#include "android_webview/browser/aw_contents_io_thread_client.h"
#include <map>
#include <memory>
#include <optional>
#include <utility>
#include "android_webview/browser/aw_settings.h"
#include "android_webview/browser/network_service/aw_web_resource_intercept_response.h"
#include "android_webview/browser/network_service/aw_web_resource_request.h"
#include "android_webview/common/aw_features.h"
#include "android_webview/common/devtools_instrumentation.h"
#include "base/android/jni_array.h"
#include "base/android/jni_callback.h"
#include "base/android/jni_string.h"
#include "base/android/jni_weak_ref.h"
#include "base/containers/flat_set.h"
#include "base/feature_list.h"
#include "base/functional/bind.h"
#include "base/lazy_instance.h"
#include "base/logging.h"
#include "base/memory/raw_ptr.h"
#include "base/metrics/histogram_functions.h"
#include "base/metrics/histogram_macros.h"
#include "base/no_destructor.h"
#include "base/synchronization/lock.h"
#include "base/task/thread_pool.h"
#include "base/threading/scoped_blocking_call.h"
#include "base/trace_event/trace_event.h"
#include "base/unguessable_token.h"
#include "components/embedder_support/android/util/features.h"
#include "components/embedder_support/android/util/input_stream.h"
#include "components/embedder_support/android/util/web_resource_response.h"
#include "components/safe_browsing/core/common/features.h"
#include "content/public/browser/browser_thread.h"
#include "content/public/browser/frame_tree_node_id.h"
#include "content/public/browser/render_frame_host.h"
#include "content/public/browser/render_process_host.h"
#include "content/public/browser/render_view_host.h"
#include "content/public/browser/web_contents.h"
#include "content/public/browser/web_contents_observer.h"
#include "content/public/browser/web_contents_user_data.h"
#include "net/base/data_url.h"
#include "services/network/public/cpp/resource_request.h"
#include "android_webview/browser_jni_headers/AwContentsIoThreadClient_jni.h"
#include "android_webview/browser_jni_headers/ShouldInterceptRequestMediator_jni.h"
using base::LazyInstance;
using base::android::AttachCurrentThread;
using base::android::ConvertUTF8ToJavaString;
using base::android::JavaRef;
using base::android::ScopedJavaLocalRef;
using base::android::ToJavaArrayOfStrings;
using content::BrowserThread;
using content::RenderFrameHost;
using content::WebContents;
using std::map;
using std::pair;
using std::string;
namespace android_webview {
namespace {
using RenderFrameHostToWeakGlobalRefType =
map<content::GlobalRenderFrameHostToken, JavaObjectWeakGlobalRef>;
using HostsAndWeakGlobalRefPair =
pair<base::flat_set<raw_ptr<RenderFrameHost, CtnExperimental>>,
JavaObjectWeakGlobalRef>;
using FrameTreeNodeToWeakGlobalRefType =
map<content::FrameTreeNodeId, HostsAndWeakGlobalRefPair>;
class RfhToIoThreadClientMap {
public:
static RfhToIoThreadClientMap* GetInstance();
void Set(const content::GlobalRenderFrameHostToken& rfh_token,
const JavaObjectWeakGlobalRef& client);
std::optional<JavaObjectWeakGlobalRef> Get(
const content::GlobalRenderFrameHostToken& rfh_token);
std::optional<JavaObjectWeakGlobalRef> Get(
content::FrameTreeNodeId frame_tree_node_id);
void Set(RenderFrameHost* rfh, const JavaObjectWeakGlobalRef& client);
void Erase(RenderFrameHost* rfh);
void RenderFrameHostChanged(RenderFrameHost* old_rfh,
RenderFrameHost* new_rfh);
private:
base::Lock map_lock_;
RenderFrameHostToWeakGlobalRefType rfh_to_weak_global_ref_;
FrameTreeNodeToWeakGlobalRefType frame_tree_node_to_weak_global_ref_;
};
LazyInstance<RfhToIoThreadClientMap>::DestructorAtExit g_instance_ =
LAZY_INSTANCE_INITIALIZER;
RfhToIoThreadClientMap* RfhToIoThreadClientMap::GetInstance() {
return g_instance_.Pointer();
}
void RfhToIoThreadClientMap::Set(
const content::GlobalRenderFrameHostToken& rfh_token,
const JavaObjectWeakGlobalRef& client) {
base::AutoLock lock(map_lock_);
rfh_to_weak_global_ref_[rfh_token] = client;
}
std::optional<JavaObjectWeakGlobalRef> RfhToIoThreadClientMap::Get(
const content::GlobalRenderFrameHostToken& rfh_token) {
base::AutoLock lock(map_lock_);
RenderFrameHostToWeakGlobalRefType::iterator iterator =
rfh_to_weak_global_ref_.find(rfh_token);
if (iterator == rfh_to_weak_global_ref_.end()) {
return std::nullopt;
} else {
return iterator->second;
}
}
std::optional<JavaObjectWeakGlobalRef> RfhToIoThreadClientMap::Get(
content::FrameTreeNodeId frame_tree_node_id) {
base::AutoLock lock(map_lock_);
FrameTreeNodeToWeakGlobalRefType::iterator iterator =
frame_tree_node_to_weak_global_ref_.find(frame_tree_node_id);
if (iterator == frame_tree_node_to_weak_global_ref_.end()) {
return std::nullopt;
} else {
return iterator->second.second;
}
}
void RfhToIoThreadClientMap::Set(RenderFrameHost* rfh,
const JavaObjectWeakGlobalRef& client) {
content::FrameTreeNodeId frame_tree_node_id = rfh->GetFrameTreeNodeId();
auto rfh_token = rfh->GetGlobalFrameToken();
base::AutoLock lock(map_lock_);
HostsAndWeakGlobalRefPair& current_entry =
frame_tree_node_to_weak_global_ref_[frame_tree_node_id];
current_entry.second = client;
current_entry.first.insert(rfh);
rfh_to_weak_global_ref_[rfh_token] = client;
}
void RfhToIoThreadClientMap::Erase(RenderFrameHost* rfh) {
content::FrameTreeNodeId frame_tree_node_id = rfh->GetFrameTreeNodeId();
auto rfh_token = rfh->GetGlobalFrameToken();
base::AutoLock lock(map_lock_);
HostsAndWeakGlobalRefPair& current_entry =
frame_tree_node_to_weak_global_ref_[frame_tree_node_id];
size_t num_erased = current_entry.first.erase(rfh);
DCHECK_EQ(num_erased, 1u);
if (current_entry.first.empty()) {
frame_tree_node_to_weak_global_ref_.erase(frame_tree_node_id);
}
rfh_to_weak_global_ref_.erase(rfh_token);
}
void RfhToIoThreadClientMap::RenderFrameHostChanged(RenderFrameHost* old_rfh,
RenderFrameHost* new_rfh) {
if (old_rfh == nullptr) {
return;
}
CHECK(new_rfh);
if (old_rfh->GetParentOrOuterDocument() ||
new_rfh->GetParentOrOuterDocument()) {
return;
}
content::FrameTreeNodeId pre_swap_ftn_id;
content::FrameTreeNodeId post_swap_ftn_id = new_rfh->GetFrameTreeNodeId();
CHECK_EQ(post_swap_ftn_id, old_rfh->GetFrameTreeNodeId());
base::AutoLock lock(map_lock_);
for (auto& [frame_tree_node_id, entry] :
frame_tree_node_to_weak_global_ref_) {
if (entry.first.contains(new_rfh)) {
pre_swap_ftn_id = frame_tree_node_id;
break;
}
}
CHECK(pre_swap_ftn_id);
if (pre_swap_ftn_id == post_swap_ftn_id) {
return;
}
HostsAndWeakGlobalRefPair& pre_swap_entry =
frame_tree_node_to_weak_global_ref_[pre_swap_ftn_id];
HostsAndWeakGlobalRefPair& post_swap_entry =
frame_tree_node_to_weak_global_ref_[post_swap_ftn_id];
size_t num_erased = pre_swap_entry.first.erase(new_rfh);
CHECK_EQ(num_erased, 1u);
post_swap_entry.first.insert(new_rfh);
CHECK(pre_swap_entry.first.empty());
frame_tree_node_to_weak_global_ref_.erase(pre_swap_ftn_id);
}
class WebContentsToIoThreadClientMap {
public:
static WebContentsToIoThreadClientMap* GetInstance() {
static base::NoDestructor<WebContentsToIoThreadClientMap> instance;
return instance.get();
}
void Set(WebContentsKey key, const JavaObjectWeakGlobalRef& client) {
DCHECK_CURRENTLY_ON(BrowserThread::UI);
base::AutoLock lock(map_lock_);
web_contents_to_weak_global_ref_[key] = client;
}
std::optional<JavaObjectWeakGlobalRef> Get(WebContentsKey key) {
DCHECK_CURRENTLY_ON(BrowserThread::IO);
base::AutoLock lock(map_lock_);
auto iterator = web_contents_to_weak_global_ref_.find(key);
if (iterator == web_contents_to_weak_global_ref_.end()) {
return std::nullopt;
} else {
return iterator->second;
}
}
void Erase(WebContentsKey key) {
DCHECK_CURRENTLY_ON(BrowserThread::UI);
base::AutoLock lock(map_lock_);
web_contents_to_weak_global_ref_.erase(key);
}
private:
base::Lock map_lock_;
map<WebContentsKey, JavaObjectWeakGlobalRef> web_contents_to_weak_global_ref_;
};
class ClientMapEntryUpdater : public content::WebContentsObserver {
public:
ClientMapEntryUpdater(JNIEnv* env,
WebContents* web_contents,
const jni_zero::JavaRef<jobject>& jdelegate);
void RenderFrameCreated(RenderFrameHost* render_frame_host) override;
void RenderFrameDeleted(RenderFrameHost* render_frame_host) override;
void RenderFrameHostChanged(RenderFrameHost* old_rfh,
RenderFrameHost* new_rfh) override;
void WebContentsDestroyed() override;
private:
JavaObjectWeakGlobalRef jdelegate_;
};
ClientMapEntryUpdater::ClientMapEntryUpdater(
JNIEnv* env,
WebContents* web_contents,
const jni_zero::JavaRef<jobject>& jdelegate)
: content::WebContentsObserver(web_contents), jdelegate_(env, jdelegate) {
DCHECK(web_contents);
DCHECK(jdelegate);
if (web_contents->GetPrimaryMainFrame())
RenderFrameCreated(web_contents->GetPrimaryMainFrame());
WebContentsToIoThreadClientMap::GetInstance()->Set(
GetWebContentsKey(*web_contents), jdelegate_);
}
void ClientMapEntryUpdater::RenderFrameCreated(RenderFrameHost* rfh) {
RfhToIoThreadClientMap::GetInstance()->Set(rfh, jdelegate_);
}
void ClientMapEntryUpdater::RenderFrameDeleted(RenderFrameHost* rfh) {
RfhToIoThreadClientMap::GetInstance()->Erase(rfh);
}
void ClientMapEntryUpdater::RenderFrameHostChanged(RenderFrameHost* old_rfh,
RenderFrameHost* new_rfh) {
RfhToIoThreadClientMap::GetInstance()->RenderFrameHostChanged(old_rfh,
new_rfh);
}
void ClientMapEntryUpdater::WebContentsDestroyed() {
WebContentsToIoThreadClientMap::GetInstance()->Erase(
GetWebContentsKey(*web_contents()));
delete this;
}
class WebContentsKeyHolder
: public content::WebContentsUserData<WebContentsKeyHolder> {
public:
~WebContentsKeyHolder() override = default;
const base::UnguessableToken& GetToken() { return token_; }
private:
explicit WebContentsKeyHolder(WebContents* contents)
: content::WebContentsUserData<WebContentsKeyHolder>(*contents),
token_(base::UnguessableToken::Create()) {}
friend class WebContentsUserData<WebContentsKeyHolder>;
WEB_CONTENTS_USER_DATA_KEY_DECL();
const base::UnguessableToken token_;
};
WEB_CONTENTS_USER_DATA_KEY_IMPL(WebContentsKeyHolder);
}
WebContentsKey GetWebContentsKey(content::WebContents& web_contents) {
return WebContentsKeyHolder::GetOrCreateForWebContents(&web_contents)
->GetToken();
}
std::unique_ptr<AwContentsIoThreadClient> WrapOptionalWeakRef(
std::optional<JavaObjectWeakGlobalRef> opt_delegate_weak_ref) {
if (opt_delegate_weak_ref) {
JNIEnv* env = AttachCurrentThread();
ScopedJavaLocalRef<jobject> java_delegate = opt_delegate_weak_ref->get(env);
if (java_delegate) {
return std::make_unique<AwContentsIoThreadClient>(java_delegate);
}
}
return nullptr;
}
std::unique_ptr<AwContentsIoThreadClient> AwContentsIoThreadClient::FromToken(
const content::GlobalRenderFrameHostToken& global_frame_token) {
return WrapOptionalWeakRef(
RfhToIoThreadClientMap::GetInstance()->Get(global_frame_token));
}
std::unique_ptr<AwContentsIoThreadClient> AwContentsIoThreadClient::FromID(
content::FrameTreeNodeId frame_tree_node_id) {
return WrapOptionalWeakRef(
RfhToIoThreadClientMap::GetInstance()->Get(frame_tree_node_id));
}
std::unique_ptr<AwContentsIoThreadClient> AwContentsIoThreadClient::FromKey(
WebContentsKey key) {
return WrapOptionalWeakRef(
WebContentsToIoThreadClientMap::GetInstance()->Get(key));
}
void AwContentsIoThreadClient::SubFrameCreated(
int child_id,
const blink::LocalFrameToken& parent_frame_token,
const blink::LocalFrameToken& child_frame_token) {
RfhToIoThreadClientMap* map = RfhToIoThreadClientMap::GetInstance();
std::optional<JavaObjectWeakGlobalRef> opt_delegate_weak_ref = map->Get(
content::GlobalRenderFrameHostToken(child_id, parent_frame_token));
if (opt_delegate_weak_ref) {
map->Set(content::GlobalRenderFrameHostToken(child_id, child_frame_token),
opt_delegate_weak_ref.value());
} else {
LOG(WARNING) << "No IoThreadClient associated with parent RenderFrameHost.";
}
}
void AwContentsIoThreadClient::Associate(WebContents* web_contents,
const JavaRef<jobject>& jclient) {
JNIEnv* env = AttachCurrentThread();
new ClientMapEntryUpdater(env, web_contents, jclient);
}
AwContentsIoThreadClient::AwContentsIoThreadClient(const JavaRef<jobject>& obj)
: java_object_(obj) {
DCHECK(java_object_);
}
AwContentsIoThreadClient::~AwContentsIoThreadClient() = default;
AwContentsIoThreadClient::CacheMode AwContentsIoThreadClient::GetCacheMode()
const {
DCHECK_CURRENTLY_ON(BrowserThread::IO);
JNIEnv* env = AttachCurrentThread();
return static_cast<AwContentsIoThreadClient::CacheMode>(
Java_AwContentsIoThreadClient_getCacheMode(env, java_object_));
}
namespace {
AwContentsIoThreadClient::InterceptResponseData NoInterceptRequest() {
return AwContentsIoThreadClient::InterceptResponseData();
}
void OnShouldInterceptCallback(
const base::TimeTicks request_started,
AwContentsIoThreadClient::ShouldInterceptRequestResponseCallback callback,
AwWebResourceInterceptResponse java_response) {
JNIEnv* env = AttachCurrentThread();
bool has_response = java_response.HasResponse(env);
UMA_HISTOGRAM_BOOLEAN(
"Android.WebView.ShouldInterceptRequest.IsRequestIntercepted",
has_response);
AwContentsIoThreadClient::InterceptResponseData response_data;
if (base::FeatureList::IsEnabled(
embedder_support::features::kInputStreamOptimizations) &&
has_response) {
auto response = java_response.GetResponse(env);
if (response->HasInputStream(env)) {
response_data.input_stream = response->GetInputStream(env);
}
}
response_data.response =
std::make_unique<AwWebResourceInterceptResponse>(java_response);
base::UmaHistogramTimes(
"Android.WebView.ShouldInterceptRequest.InterceptDuration",
base::TimeTicks::Now() - request_started);
content::GetIOThreadTaskRunner({})->PostTask(
FROM_HERE, base::BindOnce(std::move(callback), std::move(response_data)));
}
void StartShouldInterceptRequest(
AwWebResourceRequest request,
const base::TimeTicks request_started,
AwContentsIoThreadClient::ShouldInterceptRequestResponseCallback callback,
JavaObjectWeakGlobalRef ref) {
TRACE_EVENT0("android_webview", "RunShouldInterceptRequest");
base::ScopedBlockingCall scoped_blocking_call(FROM_HERE,
base::BlockingType::MAY_BLOCK);
JNIEnv* env = AttachCurrentThread();
base::android::ScopedJavaLocalRef<jobject> obj = ref.get(env);
if (!obj) {
content::GetIOThreadTaskRunner({})->PostTask(
FROM_HERE, base::BindOnce(std::move(callback), NoInterceptRequest()));
return;
}
devtools_instrumentation::ScopedEmbedderCallbackTask embedder_callback(
"shouldInterceptRequest");
Java_ShouldInterceptRequestMediator_shouldInterceptRequestFromNative(
env, obj, request,
base::android::ToJniCallback(
env, base::BindOnce(&OnShouldInterceptCallback, request_started,
std::move(callback))));
}
}
AwContentsIoThreadClient::InterceptResponseData::InterceptResponseData() =
default;
AwContentsIoThreadClient::InterceptResponseData::~InterceptResponseData() =
default;
AwContentsIoThreadClient::InterceptResponseData::InterceptResponseData(
InterceptResponseData&& other) = default;
AwContentsIoThreadClient::InterceptResponseData&
AwContentsIoThreadClient::InterceptResponseData::operator=(
InterceptResponseData&& other) = default;
void AwContentsIoThreadClient::ShouldInterceptRequestAsync(
AwWebResourceRequest request,
ShouldInterceptRequestResponseCallback callback) {
DCHECK_CURRENTLY_ON(BrowserThread::IO);
JNIEnv* env = AttachCurrentThread();
ScopedJavaLocalRef<jobject> mediator =
Java_AwContentsIoThreadClient_getShouldInterceptRequestMediator(
env, java_object_, request.url);
UMA_HISTOGRAM_BOOLEAN(
"Android.WebView.ShouldInterceptRequest.IsRequestSkipped", !mediator);
if (mediator) {
const base::TimeTicks request_started = base::TimeTicks::Now();
base::ThreadPool::PostTask(
FROM_HERE, {base::MayBlock()},
base::BindOnce(&StartShouldInterceptRequest, std::move(request),
request_started, std::move(callback),
JavaObjectWeakGlobalRef(env, mediator)));
} else {
Java_AwContentsIoThreadClient_onLoadResource(env, java_object_,
request.url);
std::move(callback).Run(NoInterceptRequest());
}
}
bool AwContentsIoThreadClient::ShouldBlockContentUrls() const {
DCHECK_CURRENTLY_ON(BrowserThread::IO);
JNIEnv* env = AttachCurrentThread();
return Java_AwContentsIoThreadClient_shouldBlockContentUrls(env,
java_object_);
}
bool AwContentsIoThreadClient::ShouldBlockFileUrls() const {
DCHECK_CURRENTLY_ON(BrowserThread::IO);
JNIEnv* env = AttachCurrentThread();
return Java_AwContentsIoThreadClient_shouldBlockFileUrls(env, java_object_);
}
bool AwContentsIoThreadClient::ShouldBlockSpecialFileUrls() const {
DCHECK_CURRENTLY_ON(BrowserThread::IO);
JNIEnv* env = AttachCurrentThread();
return Java_AwContentsIoThreadClient_shouldBlockSpecialFileUrls(env,
java_object_);
}
bool AwContentsIoThreadClient::ShouldAcceptCookies() const {
DCHECK_CURRENTLY_ON(BrowserThread::IO);
JNIEnv* env = AttachCurrentThread();
return Java_AwContentsIoThreadClient_shouldAcceptCookies(env, java_object_);
}
bool AwContentsIoThreadClient::ShouldAcceptThirdPartyCookies() const {
DCHECK_CURRENTLY_ON(BrowserThread::IO);
JNIEnv* env = AttachCurrentThread();
return Java_AwContentsIoThreadClient_shouldAcceptThirdPartyCookies(
env, java_object_);
}
bool AwContentsIoThreadClient::GetSafeBrowsingEnabled() const {
DCHECK_CURRENTLY_ON(content::BrowserThread::UI);
JNIEnv* env = AttachCurrentThread();
return Java_AwContentsIoThreadClient_getSafeBrowsingEnabled(env,
java_object_);
}
bool AwContentsIoThreadClient::ShouldBlockNetworkLoads() const {
DCHECK_CURRENTLY_ON(BrowserThread::IO);
JNIEnv* env = AttachCurrentThread();
return Java_AwContentsIoThreadClient_shouldBlockNetworkLoads(env,
java_object_);
}
bool AwContentsIoThreadClient::ShouldIncludeCookiesOnIntercept() const {
DCHECK_CURRENTLY_ON(BrowserThread::IO);
JNIEnv* env = AttachCurrentThread();
return Java_AwContentsIoThreadClient_shouldIncludeCookiesInIntercept(
env, java_object_);
}
}
DEFINE_JNI(AwContentsIoThreadClient)
DEFINE_JNI(ShouldInterceptRequestMediator)