* Copyright (C) 2013-2018 Apple Inc. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
*
* THIS SOFTWARE IS PROVIDED BY APPLE INC. AND ITS CONTRIBUTORS ``AS IS'' AND ANY
* EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
* DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR ITS CONTRIBUTORS BE LIABLE FOR ANY
* DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
* ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
* SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/
#include "config.h"
#include "UserMediaController.h"
#if ENABLE(MEDIA_STREAM)
#include "CustomHeaderFields.h"
#include "DOMWindow.h"
#include "Document.h"
#include "DocumentLoader.h"
#include "Frame.h"
#include "HTMLIFrameElement.h"
#include "HTMLParserIdioms.h"
#include "LegacySchemeRegistry.h"
#include "Settings.h"
#include "UserMediaRequest.h"
namespace WebCore {
const char* UserMediaController::supplementName()
{
return "UserMediaController";
}
UserMediaController::UserMediaController(UserMediaClient* client)
: m_client(client)
{
}
UserMediaController::~UserMediaController()
{
m_client->pageDestroyed();
}
void provideUserMediaTo(Page* page, UserMediaClient* client)
{
UserMediaController::provideTo(page, UserMediaController::supplementName(), makeUnique<UserMediaController>(client));
}
static inline bool isSecure(DocumentLoader& documentLoader)
{
auto& response = documentLoader.response();
if (SecurityOrigin::isLocalHostOrLoopbackIPAddress(documentLoader.response().url().host()))
return true;
return LegacySchemeRegistry::shouldTreatURLSchemeAsSecure(response.url().protocol().toStringWithoutCopying())
&& response.certificateInfo()
&& !response.certificateInfo()->containsNonRootSHA1SignedCertificate();
}
static inline bool isAllowedByFeaturePolicy(const FeaturePolicy& featurePolicy, const SecurityOriginData& origin, OptionSet<UserMediaController::CaptureType> types)
{
if ((types & UserMediaController::CaptureType::Camera) && !featurePolicy.allows(FeaturePolicy::Type::Camera, origin))
return false;
if ((types & UserMediaController::CaptureType::Microphone) && !featurePolicy.allows(FeaturePolicy::Type::Microphone, origin))
return false;
if ((types & UserMediaController::CaptureType::Display) && !featurePolicy.allows(FeaturePolicy::Type::DisplayCapture, origin))
return false;
return true;
}
static UserMediaController::GetUserMediaAccess isAllowedToUse(const Document& document, const Document& topDocument, OptionSet<UserMediaController::CaptureType> types)
{
if (&document == &topDocument)
return UserMediaController::GetUserMediaAccess::CanCall;
auto* parentDocument = document.parentDocument();
if (!parentDocument)
return UserMediaController::GetUserMediaAccess::BlockedByParent;
auto* element = document.ownerElement();
ASSERT(element);
if (!element || !is<HTMLIFrameElement>(*element))
return UserMediaController::GetUserMediaAccess::BlockedByParent;
auto& featurePolicy = downcast<HTMLIFrameElement>(*element).featurePolicy();
if (isAllowedByFeaturePolicy(featurePolicy, document.securityOrigin().data(), types))
return UserMediaController::GetUserMediaAccess::CanCall;
return UserMediaController::GetUserMediaAccess::BlockedByFeaturePolicy;
}
UserMediaController::GetUserMediaAccess UserMediaController::canCallGetUserMedia(const Document& document, OptionSet<UserMediaController::CaptureType> types) const
{
ASSERT(!types.isEmpty());
bool requiresSecureConnection = true;
if (auto page = document.page())
requiresSecureConnection = page->settings().mediaCaptureRequiresSecureConnection();
auto& documentLoader = *document.loader();
if (requiresSecureConnection && !isSecure(documentLoader))
return GetUserMediaAccess::InsecureDocument;
auto& topDocument = document.topDocument();
if (&document != &topDocument) {
for (auto* ancestorDocument = &document; ancestorDocument != &topDocument; ancestorDocument = ancestorDocument->parentDocument()) {
if (requiresSecureConnection && !isSecure(*ancestorDocument->loader()))
return GetUserMediaAccess::InsecureParent;
auto status = isAllowedToUse(*ancestorDocument, topDocument, types);
if (status != GetUserMediaAccess::CanCall)
return status;
}
}
return GetUserMediaAccess::CanCall;
}
void UserMediaController::logGetUserMediaDenial(Document& document, GetUserMediaAccess access, BlockedCaller caller)
{
auto& domWindow = *document.domWindow();
const char* callerName;
switch (caller) {
case BlockedCaller::GetUserMedia:
callerName = "getUserMedia";
break;
case BlockedCaller::GetDisplayMedia:
callerName = "getDisplayMedia";
break;
case BlockedCaller::EnumerateDevices:
callerName = "enumerateDevices";
break;
}
switch (access) {
case UserMediaController::GetUserMediaAccess::InsecureDocument:
domWindow.printErrorMessage(makeString("Trying to call ", callerName, " from an insecure document."));
break;
case UserMediaController::GetUserMediaAccess::InsecureParent:
domWindow.printErrorMessage(makeString("Trying to call ", callerName, " from a document with an insecure parent frame."));
break;
case UserMediaController::GetUserMediaAccess::BlockedByParent:
domWindow.printErrorMessage(makeString("The top-level frame has prevented a document with a different security origin from calling ", callerName, "."));
break;
case GetUserMediaAccess::BlockedByFeaturePolicy:
domWindow.printErrorMessage(makeString("Trying to call ", callerName, " from a frame without correct 'allow' attribute."));
break;
case UserMediaController::GetUserMediaAccess::CanCall:
break;
}
}
} // namespace WebCore
#endif // ENABLE(MEDIA_STREAM)