summaryrefslogtreecommitdiffstats
path: root/toolkit/components/webextensions/ext-c-storage.js
blob: e8d53058f6d2eea39eb60fb0fd7aab2165a6535e (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
"use strict";

XPCOMUtils.defineLazyModuleGetter(this, "ExtensionStorage",
                                  "resource://gre/modules/ExtensionStorage.jsm");
Cu.import("resource://gre/modules/Services.jsm");

function storageApiFactory(context) {
  function sanitize(items) {
    // The schema validator already takes care of arrays (which are only allowed
    // to contain strings). Strings and null are safe values.
    if (typeof items != "object" || items === null || Array.isArray(items)) {
      return items;
    }
    // If we got here, then `items` is an object generated by `ObjectType`'s
    // `normalize` method from Schemas.jsm. The object returned by `normalize`
    // lives in this compartment, while the values live in compartment of
    // `context.contentWindow`. The `sanitize` method runs with the principal
    // of `context`, so we cannot just use `ExtensionStorage.sanitize` because
    // it is not allowed to access properties of `items`.
    // So we enumerate all properties and sanitize each value individually.
    let sanitized = {};
    for (let [key, value] of Object.entries(items)) {
      sanitized[key] = ExtensionStorage.sanitize(value, context);
    }
    return sanitized;
  }
  return {
    storage: {
      local: {
        get: function(keys) {
          keys = sanitize(keys);
          return context.childManager.callParentAsyncFunction("storage.local.get", [
            keys,
          ]);
        },
        set: function(items) {
          items = sanitize(items);
          return context.childManager.callParentAsyncFunction("storage.local.set", [
            items,
          ]);
        },
      },

      sync: {
        get: function(keys) {
          keys = sanitize(keys);
          return context.childManager.callParentAsyncFunction("storage.sync.get", [
            keys,
          ]);
        },
        set: function(items) {
          items = sanitize(items);
          return context.childManager.callParentAsyncFunction("storage.sync.set", [
            items,
          ]);
        },
      },
    },
  };
}
extensions.registerSchemaAPI("storage", "addon_child", storageApiFactory);
extensions.registerSchemaAPI("storage", "content_child", storageApiFactory);