third_party/blink/renderer/bindings/core/v8/v8_lazy_event_listener.cc - chromium/src - Git at Google

 /*
  * Copyright (C) 2006, 2007, 2008, 2009 Google Inc. All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without
  * modification, are permitted provided that the following conditions are
  * met:
  *
  *     * Redistributions of source code must retain the above copyright
  * notice, this list of conditions and the following disclaimer.
  *     * Redistributions in binary form must reproduce the above
  * copyright notice, this list of conditions and the following disclaimer
  * in the documentation and/or other materials provided with the
  * distribution.
  *     * Neither the name of Google Inc. nor the names of its
  * contributors may be used to endorse or promote products derived from
  * this software without specific prior written permission.
  *
  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
  * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
  * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
  * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
  * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  */

 #include "third_party/blink/renderer/bindings/core/v8/v8_lazy_event_listener.h"

 #include "third_party/blink/renderer/bindings/core/v8/script_controller.h"
 #include "third_party/blink/renderer/bindings/core/v8/script_source_code.h"
 #include "third_party/blink/renderer/bindings/core/v8/source_location.h"
 #include "third_party/blink/renderer/bindings/core/v8/v8_binding_for_core.h"
 #include "third_party/blink/renderer/bindings/core/v8/v8_document.h"
 #include "third_party/blink/renderer/bindings/core/v8/v8_html_form_element.h"
 #include "third_party/blink/renderer/bindings/core/v8/v8_node.h"
 #include "third_party/blink/renderer/bindings/core/v8/v8_script_runner.h"
 #include "third_party/blink/renderer/core/dom/document.h"
 #include "third_party/blink/renderer/core/dom/node.h"
 #include "third_party/blink/renderer/core/events/error_event.h"
 #include "third_party/blink/renderer/core/execution_context/execution_context.h"
 #include "third_party/blink/renderer/core/frame/csp/content_security_policy.h"
 #include "third_party/blink/renderer/core/frame/local_frame.h"
 #include "third_party/blink/renderer/core/html/forms/html_form_element.h"
 #include "third_party/blink/renderer/core/html/html_element.h"
 #include "third_party/blink/renderer/platform/bindings/v8_dom_wrapper.h"
 #include "third_party/blink/renderer/platform/bindings/v8_private_property.h"
 #include "third_party/blink/renderer/platform/wtf/std_lib_extras.h"

 namespace blink {

 V8LazyEventListener::V8LazyEventListener(
     v8::Isolate* isolate,
     const AtomicString& function_name,
     const String& code,
     const String source_url,
     const TextPosition& position,
     Node* node)
     : V8AbstractEventHandler(isolate, true, DOMWrapperWorld::MainWorld()),
       was_compilation_failed_(false),
       function_name_(function_name),
       code_(code),
       source_url_(source_url),
       node_(node),
       position_(position) {}

 template <typename T>
 v8::Local<v8::Object> ToObjectWrapper(T* dom_object,
                                       ScriptState* script_state) {
   if (!dom_object)
     return v8::Object::New(script_state->GetIsolate());
   v8::Local<v8::Value> value =
       ToV8(dom_object, script_state->GetContext()->Global(),
            script_state->GetIsolate());
   if (value.IsEmpty())
     return v8::Object::New(script_state->GetIsolate());
   return v8::Local<v8::Object>::New(script_state->GetIsolate(),
                                     value.As<v8::Object>());
 }

 v8::Local<v8::Value> V8LazyEventListener::CallListenerFunction(
     ScriptState* script_state,
     v8::Local<v8::Value> js_event,
     Event* event) {
   DCHECK(!js_event.IsEmpty());
   ExecutionContext* execution_context =
       ToExecutionContext(script_state->GetContext());
   v8::Local<v8::Object> listener_object =
       GetListenerObjectInternal(execution_context);
   if (listener_object.IsEmpty())
     return v8::Local<v8::Value>();

   v8::Local<v8::Function> handler_function = listener_object.As<v8::Function>();
   v8::Local<v8::Object> receiver = GetReceiverObject(script_state, event);
   if (handler_function.IsEmpty() || receiver.IsEmpty())
     return v8::Local<v8::Value>();

   if (!execution_context->IsDocument())
     return v8::Local<v8::Value>();

   LocalFrame* frame = ToDocument(execution_context)->GetFrame();
   if (!frame)
     return v8::Local<v8::Value>();

   if (!execution_context->CanExecuteScripts(kAboutToExecuteScript))
     return v8::Local<v8::Value>();

   v8::Local<v8::Value> parameters[1] = {js_event};
   v8::Local<v8::Value> result;
   if (!V8ScriptRunner::CallFunction(handler_function, frame->GetDocument(),
                                     receiver, base::size(parameters),
                                     parameters, script_state->GetIsolate())
            .ToLocal(&result))
     return v8::Local<v8::Value>();
   return result;
 }

 v8::Local<v8::Object> V8LazyEventListener::GetListenerObjectInternal(
     ExecutionContext* execution_context) {
   if (!execution_context)
     return v8::Local<v8::Object>();

   // A ScriptState used by the event listener needs to be calculated based on
   // the ExecutionContext that fired the the event listener and the world
   // that installed the event listener.
   v8::EscapableHandleScope handle_scope(ToIsolate(execution_context));
   v8::Local<v8::Context> v8_context = ToV8Context(execution_context, World());
   if (v8_context.IsEmpty())
     return v8::Local<v8::Object>();
   ScriptState* script_state = ScriptState::From(v8_context);
   if (!script_state->ContextIsValid())
     return v8::Local<v8::Object>();

   if (!execution_context->IsDocument())
     return v8::Local<v8::Object>();

   if (!ToDocument(execution_context)
            ->AllowInlineEventHandler(node_, this, source_url_, position_.line_))
     return v8::Local<v8::Object>();

   // All checks passed and it's now okay to return the function object.

   // We may need to compile the same script twice or more because the compiled
   // function object may be garbage-collected, however, we should behave as if
   // we compile the code only once, i.e. we must not throw an error twice.
   if (!HasExistingListenerObject() && !was_compilation_failed_)
     CompileScript(script_state, execution_context);

   return handle_scope.Escape(GetExistingListenerObject());
 }

 void V8LazyEventListener::CompileScript(ScriptState* script_state,
                                         ExecutionContext* execution_context) {
   DCHECK(!HasExistingListenerObject());

   ScriptState::Scope scope(script_state);

   // Nodes other than the document object, when executing inline event
   // handlers push document, form owner, and the target node on the scope chain.
   // We do this by using 'with' statement.
   // See fast/forms/form-action.html
   //     fast/forms/selected-index-value.html
   //     fast/overflow/onscroll-layer-self-destruct.html
   HTMLFormElement* form_element = nullptr;
   if (node_ && node_->IsHTMLElement())
     form_element = ToHTMLElement(node_)->formOwner();

   v8::Local<v8::Object> scopes[3];
   scopes[2] = ToObjectWrapper<Node>(node_, script_state);
   scopes[1] = ToObjectWrapper<HTMLFormElement>(form_element, script_state);
   scopes[0] = ToObjectWrapper<Document>(
       node_ ? node_->ownerDocument() : nullptr, script_state);

   // SVG requires to introduce evt as an alias to event in event handlers.
   // See ANNOTATION 3: https://www.w3.org/TR/SVG/interact.html#SVGEvents
   v8::Local<v8::String> parameter_name =
       V8String(GetIsolate(), node_ && node_->IsSVGElement() ? "evt" : "event");

   v8::ScriptOrigin origin(
       V8String(GetIsolate(), source_url_),
       v8::Integer::New(GetIsolate(), position_.line_.ZeroBasedInt()),
       v8::Integer::New(GetIsolate(), position_.column_.ZeroBasedInt()),
       v8::True(GetIsolate()));
   v8::ScriptCompiler::Source source(V8String(GetIsolate(), code_), origin);

   v8::Local<v8::Function> wrapped_function;
   {
     // JavaScript compilation error shouldn't be reported as a runtime
     // exception because we're not running any program code.  Instead,
     // it should be reported as an ErrorEvent.
     v8::TryCatch block(GetIsolate());
     v8::MaybeLocal<v8::Function> maybe_result =
         v8::ScriptCompiler::CompileFunctionInContext(
             script_state->GetContext(), &source, 1, &parameter_name, 3, scopes);
     if (!maybe_result.ToLocal(&wrapped_function)) {
       was_compilation_failed_ = true;  // Do not compile the same code twice.
       FireErrorEvent(script_state->GetContext(), execution_context,
                      block.Message());
       return;
     }
   }

   wrapped_function->SetName(V8String(GetIsolate(), function_name_));

   SetListenerObject(
       script_state, wrapped_function,
       V8PrivateProperty::GetCustomWrappableEventListener(GetIsolate()));
 }

 void V8LazyEventListener::FireErrorEvent(v8::Local<v8::Context> v8_context,
                                          ExecutionContext* execution_context,
                                          v8::Local<v8::Message> message) {
   ErrorEvent* event = ErrorEvent::Create(
       ToCoreStringWithNullCheck(message->Get()),
       SourceLocation::FromMessage(GetIsolate(), message, execution_context),
       &World());

   AccessControlStatus access_control_status = kNotSharableCrossOrigin;
   if (message->IsOpaque())
     access_control_status = kOpaqueResource;
   else if (message->IsSharedCrossOrigin())
     access_control_status = kSharableCrossOrigin;

   execution_context->DispatchErrorEvent(event, access_control_status);
 }

 }  // namespace blink
	/*
	* Copyright (C) 2006, 2007, 2008, 2009 Google Inc. All rights reserved.
	*
	* Redistribution and use in source and binary forms, with or without
	* modification, are permitted provided that the following conditions are
	* met:
	*
	* * Redistributions of source code must retain the above copyright
	* notice, this list of conditions and the following disclaimer.
	* * Redistributions in binary form must reproduce the above
	* copyright notice, this list of conditions and the following disclaimer
	* in the documentation and/or other materials provided with the
	* distribution.
	* * Neither the name of Google Inc. nor the names of its
	* contributors may be used to endorse or promote products derived from
	* this software without specific prior written permission.
	*
	* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
	* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
	* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
	* A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
	* OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
	* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
	* LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
	* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
	* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
	* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
	* OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
	*/

	#include "third_party/blink/renderer/bindings/core/v8/v8_lazy_event_listener.h"

	#include "third_party/blink/renderer/bindings/core/v8/script_controller.h"
	#include "third_party/blink/renderer/bindings/core/v8/script_source_code.h"
	#include "third_party/blink/renderer/bindings/core/v8/source_location.h"
	#include "third_party/blink/renderer/bindings/core/v8/v8_binding_for_core.h"
	#include "third_party/blink/renderer/bindings/core/v8/v8_document.h"
	#include "third_party/blink/renderer/bindings/core/v8/v8_html_form_element.h"
	#include "third_party/blink/renderer/bindings/core/v8/v8_node.h"
	#include "third_party/blink/renderer/bindings/core/v8/v8_script_runner.h"
	#include "third_party/blink/renderer/core/dom/document.h"
	#include "third_party/blink/renderer/core/dom/node.h"
	#include "third_party/blink/renderer/core/events/error_event.h"
	#include "third_party/blink/renderer/core/execution_context/execution_context.h"
	#include "third_party/blink/renderer/core/frame/csp/content_security_policy.h"
	#include "third_party/blink/renderer/core/frame/local_frame.h"
	#include "third_party/blink/renderer/core/html/forms/html_form_element.h"
	#include "third_party/blink/renderer/core/html/html_element.h"
	#include "third_party/blink/renderer/platform/bindings/v8_dom_wrapper.h"
	#include "third_party/blink/renderer/platform/bindings/v8_private_property.h"
	#include "third_party/blink/renderer/platform/wtf/std_lib_extras.h"

	namespace blink {

	V8LazyEventListener::V8LazyEventListener(
	v8::Isolate* isolate,
	const AtomicString& function_name,
	const String& code,
	const String source_url,
	const TextPosition& position,
	Node* node)
	: V8AbstractEventHandler(isolate, true, DOMWrapperWorld::MainWorld()),
	was_compilation_failed_(false),
	function_name_(function_name),
	code_(code),
	source_url_(source_url),
	node_(node),
	position_(position) {}

	template <typename T>
	v8::Local<v8::Object> ToObjectWrapper(T* dom_object,
	ScriptState* script_state) {
	if (!dom_object)
	return v8::Object::New(script_state->GetIsolate());
	v8::Local<v8::Value> value =
	ToV8(dom_object, script_state->GetContext()->Global(),
	script_state->GetIsolate());
	if (value.IsEmpty())
	return v8::Object::New(script_state->GetIsolate());
	return v8::Local<v8::Object>::New(script_state->GetIsolate(),
	value.As<v8::Object>());
	}

	v8::Local<v8::Value> V8LazyEventListener::CallListenerFunction(
	ScriptState* script_state,
	v8::Local<v8::Value> js_event,
	Event* event) {
	DCHECK(!js_event.IsEmpty());
	ExecutionContext* execution_context =
	ToExecutionContext(script_state->GetContext());
	v8::Local<v8::Object> listener_object =
	GetListenerObjectInternal(execution_context);
	if (listener_object.IsEmpty())
	return v8::Local<v8::Value>();

	v8::Local<v8::Function> handler_function = listener_object.As<v8::Function>();
	v8::Local<v8::Object> receiver = GetReceiverObject(script_state, event);
	if (handler_function.IsEmpty() \|\| receiver.IsEmpty())
	return v8::Local<v8::Value>();

	if (!execution_context->IsDocument())
	return v8::Local<v8::Value>();

	LocalFrame* frame = ToDocument(execution_context)->GetFrame();
	if (!frame)
	return v8::Local<v8::Value>();

	if (!execution_context->CanExecuteScripts(kAboutToExecuteScript))
	return v8::Local<v8::Value>();

	v8::Local<v8::Value> parameters[1] = {js_event};
	v8::Local<v8::Value> result;
	if (!V8ScriptRunner::CallFunction(handler_function, frame->GetDocument(),
	receiver, base::size(parameters),
	parameters, script_state->GetIsolate())
	.ToLocal(&result))
	return v8::Local<v8::Value>();
	return result;
	}

	v8::Local<v8::Object> V8LazyEventListener::GetListenerObjectInternal(
	ExecutionContext* execution_context) {
	if (!execution_context)
	return v8::Local<v8::Object>();

	// A ScriptState used by the event listener needs to be calculated based on
	// the ExecutionContext that fired the the event listener and the world
	// that installed the event listener.
	v8::EscapableHandleScope handle_scope(ToIsolate(execution_context));
	v8::Local<v8::Context> v8_context = ToV8Context(execution_context, World());
	if (v8_context.IsEmpty())
	return v8::Local<v8::Object>();
	ScriptState* script_state = ScriptState::From(v8_context);
	if (!script_state->ContextIsValid())
	return v8::Local<v8::Object>();

	if (!execution_context->IsDocument())
	return v8::Local<v8::Object>();

	if (!ToDocument(execution_context)
	->AllowInlineEventHandler(node_, this, source_url_, position_.line_))
	return v8::Local<v8::Object>();

	// All checks passed and it's now okay to return the function object.

	// We may need to compile the same script twice or more because the compiled
	// function object may be garbage-collected, however, we should behave as if
	// we compile the code only once, i.e. we must not throw an error twice.
	if (!HasExistingListenerObject() && !was_compilation_failed_)
	CompileScript(script_state, execution_context);

	return handle_scope.Escape(GetExistingListenerObject());
	}

	void V8LazyEventListener::CompileScript(ScriptState* script_state,
	ExecutionContext* execution_context) {
	DCHECK(!HasExistingListenerObject());

	ScriptState::Scope scope(script_state);

	// Nodes other than the document object, when executing inline event
	// handlers push document, form owner, and the target node on the scope chain.
	// We do this by using 'with' statement.
	// See fast/forms/form-action.html
	// fast/forms/selected-index-value.html
	// fast/overflow/onscroll-layer-self-destruct.html
	HTMLFormElement* form_element = nullptr;
	if (node_ && node_->IsHTMLElement())
	form_element = ToHTMLElement(node_)->formOwner();

	v8::Local<v8::Object> scopes[3];
	scopes[2] = ToObjectWrapper<Node>(node_, script_state);
	scopes[1] = ToObjectWrapper<HTMLFormElement>(form_element, script_state);
	scopes[0] = ToObjectWrapper<Document>(
	node_ ? node_->ownerDocument() : nullptr, script_state);

	// SVG requires to introduce evt as an alias to event in event handlers.
	// See ANNOTATION 3: https://www.w3.org/TR/SVG/interact.html#SVGEvents
	v8::Local<v8::String> parameter_name =
	V8String(GetIsolate(), node_ && node_->IsSVGElement() ? "evt" : "event");

	v8::ScriptOrigin origin(
	V8String(GetIsolate(), source_url_),
	v8::Integer::New(GetIsolate(), position_.line_.ZeroBasedInt()),
	v8::Integer::New(GetIsolate(), position_.column_.ZeroBasedInt()),
	v8::True(GetIsolate()));
	v8::ScriptCompiler::Source source(V8String(GetIsolate(), code_), origin);

	v8::Local<v8::Function> wrapped_function;
	{
	// JavaScript compilation error shouldn't be reported as a runtime
	// exception because we're not running any program code. Instead,
	// it should be reported as an ErrorEvent.
	v8::TryCatch block(GetIsolate());
	v8::MaybeLocal<v8::Function> maybe_result =
	v8::ScriptCompiler::CompileFunctionInContext(
	script_state->GetContext(), &source, 1, &parameter_name, 3, scopes);
	if (!maybe_result.ToLocal(&wrapped_function)) {
	was_compilation_failed_ = true; // Do not compile the same code twice.
	FireErrorEvent(script_state->GetContext(), execution_context,
	block.Message());
	return;
	}
	}

	wrapped_function->SetName(V8String(GetIsolate(), function_name_));

	SetListenerObject(
	script_state, wrapped_function,
	V8PrivateProperty::GetCustomWrappableEventListener(GetIsolate()));
	}

	void V8LazyEventListener::FireErrorEvent(v8::Local<v8::Context> v8_context,
	ExecutionContext* execution_context,
	v8::Local<v8::Message> message) {
	ErrorEvent* event = ErrorEvent::Create(
	ToCoreStringWithNullCheck(message->Get()),
	SourceLocation::FromMessage(GetIsolate(), message, execution_context),
	&World());

	AccessControlStatus access_control_status = kNotSharableCrossOrigin;
	if (message->IsOpaque())
	access_control_status = kOpaqueResource;
	else if (message->IsSharedCrossOrigin())
	access_control_status = kSharableCrossOrigin;

	execution_context->DispatchErrorEvent(event, access_control_status);
	}

	} // namespace blink