diff options
Diffstat (limited to 'dom/html/nsHTMLDocument.cpp')
-rw-r--r-- | dom/html/nsHTMLDocument.cpp | 3667 |
1 files changed, 3667 insertions, 0 deletions
diff --git a/dom/html/nsHTMLDocument.cpp b/dom/html/nsHTMLDocument.cpp new file mode 100644 index 000000000..5e6302941 --- /dev/null +++ b/dom/html/nsHTMLDocument.cpp @@ -0,0 +1,3667 @@ +/* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 2 -*- */ +/* vim: set ts=8 sts=2 et sw=2 tw=80: */ +/* This Source Code Form is subject to the terms of the Mozilla Public + * License, v. 2.0. If a copy of the MPL was not distributed with this + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ + +#include "nsHTMLDocument.h" + +#include "nsIContentPolicy.h" +#include "mozilla/DebugOnly.h" +#include "mozilla/dom/HTMLAllCollection.h" +#include "nsCOMPtr.h" +#include "nsGlobalWindow.h" +#include "nsXPIDLString.h" +#include "nsPrintfCString.h" +#include "nsReadableUtils.h" +#include "nsUnicharUtils.h" +#include "nsIHTMLContentSink.h" +#include "nsIXMLContentSink.h" +#include "nsHTMLParts.h" +#include "nsHTMLStyleSheet.h" +#include "nsGkAtoms.h" +#include "nsIPresShell.h" +#include "nsPresContext.h" +#include "nsIDOMNode.h" // for Find +#include "nsIDOMNodeList.h" +#include "nsIDOMElement.h" +#include "nsPIDOMWindow.h" +#include "nsDOMString.h" +#include "nsIStreamListener.h" +#include "nsIURI.h" +#include "nsIIOService.h" +#include "nsNetUtil.h" +#include "nsIPrivateBrowsingChannel.h" +#include "nsIContentViewerContainer.h" +#include "nsIContentViewer.h" +#include "nsDocShell.h" +#include "nsDocShellLoadTypes.h" +#include "nsIWebNavigation.h" +#include "nsIBaseWindow.h" +#include "nsIWebShellServices.h" +#include "nsIScriptContext.h" +#include "nsIXPConnect.h" +#include "nsContentList.h" +#include "nsError.h" +#include "nsIPrincipal.h" +#include "nsJSPrincipals.h" +#include "nsIScriptSecurityManager.h" +#include "nsAttrName.h" +#include "nsNodeUtils.h" + +#include "nsNetCID.h" +#include "nsICookieService.h" + +#include "nsIServiceManager.h" +#include "nsIConsoleService.h" +#include "nsIComponentManager.h" +#include "nsParserCIID.h" +#include "nsIDOMHTMLElement.h" +#include "nsIDOMHTMLHeadElement.h" +#include "nsNameSpaceManager.h" +#include "nsGenericHTMLElement.h" +#include "mozilla/css/Loader.h" +#include "nsIHttpChannel.h" +#include "nsIFile.h" +#include "nsFrameSelection.h" +#include "nsISelectionPrivate.h"//for toStringwithformat code + +#include "nsContentUtils.h" +#include "nsJSUtils.h" +#include "nsIDocumentInlines.h" +#include "nsIDocumentEncoder.h" //for outputting selection +#include "nsICachingChannel.h" +#include "nsIContentViewer.h" +#include "nsIWyciwygChannel.h" +#include "nsIScriptElement.h" +#include "nsIScriptError.h" +#include "nsIMutableArray.h" +#include "nsArrayUtils.h" +#include "nsIEffectiveTLDService.h" + +//AHMED 12-2 +#include "nsBidiUtils.h" + +#include "mozilla/dom/EncodingUtils.h" +#include "mozilla/dom/FallbackEncoding.h" +#include "mozilla/LoadInfo.h" +#include "nsIEditingSession.h" +#include "nsIEditor.h" +#include "nsNodeInfoManager.h" +#include "nsIPlaintextEditor.h" +#include "nsIHTMLEditor.h" +#include "nsIEditorStyleSheets.h" +#include "nsIInlineSpellChecker.h" +#include "nsRange.h" +#include "mozAutoDocUpdate.h" +#include "nsCCUncollectableMarker.h" +#include "nsHtml5Module.h" +#include "prprf.h" +#include "mozilla/dom/Element.h" +#include "mozilla/Preferences.h" +#include "nsMimeTypes.h" +#include "nsIRequest.h" +#include "nsHtml5TreeOpExecutor.h" +#include "nsHtml5Parser.h" +#include "nsSandboxFlags.h" +#include "nsIImageDocument.h" +#include "mozilla/dom/HTMLBodyElement.h" +#include "mozilla/dom/HTMLDocumentBinding.h" +#include "nsCharsetSource.h" +#include "nsIStringBundle.h" +#include "nsDOMClassInfo.h" +#include "nsFocusManager.h" +#include "nsIFrame.h" +#include "nsIContent.h" +#include "nsLayoutStylesheetCache.h" +#include "mozilla/StyleSheet.h" +#include "mozilla/StyleSheetInlines.h" + +using namespace mozilla; +using namespace mozilla::dom; + +#define NS_MAX_DOCUMENT_WRITE_DEPTH 20 + +#include "prtime.h" + +//#define DEBUG_charset + +static NS_DEFINE_CID(kCParserCID, NS_PARSER_CID); + +uint32_t nsHTMLDocument::gWyciwygSessionCnt = 0; + +// this function will return false if the command is not recognized +// inCommandID will be converted as necessary for internal operations +// inParam will be converted as necessary for internal operations +// outParam will be Empty if no parameter is needed or if returning a boolean +// outIsBoolean will determine whether to send param as a boolean or string +// outBooleanParam will not be set unless outIsBoolean +static bool ConvertToMidasInternalCommand(const nsAString & inCommandID, + const nsAString & inParam, + nsACString& outCommandID, + nsACString& outParam, + bool& isBoolean, + bool& boolValue); + +static bool ConvertToMidasInternalCommand(const nsAString & inCommandID, + nsACString& outCommandID); + +// ================================================================== +// = +// ================================================================== + +nsresult +NS_NewHTMLDocument(nsIDocument** aInstancePtrResult, bool aLoadedAsData) +{ + RefPtr<nsHTMLDocument> doc = new nsHTMLDocument(); + + nsresult rv = doc->Init(); + + if (NS_FAILED(rv)) { + *aInstancePtrResult = nullptr; + return rv; + } + + doc->SetLoadedAsData(aLoadedAsData); + doc.forget(aInstancePtrResult); + + return NS_OK; +} + + // NOTE! nsDocument::operator new() zeroes out all members, so don't + // bother initializing members to 0. + +nsHTMLDocument::nsHTMLDocument() + : nsDocument("text/html") +{ + // NOTE! nsDocument::operator new() zeroes out all members, so don't + // bother initializing members to 0. + + mType = eHTML; + mDefaultElementType = kNameSpaceID_XHTML; + mCompatMode = eCompatibility_NavQuirks; +} + +nsHTMLDocument::~nsHTMLDocument() +{ +} + +NS_IMPL_CYCLE_COLLECTION_INHERITED(nsHTMLDocument, nsDocument, + mAll, + mImages, + mApplets, + mEmbeds, + mLinks, + mAnchors, + mScripts, + mForms, + mFormControls, + mWyciwygChannel, + mMidasCommandManager) + +NS_IMPL_ADDREF_INHERITED(nsHTMLDocument, nsDocument) +NS_IMPL_RELEASE_INHERITED(nsHTMLDocument, nsDocument) + +// QueryInterface implementation for nsHTMLDocument +NS_INTERFACE_TABLE_HEAD_CYCLE_COLLECTION_INHERITED(nsHTMLDocument) + NS_INTERFACE_TABLE_INHERITED(nsHTMLDocument, nsIHTMLDocument, + nsIDOMHTMLDocument) +NS_INTERFACE_TABLE_TAIL_INHERITING(nsDocument) + +JSObject* +nsHTMLDocument::WrapNode(JSContext* aCx, JS::Handle<JSObject*> aGivenProto) +{ + return HTMLDocumentBinding::Wrap(aCx, this, aGivenProto); +} + +nsresult +nsHTMLDocument::Init() +{ + nsresult rv = nsDocument::Init(); + NS_ENSURE_SUCCESS(rv, rv); + + // Now reset the compatibility mode of the CSSLoader + // to match our compat mode. + CSSLoader()->SetCompatibilityMode(mCompatMode); + + return NS_OK; +} + + +void +nsHTMLDocument::Reset(nsIChannel* aChannel, nsILoadGroup* aLoadGroup) +{ + nsDocument::Reset(aChannel, aLoadGroup); + + if (aChannel) { + aChannel->GetLoadFlags(&mLoadFlags); + } +} + +void +nsHTMLDocument::ResetToURI(nsIURI *aURI, nsILoadGroup *aLoadGroup, + nsIPrincipal* aPrincipal) +{ + mLoadFlags = nsIRequest::LOAD_NORMAL; + + nsDocument::ResetToURI(aURI, aLoadGroup, aPrincipal); + + mImages = nullptr; + mApplets = nullptr; + mEmbeds = nullptr; + mLinks = nullptr; + mAnchors = nullptr; + mScripts = nullptr; + + mForms = nullptr; + + NS_ASSERTION(!mWyciwygChannel, + "nsHTMLDocument::Reset() - Wyciwyg Channel still exists!"); + + mWyciwygChannel = nullptr; + + // Make the content type default to "text/html", we are a HTML + // document, after all. Once we start getting data, this may be + // changed. + SetContentTypeInternal(nsDependentCString("text/html")); +} + +already_AddRefed<nsIPresShell> +nsHTMLDocument::CreateShell(nsPresContext* aContext, + nsViewManager* aViewManager, + StyleSetHandle aStyleSet) +{ + return doCreateShell(aContext, aViewManager, aStyleSet); +} + +void +nsHTMLDocument::TryHintCharset(nsIContentViewer* aCv, + int32_t& aCharsetSource, nsACString& aCharset) +{ + if (aCv) { + int32_t requestCharsetSource; + nsresult rv = aCv->GetHintCharacterSetSource(&requestCharsetSource); + + if(NS_SUCCEEDED(rv) && kCharsetUninitialized != requestCharsetSource) { + nsAutoCString requestCharset; + rv = aCv->GetHintCharacterSet(requestCharset); + aCv->SetHintCharacterSetSource((int32_t)(kCharsetUninitialized)); + + if(requestCharsetSource <= aCharsetSource) + return; + + if(NS_SUCCEEDED(rv) && EncodingUtils::IsAsciiCompatible(requestCharset)) { + aCharsetSource = requestCharsetSource; + aCharset = requestCharset; + + return; + } + } + } + return; +} + + +void +nsHTMLDocument::TryUserForcedCharset(nsIContentViewer* aCv, + nsIDocShell* aDocShell, + int32_t& aCharsetSource, + nsACString& aCharset) +{ + nsresult rv = NS_OK; + + if(kCharsetFromUserForced <= aCharsetSource) + return; + + // mCharacterSet not updated yet for channel, so check aCharset, too. + if (WillIgnoreCharsetOverride() || !EncodingUtils::IsAsciiCompatible(aCharset)) { + return; + } + + nsAutoCString forceCharsetFromDocShell; + if (aCv) { + // XXX mailnews-only + rv = aCv->GetForceCharacterSet(forceCharsetFromDocShell); + } + + if(NS_SUCCEEDED(rv) && + !forceCharsetFromDocShell.IsEmpty() && + EncodingUtils::IsAsciiCompatible(forceCharsetFromDocShell)) { + aCharset = forceCharsetFromDocShell; + aCharsetSource = kCharsetFromUserForced; + return; + } + + if (aDocShell) { + // This is the Character Encoding menu code path in Firefox + nsAutoCString charset; + rv = aDocShell->GetForcedCharset(charset); + + if (NS_SUCCEEDED(rv) && !charset.IsEmpty()) { + if (!EncodingUtils::IsAsciiCompatible(charset)) { + return; + } + aCharset = charset; + aCharsetSource = kCharsetFromUserForced; + aDocShell->SetForcedCharset(NS_LITERAL_CSTRING("")); + } + } +} + +void +nsHTMLDocument::TryCacheCharset(nsICachingChannel* aCachingChannel, + int32_t& aCharsetSource, + nsACString& aCharset) +{ + nsresult rv; + + if (kCharsetFromCache <= aCharsetSource) { + return; + } + + nsCString cachedCharset; + rv = aCachingChannel->GetCacheTokenCachedCharset(cachedCharset); + // Check EncodingUtils::IsAsciiCompatible() even in the cache case, because the value + // might be stale and in the case of a stale charset that is not a rough + // ASCII superset, the parser has no way to recover. + if (NS_SUCCEEDED(rv) && + !cachedCharset.IsEmpty() && + EncodingUtils::IsAsciiCompatible(cachedCharset)) + { + aCharset = cachedCharset; + aCharsetSource = kCharsetFromCache; + } +} + +void +nsHTMLDocument::TryParentCharset(nsIDocShell* aDocShell, + int32_t& aCharsetSource, + nsACString& aCharset) +{ + if (!aDocShell) { + return; + } + if (aCharsetSource >= kCharsetFromParentForced) { + return; + } + + int32_t parentSource; + nsAutoCString parentCharset; + nsCOMPtr<nsIPrincipal> parentPrincipal; + aDocShell->GetParentCharset(parentCharset, + &parentSource, + getter_AddRefs(parentPrincipal)); + if (parentCharset.IsEmpty()) { + return; + } + if (kCharsetFromParentForced == parentSource || + kCharsetFromUserForced == parentSource) { + if (WillIgnoreCharsetOverride() || + !EncodingUtils::IsAsciiCompatible(aCharset) || // if channel said UTF-16 + !EncodingUtils::IsAsciiCompatible(parentCharset)) { + return; + } + aCharset.Assign(parentCharset); + aCharsetSource = kCharsetFromParentForced; + return; + } + + if (aCharsetSource >= kCharsetFromParentFrame) { + return; + } + + if (kCharsetFromCache <= parentSource) { + // Make sure that's OK + if (!NodePrincipal()->Equals(parentPrincipal) || + !EncodingUtils::IsAsciiCompatible(parentCharset)) { + return; + } + + aCharset.Assign(parentCharset); + aCharsetSource = kCharsetFromParentFrame; + } +} + +void +nsHTMLDocument::TryTLD(int32_t& aCharsetSource, nsACString& aCharset) +{ + if (aCharsetSource >= kCharsetFromTopLevelDomain) { + return; + } + if (!FallbackEncoding::sGuessFallbackFromTopLevelDomain) { + return; + } + if (!mDocumentURI) { + return; + } + nsAutoCString host; + mDocumentURI->GetAsciiHost(host); + if (host.IsEmpty()) { + return; + } + // First let's see if the host is DNS-absolute and ends with a dot and + // get rid of that one. + if (host.Last() == '.') { + host.SetLength(host.Length() - 1); + if (host.IsEmpty()) { + return; + } + } + // If we still have a dot, the host is weird, so let's continue only + // if we have something other than a dot now. + if (host.Last() == '.') { + return; + } + int32_t index = host.RFindChar('.'); + if (index == kNotFound) { + // We have an intranet host, Gecko-internal URL or an IPv6 address. + return; + } + // Since the string didn't end with a dot and we found a dot, + // there is at least one character between the dot and the end of + // the string, so taking the substring below is safe. + nsAutoCString tld; + ToLowerCase(Substring(host, index + 1, host.Length() - (index + 1)), tld); + // Reject generic TLDs and country TLDs that need more research + if (!FallbackEncoding::IsParticipatingTopLevelDomain(tld)) { + return; + } + // Check if we have an IPv4 address + bool seenNonDigit = false; + for (size_t i = 0; i < tld.Length(); ++i) { + char c = tld.CharAt(i); + if (c < '0' || c > '9') { + seenNonDigit = true; + break; + } + } + if (!seenNonDigit) { + return; + } + aCharsetSource = kCharsetFromTopLevelDomain; + FallbackEncoding::FromTopLevelDomain(tld, aCharset); +} + +void +nsHTMLDocument::TryFallback(int32_t& aCharsetSource, nsACString& aCharset) +{ + if (kCharsetFromFallback <= aCharsetSource) + return; + + aCharsetSource = kCharsetFromFallback; + FallbackEncoding::FromLocale(aCharset); +} + +void +nsHTMLDocument::SetDocumentCharacterSet(const nsACString& aCharSetID) +{ + nsDocument::SetDocumentCharacterSet(aCharSetID); + // Make sure to stash this charset on our channel as needed if it's a wyciwyg + // channel. + nsCOMPtr<nsIWyciwygChannel> wyciwygChannel = do_QueryInterface(mChannel); + if (wyciwygChannel) { + wyciwygChannel->SetCharsetAndSource(GetDocumentCharacterSetSource(), + aCharSetID); + } +} + +nsresult +nsHTMLDocument::StartDocumentLoad(const char* aCommand, + nsIChannel* aChannel, + nsILoadGroup* aLoadGroup, + nsISupports* aContainer, + nsIStreamListener **aDocListener, + bool aReset, + nsIContentSink* aSink) +{ + if (!aCommand) { + MOZ_ASSERT(false, "Command is mandatory"); + return NS_ERROR_INVALID_POINTER; + } + if (aSink) { + MOZ_ASSERT(false, "Got a sink override. Should not happen for HTML doc."); + return NS_ERROR_INVALID_ARG; + } + if (mType != eHTML) { + MOZ_ASSERT(mType == eXHTML); + MOZ_ASSERT(false, "Must not set HTML doc to XHTML mode before load start."); + return NS_ERROR_DOM_INVALID_STATE_ERR; + } + + nsAutoCString contentType; + aChannel->GetContentType(contentType); + + bool view = !strcmp(aCommand, "view") || + !strcmp(aCommand, "external-resource"); + bool viewSource = !strcmp(aCommand, "view-source"); + bool asData = !strcmp(aCommand, kLoadAsData); + bool import = !strcmp(aCommand, "import"); + if (!(view || viewSource || asData || import)) { + MOZ_ASSERT(false, "Bad parser command"); + return NS_ERROR_INVALID_ARG; + } + + bool html = contentType.EqualsLiteral(TEXT_HTML); + bool xhtml = !html && (contentType.EqualsLiteral(APPLICATION_XHTML_XML) || contentType.EqualsLiteral(APPLICATION_WAPXHTML_XML)); + bool plainText = !html && !xhtml && nsContentUtils::IsPlainTextType(contentType); + if (!(html || xhtml || plainText || viewSource)) { + MOZ_ASSERT(false, "Channel with bad content type."); + return NS_ERROR_INVALID_ARG; + } + + bool loadAsHtml5 = true; + + if (!viewSource && xhtml) { + // We're parsing XHTML as XML, remember that. + mType = eXHTML; + mCompatMode = eCompatibility_FullStandards; + loadAsHtml5 = false; + } + + // TODO: Proper about:blank treatment is bug 543435 + if (loadAsHtml5 && view) { + // mDocumentURI hasn't been set, yet, so get the URI from the channel + nsCOMPtr<nsIURI> uri; + aChannel->GetOriginalURI(getter_AddRefs(uri)); + // Adapted from nsDocShell: + // GetSpec can be expensive for some URIs, so check the scheme first. + bool isAbout = false; + if (uri && NS_SUCCEEDED(uri->SchemeIs("about", &isAbout)) && isAbout) { + if (uri->GetSpecOrDefault().EqualsLiteral("about:blank")) { + loadAsHtml5 = false; + } + } + } + + CSSLoader()->SetCompatibilityMode(mCompatMode); + + nsresult rv = nsDocument::StartDocumentLoad(aCommand, + aChannel, aLoadGroup, + aContainer, + aDocListener, aReset); + if (NS_FAILED(rv)) { + return rv; + } + + // Store the security info for future use with wyciwyg channels. + aChannel->GetSecurityInfo(getter_AddRefs(mSecurityInfo)); + + nsCOMPtr<nsIURI> uri; + rv = aChannel->GetURI(getter_AddRefs(uri)); + if (NS_FAILED(rv)) { + return rv; + } + + nsCOMPtr<nsICachingChannel> cachingChan = do_QueryInterface(aChannel); + + if (loadAsHtml5) { + mParser = nsHtml5Module::NewHtml5Parser(); + if (plainText) { + if (viewSource) { + mParser->MarkAsNotScriptCreated("view-source-plain"); + } else { + mParser->MarkAsNotScriptCreated("plain-text"); + } + } else if (viewSource && !html) { + mParser->MarkAsNotScriptCreated("view-source-xml"); + } else { + mParser->MarkAsNotScriptCreated(aCommand); + } + } else { + mParser = do_CreateInstance(kCParserCID, &rv); + NS_ENSURE_SUCCESS(rv, rv); + } + + // Look for the parent document. Note that at this point we don't have our + // content viewer set up yet, and therefore do not have a useful + // mParentDocument. + + // in this block of code, if we get an error result, we return it + // but if we get a null pointer, that's perfectly legal for parent + // and parentContentViewer + nsCOMPtr<nsIDocShell> docShell(do_QueryInterface(aContainer)); + nsCOMPtr<nsIDocShellTreeItem> parentAsItem; + if (docShell) { + docShell->GetSameTypeParent(getter_AddRefs(parentAsItem)); + } + + nsCOMPtr<nsIDocShell> parent(do_QueryInterface(parentAsItem)); + nsCOMPtr<nsIContentViewer> parentContentViewer; + if (parent) { + rv = parent->GetContentViewer(getter_AddRefs(parentContentViewer)); + NS_ENSURE_SUCCESS(rv, rv); + } + + nsCOMPtr<nsIContentViewer> cv; + if (docShell) { + docShell->GetContentViewer(getter_AddRefs(cv)); + } + if (!cv) { + cv = parentContentViewer.forget(); + } + + nsAutoCString urlSpec; + uri->GetSpec(urlSpec); +#ifdef DEBUG_charset + printf("Determining charset for %s\n", urlSpec.get()); +#endif + + // These are the charset source and charset for our document + int32_t charsetSource; + nsAutoCString charset; + + // These are the charset source and charset for the parser. This can differ + // from that for the document if the channel is a wyciwyg channel. + int32_t parserCharsetSource; + nsAutoCString parserCharset; + + nsCOMPtr<nsIWyciwygChannel> wyciwygChannel; + + // For error reporting and referrer policy setting + nsHtml5TreeOpExecutor* executor = nullptr; + if (loadAsHtml5) { + executor = static_cast<nsHtml5TreeOpExecutor*> (mParser->GetContentSink()); + if (mReferrerPolicySet) { + // CSP may have set the referrer policy, so a speculative parser should + // start with the new referrer policy. + executor->SetSpeculationReferrerPolicy(static_cast<ReferrerPolicy>(mReferrerPolicy)); + } + } + + if (!IsHTMLDocument() || !docShell) { // no docshell for text/html XHR + charsetSource = IsHTMLDocument() ? kCharsetFromFallback + : kCharsetFromDocTypeDefault; + charset.AssignLiteral("UTF-8"); + TryChannelCharset(aChannel, charsetSource, charset, executor); + parserCharsetSource = charsetSource; + parserCharset = charset; + } else { + NS_ASSERTION(docShell, "Unexpected null value"); + + charsetSource = kCharsetUninitialized; + wyciwygChannel = do_QueryInterface(aChannel); + + // The following will try to get the character encoding from various + // sources. Each Try* function will return early if the source is already + // at least as large as any of the sources it might look at. Some of + // these functions (like TryHintCharset and TryParentCharset) can set + // charsetSource to various values depending on where the charset they + // end up finding originally comes from. + + // Don't actually get the charset from the channel if this is a + // wyciwyg channel; it'll always be UTF-16 + if (!wyciwygChannel) { + // Otherwise, try the channel's charset (e.g., charset from HTTP + // "Content-Type" header) first. This way, we get to reject overrides in + // TryParentCharset and TryUserForcedCharset if the channel said UTF-16. + // This is to avoid socially engineered XSS by adding user-supplied + // content to a UTF-16 site such that the byte have a dangerous + // interpretation as ASCII and the user can be lured to using the + // charset menu. + TryChannelCharset(aChannel, charsetSource, charset, executor); + } + + TryUserForcedCharset(cv, docShell, charsetSource, charset); + + TryHintCharset(cv, charsetSource, charset); // XXX mailnews-only + TryParentCharset(docShell, charsetSource, charset); + + if (cachingChan && !urlSpec.IsEmpty()) { + TryCacheCharset(cachingChan, charsetSource, charset); + } + + TryTLD(charsetSource, charset); + TryFallback(charsetSource, charset); + + if (wyciwygChannel) { + // We know for sure that the parser needs to be using UTF16. + parserCharset = "UTF-16"; + parserCharsetSource = charsetSource < kCharsetFromChannel ? + kCharsetFromChannel : charsetSource; + + nsAutoCString cachedCharset; + int32_t cachedSource; + rv = wyciwygChannel->GetCharsetAndSource(&cachedSource, cachedCharset); + if (NS_SUCCEEDED(rv)) { + if (cachedSource > charsetSource) { + charsetSource = cachedSource; + charset = cachedCharset; + } + } else { + // Don't propagate this error. + rv = NS_OK; + } + + } else { + parserCharset = charset; + parserCharsetSource = charsetSource; + } + } + + SetDocumentCharacterSetSource(charsetSource); + SetDocumentCharacterSet(charset); + + if (cachingChan) { + NS_ASSERTION(charset == parserCharset, + "How did those end up different here? wyciwyg channels are " + "not nsICachingChannel"); + rv = cachingChan->SetCacheTokenCachedCharset(charset); + NS_WARNING_ASSERTION(NS_SUCCEEDED(rv), "cannot SetMetaDataElement"); + rv = NS_OK; // don't propagate error + } + + // Set the parser as the stream listener for the document loader... + rv = NS_OK; + nsCOMPtr<nsIStreamListener> listener = mParser->GetStreamListener(); + listener.forget(aDocListener); + +#ifdef DEBUG_charset + printf(" charset = %s source %d\n", + charset.get(), charsetSource); +#endif + mParser->SetDocumentCharset(parserCharset, parserCharsetSource); + mParser->SetCommand(aCommand); + + if (!IsHTMLDocument()) { + MOZ_ASSERT(!loadAsHtml5); + nsCOMPtr<nsIXMLContentSink> xmlsink; + NS_NewXMLContentSink(getter_AddRefs(xmlsink), this, uri, + docShell, aChannel); + mParser->SetContentSink(xmlsink); + } else { + if (loadAsHtml5) { + nsHtml5Module::Initialize(mParser, this, uri, docShell, aChannel); + } else { + // about:blank *only* + nsCOMPtr<nsIHTMLContentSink> htmlsink; + NS_NewHTMLContentSink(getter_AddRefs(htmlsink), this, uri, + docShell, aChannel); + mParser->SetContentSink(htmlsink); + } + } + + if (plainText && !nsContentUtils::IsChildOfSameType(this) && + Preferences::GetBool("plain_text.wrap_long_lines")) { + nsCOMPtr<nsIStringBundleService> bundleService = do_GetService(NS_STRINGBUNDLE_CONTRACTID, &rv); + NS_ASSERTION(NS_SUCCEEDED(rv) && bundleService, "The bundle service could not be loaded"); + nsCOMPtr<nsIStringBundle> bundle; + rv = bundleService->CreateBundle("chrome://global/locale/browser.properties", + getter_AddRefs(bundle)); + NS_ASSERTION(NS_SUCCEEDED(rv) && bundle, "chrome://global/locale/browser.properties could not be loaded"); + nsXPIDLString title; + if (bundle) { + bundle->GetStringFromName(u"plainText.wordWrap", getter_Copies(title)); + } + SetSelectedStyleSheetSet(title); + } + + // parser the content of the URI + mParser->Parse(uri, nullptr, (void *)this); + + return rv; +} + +void +nsHTMLDocument::StopDocumentLoad() +{ + BlockOnload(); + + // Remove the wyciwyg channel request from the document load group + // that we added in Open() if Open() was called on this doc. + RemoveWyciwygChannel(); + NS_ASSERTION(!mWyciwygChannel, "nsHTMLDocument::StopDocumentLoad(): " + "nsIWyciwygChannel could not be removed!"); + + nsDocument::StopDocumentLoad(); + UnblockOnload(false); + return; +} + +void +nsHTMLDocument::BeginLoad() +{ + if (IsEditingOn()) { + // Reset() blows away all event listeners in the document, and our + // editor relies heavily on those. Midas is turned on, to make it + // work, re-initialize it to give it a chance to add its event + // listeners again. + + TurnEditingOff(); + EditingStateChanged(); + } + nsDocument::BeginLoad(); +} + +void +nsHTMLDocument::EndLoad() +{ + bool turnOnEditing = + mParser && (HasFlag(NODE_IS_EDITABLE) || mContentEditableCount > 0); + // Note: nsDocument::EndLoad nulls out mParser. + nsDocument::EndLoad(); + if (turnOnEditing) { + EditingStateChanged(); + } +} + +void +nsHTMLDocument::SetCompatibilityMode(nsCompatibility aMode) +{ + NS_ASSERTION(IsHTMLDocument() || aMode == eCompatibility_FullStandards, + "Bad compat mode for XHTML document!"); + + mCompatMode = aMode; + CSSLoader()->SetCompatibilityMode(mCompatMode); + nsCOMPtr<nsIPresShell> shell = GetShell(); + if (shell) { + nsPresContext *pc = shell->GetPresContext(); + if (pc) { + pc->CompatibilityModeChanged(); + } + } +} + +// +// nsIDOMHTMLDocument interface implementation +// +already_AddRefed<nsIURI> +nsHTMLDocument::GetDomainURI() +{ + nsIPrincipal* principal = NodePrincipal(); + + nsCOMPtr<nsIURI> uri; + principal->GetDomain(getter_AddRefs(uri)); + if (uri) { + return uri.forget(); + } + + principal->GetURI(getter_AddRefs(uri)); + return uri.forget(); +} + + +NS_IMETHODIMP +nsHTMLDocument::GetDomain(nsAString& aDomain) +{ + nsCOMPtr<nsIURI> uri = GetDomainURI(); + + if (!uri) { + SetDOMStringToNull(aDomain); + return NS_OK; + } + + nsAutoCString hostName; + nsresult rv = nsContentUtils::GetHostOrIPv6WithBrackets(uri, hostName); + if (NS_SUCCEEDED(rv)) { + CopyUTF8toUTF16(hostName, aDomain); + } else { + // If we can't get the host from the URI (e.g. about:, javascript:, + // etc), just return an null string. + SetDOMStringToNull(aDomain); + } + return NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::SetDomain(const nsAString& aDomain) +{ + ErrorResult rv; + SetDomain(aDomain, rv); + return rv.StealNSResult(); +} + +void +nsHTMLDocument::SetDomain(const nsAString& aDomain, ErrorResult& rv) +{ + if (mSandboxFlags & SANDBOXED_DOMAIN) { + // We're sandboxed; disallow setting domain + rv.Throw(NS_ERROR_DOM_SECURITY_ERR); + return; + } + + if (aDomain.IsEmpty()) { + rv.Throw(NS_ERROR_DOM_BAD_DOCUMENT_DOMAIN); + return; + } + + // Create new URI + nsCOMPtr<nsIURI> uri = GetDomainURI(); + + if (!uri) { + rv.Throw(NS_ERROR_FAILURE); + return; + } + + nsCOMPtr<nsIURI> newURI; + nsresult rv2 = uri->Clone(getter_AddRefs(newURI)); + if (NS_FAILED(rv2)) { + rv.Throw(rv2); + return; + } + + rv2 = newURI->SetUserPass(EmptyCString()); + if (NS_FAILED(rv2)) { + rv.Throw(rv2); + return; + } + + // We use SetHostAndPort because we want to reset the port number if needed. + rv2 = newURI->SetHostAndPort(NS_ConvertUTF16toUTF8(aDomain)); + if (NS_FAILED(rv2)) { + rv.Throw(rv2); + return; + } + + // Check new domain - must be a superdomain of the current host + // For example, a page from foo.bar.com may set domain to bar.com, + // but not to ar.com, baz.com, or fi.foo.bar.com. + nsAutoCString current, domain; + if (NS_FAILED(uri->GetAsciiHost(current))) + current.Truncate(); + if (NS_FAILED(newURI->GetAsciiHost(domain))) + domain.Truncate(); + + bool ok = current.Equals(domain); + if (current.Length() > domain.Length() && + StringEndsWith(current, domain) && + current.CharAt(current.Length() - domain.Length() - 1) == '.') { + // We're golden if the new domain is the current page's base domain or a + // subdomain of it. + nsCOMPtr<nsIEffectiveTLDService> tldService = + do_GetService(NS_EFFECTIVETLDSERVICE_CONTRACTID); + if (!tldService) { + rv.Throw(NS_ERROR_NOT_AVAILABLE); + return; + } + + nsAutoCString currentBaseDomain; + ok = NS_SUCCEEDED(tldService->GetBaseDomain(uri, 0, currentBaseDomain)); + NS_ASSERTION(StringEndsWith(domain, currentBaseDomain) == + (domain.Length() >= currentBaseDomain.Length()), + "uh-oh! slight optimization wasn't valid somehow!"); + ok = ok && domain.Length() >= currentBaseDomain.Length(); + } + if (!ok) { + // Error: illegal domain + rv.Throw(NS_ERROR_DOM_BAD_DOCUMENT_DOMAIN); + return; + } + + NS_TryToSetImmutable(newURI); + rv = NodePrincipal()->SetDomain(newURI); +} + +nsGenericHTMLElement* +nsHTMLDocument::GetBody() +{ + Element* html = GetHtmlElement(); + if (!html) { + return nullptr; + } + + for (nsIContent* child = html->GetFirstChild(); + child; + child = child->GetNextSibling()) { + if (child->IsHTMLElement(nsGkAtoms::body) || + child->IsHTMLElement(nsGkAtoms::frameset)) { + return static_cast<nsGenericHTMLElement*>(child); + } + } + + return nullptr; +} + +NS_IMETHODIMP +nsHTMLDocument::GetBody(nsIDOMHTMLElement** aBody) +{ + *aBody = nullptr; + + nsIContent *body = GetBody(); + + return body ? CallQueryInterface(body, aBody) : NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::SetBody(nsIDOMHTMLElement* aBody) +{ + nsCOMPtr<nsIContent> newBody = do_QueryInterface(aBody); + MOZ_ASSERT(!newBody || newBody->IsHTMLElement(), + "How could we be an nsIContent but not actually HTML here?"); + ErrorResult rv; + SetBody(static_cast<nsGenericHTMLElement*>(newBody.get()), rv); + return rv.StealNSResult(); +} + +void +nsHTMLDocument::SetBody(nsGenericHTMLElement* newBody, ErrorResult& rv) +{ + nsCOMPtr<Element> root = GetRootElement(); + + // The body element must be either a body tag or a frameset tag. And we must + // have a html root tag, otherwise GetBody will not return the newly set + // body. + if (!newBody || + !newBody->IsAnyOfHTMLElements(nsGkAtoms::body, nsGkAtoms::frameset) || + !root || !root->IsHTMLElement() || + !root->IsHTMLElement(nsGkAtoms::html)) { + rv.Throw(NS_ERROR_DOM_HIERARCHY_REQUEST_ERR); + return; + } + + // Use DOM methods so that we pass through the appropriate security checks. + nsCOMPtr<Element> currentBody = GetBodyElement(); + if (currentBody) { + root->ReplaceChild(*newBody, *currentBody, rv); + } else { + root->AppendChild(*newBody, rv); + } +} + +NS_IMETHODIMP +nsHTMLDocument::GetHead(nsIDOMHTMLHeadElement** aHead) +{ + *aHead = nullptr; + + Element* head = GetHeadElement(); + + return head ? CallQueryInterface(head, aHead) : NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::GetImages(nsIDOMHTMLCollection** aImages) +{ + NS_ADDREF(*aImages = Images()); + return NS_OK; +} + +nsIHTMLCollection* +nsHTMLDocument::Images() +{ + if (!mImages) { + mImages = new nsContentList(this, kNameSpaceID_XHTML, nsGkAtoms::img, nsGkAtoms::img); + } + return mImages; +} + +NS_IMETHODIMP +nsHTMLDocument::GetApplets(nsIDOMHTMLCollection** aApplets) +{ + NS_ADDREF(*aApplets = Applets()); + return NS_OK; +} + +nsIHTMLCollection* +nsHTMLDocument::Applets() +{ + if (!mApplets) { + mApplets = new nsContentList(this, kNameSpaceID_XHTML, nsGkAtoms::applet, nsGkAtoms::applet); + } + return mApplets; +} + +bool +nsHTMLDocument::MatchLinks(nsIContent *aContent, int32_t aNamespaceID, + nsIAtom* aAtom, void* aData) +{ + nsIDocument* doc = aContent->GetUncomposedDoc(); + + if (doc) { + NS_ASSERTION(aContent->IsInUncomposedDoc(), + "This method should never be called on content nodes that " + "are not in a document!"); +#ifdef DEBUG + { + nsCOMPtr<nsIHTMLDocument> htmldoc = + do_QueryInterface(aContent->GetUncomposedDoc()); + NS_ASSERTION(htmldoc, + "Huh, how did this happen? This should only be used with " + "HTML documents!"); + } +#endif + + mozilla::dom::NodeInfo *ni = aContent->NodeInfo(); + + nsIAtom *localName = ni->NameAtom(); + if (ni->NamespaceID() == kNameSpaceID_XHTML && + (localName == nsGkAtoms::a || localName == nsGkAtoms::area)) { + return aContent->HasAttr(kNameSpaceID_None, nsGkAtoms::href); + } + } + + return false; +} + +NS_IMETHODIMP +nsHTMLDocument::GetLinks(nsIDOMHTMLCollection** aLinks) +{ + NS_ADDREF(*aLinks = Links()); + return NS_OK; +} + +nsIHTMLCollection* +nsHTMLDocument::Links() +{ + if (!mLinks) { + mLinks = new nsContentList(this, MatchLinks, nullptr, nullptr); + } + return mLinks; +} + +bool +nsHTMLDocument::MatchAnchors(nsIContent *aContent, int32_t aNamespaceID, + nsIAtom* aAtom, void* aData) +{ + NS_ASSERTION(aContent->IsInUncomposedDoc(), + "This method should never be called on content nodes that " + "are not in a document!"); +#ifdef DEBUG + { + nsCOMPtr<nsIHTMLDocument> htmldoc = + do_QueryInterface(aContent->GetUncomposedDoc()); + NS_ASSERTION(htmldoc, + "Huh, how did this happen? This should only be used with " + "HTML documents!"); + } +#endif + + if (aContent->NodeInfo()->Equals(nsGkAtoms::a, kNameSpaceID_XHTML)) { + return aContent->HasAttr(kNameSpaceID_None, nsGkAtoms::name); + } + + return false; +} + +NS_IMETHODIMP +nsHTMLDocument::GetAnchors(nsIDOMHTMLCollection** aAnchors) +{ + NS_ADDREF(*aAnchors = Anchors()); + return NS_OK; +} + +nsIHTMLCollection* +nsHTMLDocument::Anchors() +{ + if (!mAnchors) { + mAnchors = new nsContentList(this, MatchAnchors, nullptr, nullptr); + } + return mAnchors; +} + +NS_IMETHODIMP +nsHTMLDocument::GetScripts(nsIDOMHTMLCollection** aScripts) +{ + NS_ADDREF(*aScripts = Scripts()); + return NS_OK; +} + +nsIHTMLCollection* +nsHTMLDocument::Scripts() +{ + if (!mScripts) { + mScripts = new nsContentList(this, kNameSpaceID_XHTML, nsGkAtoms::script, nsGkAtoms::script); + } + return mScripts; +} + +NS_IMETHODIMP +nsHTMLDocument::GetCookie(nsAString& aCookie) +{ + ErrorResult rv; + GetCookie(aCookie, rv); + return rv.StealNSResult(); +} + +already_AddRefed<nsIChannel> +nsHTMLDocument::CreateDummyChannelForCookies(nsIURI* aCodebaseURI) +{ + // The cookie service reads the privacy status of the channel we pass to it in + // order to determine which cookie database to query. In some cases we don't + // have a proper channel to hand it to the cookie service though. This + // function creates a dummy channel that is not used to load anything, for the + // sole purpose of handing it to the cookie service. DO NOT USE THIS CHANNEL + // FOR ANY OTHER PURPOSE. + MOZ_ASSERT(!mChannel); + + // The following channel is never openend, so it does not matter what + // securityFlags we pass; let's follow the principle of least privilege. + nsCOMPtr<nsIChannel> channel; + NS_NewChannel(getter_AddRefs(channel), aCodebaseURI, this, + nsILoadInfo::SEC_REQUIRE_SAME_ORIGIN_DATA_IS_BLOCKED, + nsIContentPolicy::TYPE_INVALID); + nsCOMPtr<nsIPrivateBrowsingChannel> pbChannel = + do_QueryInterface(channel); + nsCOMPtr<nsIDocShell> docShell(mDocumentContainer); + nsCOMPtr<nsILoadContext> loadContext = do_QueryInterface(docShell); + if (!pbChannel || !loadContext) { + return nullptr; + } + pbChannel->SetPrivate(loadContext->UsePrivateBrowsing()); + return channel.forget(); +} + +void +nsHTMLDocument::GetCookie(nsAString& aCookie, ErrorResult& rv) +{ + aCookie.Truncate(); // clear current cookie in case service fails; + // no cookie isn't an error condition. + + if (mDisableCookieAccess) { + return; + } + + // If the document's sandboxed origin flag is set, access to read cookies + // is prohibited. + if (mSandboxFlags & SANDBOXED_ORIGIN) { + rv.Throw(NS_ERROR_DOM_SECURITY_ERR); + return; + } + + // not having a cookie service isn't an error + nsCOMPtr<nsICookieService> service = do_GetService(NS_COOKIESERVICE_CONTRACTID); + if (service) { + // Get a URI from the document principal. We use the original + // codebase in case the codebase was changed by SetDomain + nsCOMPtr<nsIURI> codebaseURI; + NodePrincipal()->GetURI(getter_AddRefs(codebaseURI)); + + if (!codebaseURI) { + // Document's principal is not a codebase (may be system), so + // can't set cookies + + return; + } + + nsCOMPtr<nsIChannel> channel(mChannel); + if (!channel) { + channel = CreateDummyChannelForCookies(codebaseURI); + if (!channel) { + return; + } + } + + nsXPIDLCString cookie; + service->GetCookieString(codebaseURI, channel, getter_Copies(cookie)); + // CopyUTF8toUTF16 doesn't handle error + // because it assumes that the input is valid. + nsContentUtils::ConvertStringFromEncoding(NS_LITERAL_CSTRING("UTF-8"), + cookie, aCookie); + } +} + +NS_IMETHODIMP +nsHTMLDocument::SetCookie(const nsAString& aCookie) +{ + ErrorResult rv; + SetCookie(aCookie, rv); + return rv.StealNSResult(); +} + +void +nsHTMLDocument::SetCookie(const nsAString& aCookie, ErrorResult& rv) +{ + if (mDisableCookieAccess) { + return; + } + + // If the document's sandboxed origin flag is set, access to write cookies + // is prohibited. + if (mSandboxFlags & SANDBOXED_ORIGIN) { + rv.Throw(NS_ERROR_DOM_SECURITY_ERR); + return; + } + + // not having a cookie service isn't an error + nsCOMPtr<nsICookieService> service = do_GetService(NS_COOKIESERVICE_CONTRACTID); + if (service && mDocumentURI) { + // The for getting the URI matches nsNavigator::GetCookieEnabled + nsCOMPtr<nsIURI> codebaseURI; + NodePrincipal()->GetURI(getter_AddRefs(codebaseURI)); + + if (!codebaseURI) { + // Document's principal is not a codebase (may be system), so + // can't set cookies + + return; + } + + nsCOMPtr<nsIChannel> channel(mChannel); + if (!channel) { + channel = CreateDummyChannelForCookies(codebaseURI); + if (!channel) { + return; + } + } + + NS_ConvertUTF16toUTF8 cookie(aCookie); + service->SetCookieString(codebaseURI, nullptr, cookie.get(), channel); + } +} + +NS_IMETHODIMP +nsHTMLDocument::Open(const nsAString& aContentTypeOrUrl, + const nsAString& aReplaceOrName, + const nsAString& aFeatures, + JSContext* cx, uint8_t aOptionalArgCount, + nsISupports** aReturn) +{ + // When called with 3 or more arguments, document.open() calls window.open(). + if (aOptionalArgCount > 2) { + ErrorResult rv; + *aReturn = Open(cx, aContentTypeOrUrl, aReplaceOrName, aFeatures, + false, rv).take(); + return rv.StealNSResult(); + } + + nsString type; + if (aOptionalArgCount > 0) { + type = aContentTypeOrUrl; + } else { + type.AssignLiteral("text/html"); + } + nsString replace; + if (aOptionalArgCount > 1) { + replace = aReplaceOrName; + } + ErrorResult rv; + *aReturn = Open(cx, type, replace, rv).take(); + return rv.StealNSResult(); +} + +already_AddRefed<nsPIDOMWindowOuter> +nsHTMLDocument::Open(JSContext* /* unused */, + const nsAString& aURL, + const nsAString& aName, + const nsAString& aFeatures, + bool aReplace, + ErrorResult& rv) +{ + NS_ASSERTION(nsContentUtils::CanCallerAccess(static_cast<nsIDOMHTMLDocument*>(this)), + "XOW should have caught this!"); + + nsCOMPtr<nsPIDOMWindowInner> window = GetInnerWindow(); + if (!window) { + rv.Throw(NS_ERROR_DOM_INVALID_ACCESS_ERR); + return nullptr; + } + nsCOMPtr<nsPIDOMWindowOuter> outer = + nsPIDOMWindowOuter::GetFromCurrentInner(window); + if (!outer) { + rv.Throw(NS_ERROR_NOT_INITIALIZED); + return nullptr; + } + RefPtr<nsGlobalWindow> win = nsGlobalWindow::Cast(outer); + nsCOMPtr<nsPIDOMWindowOuter> newWindow; + // XXXbz We ignore aReplace for now. + rv = win->OpenJS(aURL, aName, aFeatures, getter_AddRefs(newWindow)); + return newWindow.forget(); +} + +already_AddRefed<nsIDocument> +nsHTMLDocument::Open(JSContext* cx, + const nsAString& aType, + const nsAString& aReplace, + ErrorResult& rv) +{ + // Implements the "When called with two arguments (or fewer)" steps here: + // https://html.spec.whatwg.org/multipage/webappapis.html#opening-the-input-stream + + NS_ASSERTION(nsContentUtils::CanCallerAccess(static_cast<nsIDOMHTMLDocument*>(this)), + "XOW should have caught this!"); + if (!IsHTMLDocument() || mDisableDocWrite || !IsMasterDocument()) { + // No calling document.open() on XHTML + rv.Throw(NS_ERROR_DOM_INVALID_STATE_ERR); + return nullptr; + } + + nsAutoCString contentType; + contentType.AssignLiteral("text/html"); + + nsAutoString type; + nsContentUtils::ASCIIToLower(aType, type); + nsAutoCString actualType, dummy; + NS_ParseRequestContentType(NS_ConvertUTF16toUTF8(type), actualType, dummy); + if (!actualType.EqualsLiteral("text/html") && + !type.EqualsLiteral("replace")) { + contentType.AssignLiteral("text/plain"); + } + + // If we already have a parser we ignore the document.open call. + if (mParser || mParserAborted) { + // The WHATWG spec says: "If the document has an active parser that isn't + // a script-created parser, and the insertion point associated with that + // parser's input stream is not undefined (that is, it does point to + // somewhere in the input stream), then the method does nothing. Abort + // these steps and return the Document object on which the method was + // invoked." + // Note that aborting a parser leaves the parser "active" with its + // insertion point "not undefined". We track this using mParserAborted, + // because aborting a parser nulls out mParser. + nsCOMPtr<nsIDocument> ret = this; + return ret.forget(); + } + + // No calling document.open() without a script global object + if (!mScriptGlobalObject) { + nsCOMPtr<nsIDocument> ret = this; + return ret.forget(); + } + + nsPIDOMWindowOuter* outer = GetWindow(); + if (!outer || (GetInnerWindow() != outer->GetCurrentInnerWindow())) { + nsCOMPtr<nsIDocument> ret = this; + return ret.forget(); + } + + // check whether we're in the middle of unload. If so, ignore this call. + nsCOMPtr<nsIDocShell> shell(mDocumentContainer); + if (!shell) { + // We won't be able to create a parser anyway. + nsCOMPtr<nsIDocument> ret = this; + return ret.forget(); + } + + bool inUnload; + shell->GetIsInUnload(&inUnload); + if (inUnload) { + nsCOMPtr<nsIDocument> ret = this; + return ret.forget(); + } + + // Note: We want to use GetEntryDocument here because this document + // should inherit the security information of the document that's opening us, + // (since if it's secure, then it's presumably trusted). + nsCOMPtr<nsIDocument> callerDoc = GetEntryDocument(); + if (!callerDoc) { + // If we're called from C++ or in some other way without an originating + // document we can't do a document.open w/o changing the principal of the + // document to something like about:blank (as that's the only sane thing to + // do when we don't know the origin of this call), and since we can't + // change the principals of a document for security reasons we'll have to + // refuse to go ahead with this call. + + rv.Throw(NS_ERROR_DOM_SECURITY_ERR); + return nullptr; + } + + // Grab a reference to the calling documents security info (if any) + // and URIs as they may be lost in the call to Reset(). + nsCOMPtr<nsISupports> securityInfo = callerDoc->GetSecurityInfo(); + nsCOMPtr<nsIURI> uri = callerDoc->GetDocumentURI(); + nsCOMPtr<nsIURI> baseURI = callerDoc->GetBaseURI(); + nsCOMPtr<nsIPrincipal> callerPrincipal = callerDoc->NodePrincipal(); + nsCOMPtr<nsIChannel> callerChannel = callerDoc->GetChannel(); + + // We're called from script. Make sure the script is from the same + // origin, not just that the caller can access the document. This is + // needed to keep document principals from ever changing, which is + // needed because of the way we use our XOW code, and is a sane + // thing to do anyways. + + bool equals = false; + if (NS_FAILED(callerPrincipal->Equals(NodePrincipal(), &equals)) || + !equals) { + +#ifdef DEBUG + nsCOMPtr<nsIURI> callerDocURI = callerDoc->GetDocumentURI(); + nsCOMPtr<nsIURI> thisURI = nsIDocument::GetDocumentURI(); + printf("nsHTMLDocument::Open callerDoc %s this %s\n", + callerDocURI ? callerDocURI->GetSpecOrDefault().get() : "", + thisURI ? thisURI->GetSpecOrDefault().get() : ""); +#endif + + rv.Throw(NS_ERROR_DOM_SECURITY_ERR); + return nullptr; + } + + // Stop current loads targeted at the window this document is in. + if (mScriptGlobalObject) { + nsCOMPtr<nsIContentViewer> cv; + shell->GetContentViewer(getter_AddRefs(cv)); + + if (cv) { + bool okToUnload; + if (NS_SUCCEEDED(cv->PermitUnload(&okToUnload)) && !okToUnload) { + // We don't want to unload, so stop here, but don't throw an + // exception. + nsCOMPtr<nsIDocument> ret = this; + return ret.forget(); + } + } + + nsCOMPtr<nsIWebNavigation> webnav(do_QueryInterface(shell)); + webnav->Stop(nsIWebNavigation::STOP_NETWORK); + + // The Stop call may have cancelled the onload blocker request or prevented + // it from getting added, so we need to make sure it gets added to the + // document again otherwise the document could have a non-zero onload block + // count without the onload blocker request being in the loadgroup. + EnsureOnloadBlocker(); + } + + // The open occurred after the document finished loading. + // So we reset the document and then reinitialize it. + nsCOMPtr<nsIChannel> channel; + nsCOMPtr<nsILoadGroup> group = do_QueryReferent(mDocumentLoadGroup); + rv = NS_NewChannel(getter_AddRefs(channel), + uri, + callerDoc, + nsILoadInfo::SEC_FORCE_INHERIT_PRINCIPAL, + nsIContentPolicy::TYPE_OTHER, + group); + + if (rv.Failed()) { + return nullptr; + } + + if (callerChannel) { + nsLoadFlags callerLoadFlags; + rv = callerChannel->GetLoadFlags(&callerLoadFlags); + if (rv.Failed()) { + return nullptr; + } + + nsLoadFlags loadFlags; + rv = channel->GetLoadFlags(&loadFlags); + if (rv.Failed()) { + return nullptr; + } + + loadFlags |= callerLoadFlags & nsIRequest::INHIBIT_PERSISTENT_CACHING; + + rv = channel->SetLoadFlags(loadFlags); + if (rv.Failed()) { + return nullptr; + } + + // If the user has allowed mixed content on the rootDoc, then we should propogate it + // down to the new document channel. + bool rootHasSecureConnection = false; + bool allowMixedContent = false; + bool isDocShellRoot = false; + nsresult rvalue = shell->GetAllowMixedContentAndConnectionData(&rootHasSecureConnection, &allowMixedContent, &isDocShellRoot); + if (NS_SUCCEEDED(rvalue) && allowMixedContent && isDocShellRoot) { + shell->SetMixedContentChannel(channel); + } + } + + // Before we reset the doc notify the globalwindow of the change, + // but only if we still have a window (i.e. our window object the + // current inner window in our outer window). + + // Hold onto ourselves on the offchance that we're down to one ref + nsCOMPtr<nsIDocument> kungFuDeathGrip = this; + + if (nsPIDOMWindowInner *window = GetInnerWindow()) { + // Remember the old scope in case the call to SetNewDocument changes it. + nsCOMPtr<nsIScriptGlobalObject> oldScope(do_QueryReferent(mScopeObject)); + +#ifdef DEBUG + bool willReparent = mWillReparent; + mWillReparent = true; + + nsDocument* templateContentsOwner = + static_cast<nsDocument*>(mTemplateContentsOwner.get()); + + if (templateContentsOwner) { + templateContentsOwner->mWillReparent = true; + } +#endif + + // Per spec, we pass false here so that a new Window is created. + rv = window->SetNewDocument(this, nullptr, + /* aForceReuseInnerWindow */ false); + if (rv.Failed()) { + return nullptr; + } + +#ifdef DEBUG + if (templateContentsOwner) { + templateContentsOwner->mWillReparent = willReparent; + } + + mWillReparent = willReparent; +#endif + + // Now make sure we're not flagged as the initial document anymore, now + // that we've had stuff done to us. From now on, if anyone tries to + // document.open() us, they get a new inner window. + SetIsInitialDocument(false); + + nsCOMPtr<nsIScriptGlobalObject> newScope(do_QueryReferent(mScopeObject)); + JS::Rooted<JSObject*> wrapper(cx, GetWrapper()); + if (oldScope && newScope != oldScope && wrapper) { + JSAutoCompartment ac(cx, wrapper); + rv = mozilla::dom::ReparentWrapper(cx, wrapper); + if (rv.Failed()) { + return nullptr; + } + + // Also reparent the template contents owner document + // because its global is set to the same as this document. + if (mTemplateContentsOwner) { + JS::Rooted<JSObject*> contentsOwnerWrapper(cx, + mTemplateContentsOwner->GetWrapper()); + if (contentsOwnerWrapper) { + rv = mozilla::dom::ReparentWrapper(cx, contentsOwnerWrapper); + if (rv.Failed()) { + return nullptr; + } + } + } + } + } + + mDidDocumentOpen = true; + + // Call Reset(), this will now do the full reset + Reset(channel, group); + if (baseURI) { + mDocumentBaseURI = baseURI; + } + + // Store the security info of the caller now that we're done + // resetting the document. + mSecurityInfo = securityInfo; + + mParserAborted = false; + mParser = nsHtml5Module::NewHtml5Parser(); + nsHtml5Module::Initialize(mParser, this, uri, shell, channel); + if (mReferrerPolicySet) { + // CSP may have set the referrer policy, so a speculative parser should + // start with the new referrer policy. + nsHtml5TreeOpExecutor* executor = nullptr; + executor = static_cast<nsHtml5TreeOpExecutor*> (mParser->GetContentSink()); + if (executor && mReferrerPolicySet) { + executor->SetSpeculationReferrerPolicy(static_cast<ReferrerPolicy>(mReferrerPolicy)); + } + } + + // This will be propagated to the parser when someone actually calls write() + SetContentTypeInternal(contentType); + + // Prepare the docshell and the document viewer for the impending + // out of band document.write() + shell->PrepareForNewContentModel(); + + // Now check whether we were opened with a "replace" argument. If + // so, we need to tell the docshell to not create a new history + // entry for this load. Otherwise, make sure that we're doing a normal load, + // not whatever type of load was previously done on this docshell. + shell->SetLoadType(aReplace.LowerCaseEqualsLiteral("replace") ? + LOAD_NORMAL_REPLACE : LOAD_NORMAL); + + nsCOMPtr<nsIContentViewer> cv; + shell->GetContentViewer(getter_AddRefs(cv)); + if (cv) { + cv->LoadStart(this); + } + + // Add a wyciwyg channel request into the document load group + NS_ASSERTION(!mWyciwygChannel, "nsHTMLDocument::Open(): wyciwyg " + "channel already exists!"); + + // In case the editor is listening and will see the new channel + // being added, make sure mWriteLevel is non-zero so that the editor + // knows that document.open/write/close() is being called on this + // document. + ++mWriteLevel; + + CreateAndAddWyciwygChannel(); + + --mWriteLevel; + + SetReadyStateInternal(nsIDocument::READYSTATE_LOADING); + + // After changing everything around, make sure that the principal on the + // document's compartment exactly matches NodePrincipal(). + DebugOnly<JSObject*> wrapper = GetWrapperPreserveColor(); + MOZ_ASSERT_IF(wrapper, + JS_GetCompartmentPrincipals(js::GetObjectCompartment(wrapper)) == + nsJSPrincipals::get(NodePrincipal())); + + return kungFuDeathGrip.forget(); +} + +NS_IMETHODIMP +nsHTMLDocument::Clear() +{ + // This method has been deprecated + return NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::Close() +{ + ErrorResult rv; + Close(rv); + return rv.StealNSResult(); +} + +void +nsHTMLDocument::Close(ErrorResult& rv) +{ + if (!IsHTMLDocument()) { + // No calling document.close() on XHTML! + + rv.Throw(NS_ERROR_DOM_INVALID_STATE_ERR); + return; + } + + if (!mParser || !mParser->IsScriptCreated()) { + return; + } + + ++mWriteLevel; + rv = (static_cast<nsHtml5Parser*>(mParser.get()))->Parse( + EmptyString(), nullptr, GetContentTypeInternal(), true); + --mWriteLevel; + + // Even if that Parse() call failed, do the rest of this method + + // XXX Make sure that all the document.written content is + // reflowed. We should remove this call once we change + // nsHTMLDocument::OpenCommon() so that it completely destroys the + // earlier document's content and frame hierarchy. Right now, it + // re-uses the earlier document's root content object and + // corresponding frame objects. These re-used frame objects think + // that they have already been reflowed, so they drop initial + // reflows. For certain cases of document.written content, like a + // frameset document, the dropping of the initial reflow means + // that we end up in document.close() without appended any reflow + // commands to the reflow queue and, consequently, without adding + // the dummy layout request to the load group. Since the dummy + // layout request is not added to the load group, the onload + // handler of the frameset fires before the frames get reflowed + // and loaded. That is the long explanation for why we need this + // one line of code here! + // XXXbz as far as I can tell this may not be needed anymore; all + // the testcases in bug 57636 pass without this line... Leaving + // it be for now, though. In any case, there's no reason to do + // this if we have no presshell, since in that case none of the + // above about reusing frames applies. + // + // XXXhsivonen keeping this around for bug 577508 / 253951 still :-( + if (GetShell()) { + FlushPendingNotifications(Flush_Layout); + } + + // Removing the wyciwygChannel here is wrong when document.close() is + // called from within the document itself. However, legacy requires the + // channel to be removed here. Otherwise, the load event never fires. + NS_ASSERTION(mWyciwygChannel, "nsHTMLDocument::Close(): Trying to remove " + "nonexistent wyciwyg channel!"); + RemoveWyciwygChannel(); + NS_ASSERTION(!mWyciwygChannel, "nsHTMLDocument::Close(): " + "nsIWyciwygChannel could not be removed!"); +} + +void +nsHTMLDocument::WriteCommon(JSContext *cx, + const Sequence<nsString>& aText, + bool aNewlineTerminate, + mozilla::ErrorResult& rv) +{ + // Fast path the common case + if (aText.Length() == 1) { + rv = WriteCommon(cx, aText[0], aNewlineTerminate); + } else { + // XXXbz it would be nice if we could pass all the strings to the parser + // without having to do all this copying and then ask it to start + // parsing.... + nsString text; + for (uint32_t i = 0; i < aText.Length(); ++i) { + text.Append(aText[i]); + } + rv = WriteCommon(cx, text, aNewlineTerminate); + } +} + +nsresult +nsHTMLDocument::WriteCommon(JSContext *cx, + const nsAString& aText, + bool aNewlineTerminate) +{ + mTooDeepWriteRecursion = + (mWriteLevel > NS_MAX_DOCUMENT_WRITE_DEPTH || mTooDeepWriteRecursion); + NS_ENSURE_STATE(!mTooDeepWriteRecursion); + + if (!IsHTMLDocument() || mDisableDocWrite || !IsMasterDocument()) { + // No calling document.write*() on XHTML! + + return NS_ERROR_DOM_INVALID_STATE_ERR; + } + + if (mParserAborted) { + // Hixie says aborting the parser doesn't undefine the insertion point. + // However, since we null out mParser in that case, we track the + // theoretically defined insertion point using mParserAborted. + return NS_OK; + } + + nsresult rv = NS_OK; + + void *key = GenerateParserKey(); + if (mParser && !mParser->IsInsertionPointDefined()) { + if (mExternalScriptsBeingEvaluated) { + // Instead of implying a call to document.open(), ignore the call. + nsContentUtils::ReportToConsole(nsIScriptError::warningFlag, + NS_LITERAL_CSTRING("DOM Events"), this, + nsContentUtils::eDOM_PROPERTIES, + "DocumentWriteIgnored", + nullptr, 0, + mDocumentURI); + return NS_OK; + } + mParser->Terminate(); + NS_ASSERTION(!mParser, "mParser should have been null'd out"); + } + + if (!mParser) { + if (mExternalScriptsBeingEvaluated) { + // Instead of implying a call to document.open(), ignore the call. + nsContentUtils::ReportToConsole(nsIScriptError::warningFlag, + NS_LITERAL_CSTRING("DOM Events"), this, + nsContentUtils::eDOM_PROPERTIES, + "DocumentWriteIgnored", + nullptr, 0, + mDocumentURI); + return NS_OK; + } + nsCOMPtr<nsISupports> ignored; + rv = Open(NS_LITERAL_STRING("text/html"), EmptyString(), EmptyString(), cx, + 1, getter_AddRefs(ignored)); + + // If Open() fails, or if it didn't create a parser (as it won't + // if the user chose to not discard the current document through + // onbeforeunload), don't write anything. + if (NS_FAILED(rv) || !mParser) { + return rv; + } + MOZ_ASSERT(!JS_IsExceptionPending(cx), + "Open() succeeded but JS exception is pending"); + } + + static NS_NAMED_LITERAL_STRING(new_line, "\n"); + + // Save the data in cache if the write isn't from within the doc + if (mWyciwygChannel && !key) { + if (!aText.IsEmpty()) { + mWyciwygChannel->WriteToCacheEntry(aText); + } + + if (aNewlineTerminate) { + mWyciwygChannel->WriteToCacheEntry(new_line); + } + } + + ++mWriteLevel; + + // This could be done with less code, but for performance reasons it + // makes sense to have the code for two separate Parse() calls here + // since the concatenation of strings costs more than we like. And + // why pay that price when we don't need to? + if (aNewlineTerminate) { + rv = (static_cast<nsHtml5Parser*>(mParser.get()))->Parse( + aText + new_line, key, GetContentTypeInternal(), false); + } else { + rv = (static_cast<nsHtml5Parser*>(mParser.get()))->Parse( + aText, key, GetContentTypeInternal(), false); + } + + --mWriteLevel; + + mTooDeepWriteRecursion = (mWriteLevel != 0 && mTooDeepWriteRecursion); + + return rv; +} + +NS_IMETHODIMP +nsHTMLDocument::Write(const nsAString& aText, JSContext *cx) +{ + return WriteCommon(cx, aText, false); +} + +void +nsHTMLDocument::Write(JSContext* cx, const Sequence<nsString>& aText, + ErrorResult& rv) +{ + WriteCommon(cx, aText, false, rv); +} + +NS_IMETHODIMP +nsHTMLDocument::Writeln(const nsAString& aText, JSContext *cx) +{ + return WriteCommon(cx, aText, true); +} + +void +nsHTMLDocument::Writeln(JSContext* cx, const Sequence<nsString>& aText, + ErrorResult& rv) +{ + WriteCommon(cx, aText, true, rv); +} + +bool +nsHTMLDocument::MatchNameAttribute(nsIContent* aContent, int32_t aNamespaceID, + nsIAtom* aAtom, void* aData) +{ + NS_PRECONDITION(aContent, "Must have content node to work with!"); + nsString* elementName = static_cast<nsString*>(aData); + return + aContent->GetNameSpaceID() == kNameSpaceID_XHTML && + aContent->AttrValueIs(kNameSpaceID_None, nsGkAtoms::name, + *elementName, eCaseMatters); +} + +/* static */ +void* +nsHTMLDocument::UseExistingNameString(nsINode* aRootNode, const nsString* aName) +{ + return const_cast<nsString*>(aName); +} + +NS_IMETHODIMP +nsHTMLDocument::GetElementsByName(const nsAString& aElementName, + nsIDOMNodeList** aReturn) +{ + *aReturn = GetElementsByName(aElementName).take(); + return NS_OK; +} + +void +nsHTMLDocument::AddedForm() +{ + ++mNumForms; +} + +void +nsHTMLDocument::RemovedForm() +{ + --mNumForms; +} + +int32_t +nsHTMLDocument::GetNumFormsSynchronous() +{ + return mNumForms; +} + +NS_IMETHODIMP +nsHTMLDocument::GetAlinkColor(nsAString& aAlinkColor) +{ + aAlinkColor.Truncate(); + + HTMLBodyElement* body = GetBodyElement(); + if (body) { + body->GetALink(aAlinkColor); + } + + return NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::SetAlinkColor(const nsAString& aAlinkColor) +{ + HTMLBodyElement* body = GetBodyElement(); + if (body) { + body->SetALink(aAlinkColor); + } + + return NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::GetLinkColor(nsAString& aLinkColor) +{ + aLinkColor.Truncate(); + + HTMLBodyElement* body = GetBodyElement(); + if (body) { + body->GetLink(aLinkColor); + } + + return NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::SetLinkColor(const nsAString& aLinkColor) +{ + HTMLBodyElement* body = GetBodyElement(); + if (body) { + body->SetLink(aLinkColor); + } + + return NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::GetVlinkColor(nsAString& aVlinkColor) +{ + aVlinkColor.Truncate(); + + HTMLBodyElement* body = GetBodyElement(); + if (body) { + body->GetVLink(aVlinkColor); + } + + return NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::SetVlinkColor(const nsAString& aVlinkColor) +{ + HTMLBodyElement* body = GetBodyElement(); + if (body) { + body->SetVLink(aVlinkColor); + } + + return NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::GetBgColor(nsAString& aBgColor) +{ + aBgColor.Truncate(); + + HTMLBodyElement* body = GetBodyElement(); + if (body) { + body->GetBgColor(aBgColor); + } + + return NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::SetBgColor(const nsAString& aBgColor) +{ + HTMLBodyElement* body = GetBodyElement(); + if (body) { + body->SetBgColor(aBgColor); + } + + return NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::GetFgColor(nsAString& aFgColor) +{ + aFgColor.Truncate(); + + HTMLBodyElement* body = GetBodyElement(); + if (body) { + body->GetText(aFgColor); + } + + return NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::SetFgColor(const nsAString& aFgColor) +{ + HTMLBodyElement* body = GetBodyElement(); + if (body) { + body->SetText(aFgColor); + } + + return NS_OK; +} + + +NS_IMETHODIMP +nsHTMLDocument::GetEmbeds(nsIDOMHTMLCollection** aEmbeds) +{ + NS_ADDREF(*aEmbeds = Embeds()); + return NS_OK; +} + +nsIHTMLCollection* +nsHTMLDocument::Embeds() +{ + if (!mEmbeds) { + mEmbeds = new nsContentList(this, kNameSpaceID_XHTML, nsGkAtoms::embed, nsGkAtoms::embed); + } + return mEmbeds; +} + +NS_IMETHODIMP +nsHTMLDocument::GetSelection(nsISelection** aReturn) +{ + ErrorResult rv; + NS_IF_ADDREF(*aReturn = GetSelection(rv)); + return rv.StealNSResult(); +} + +Selection* +nsHTMLDocument::GetSelection(ErrorResult& aRv) +{ + nsCOMPtr<nsPIDOMWindowInner> window = do_QueryInterface(GetScopeObject()); + if (!window) { + return nullptr; + } + + NS_ASSERTION(window->IsInnerWindow(), "Should have inner window here!"); + if (!window->IsCurrentInnerWindow()) { + return nullptr; + } + + return nsGlobalWindow::Cast(window)->GetSelection(aRv); +} + +NS_IMETHODIMP +nsHTMLDocument::CaptureEvents() +{ + WarnOnceAbout(nsIDocument::eUseOfCaptureEvents); + return NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::ReleaseEvents() +{ + WarnOnceAbout(nsIDocument::eUseOfReleaseEvents); + return NS_OK; +} + +// Mapped to document.embeds for NS4 compatibility +NS_IMETHODIMP +nsHTMLDocument::GetPlugins(nsIDOMHTMLCollection** aPlugins) +{ + *aPlugins = nullptr; + + return GetEmbeds(aPlugins); +} + +nsIHTMLCollection* +nsHTMLDocument::Plugins() +{ + return Embeds(); +} + +nsISupports* +nsHTMLDocument::ResolveName(const nsAString& aName, nsWrapperCache **aCache) +{ + nsIdentifierMapEntry *entry = mIdentifierMap.GetEntry(aName); + if (!entry) { + *aCache = nullptr; + return nullptr; + } + + nsBaseContentList *list = entry->GetNameContentList(); + uint32_t length = list ? list->Length() : 0; + + if (length > 0) { + if (length == 1) { + // Only one element in the list, return the element instead of returning + // the list. + nsIContent *node = list->Item(0); + *aCache = node; + return node; + } + + // The list contains more than one element, return the whole list. + *aCache = list; + return list; + } + + // No named items were found, see if there's one registerd by id for aName. + Element *e = entry->GetIdElement(); + + if (e && nsGenericHTMLElement::ShouldExposeIdAsHTMLDocumentProperty(e)) { + *aCache = e; + return e; + } + + *aCache = nullptr; + return nullptr; +} + +void +nsHTMLDocument::NamedGetter(JSContext* cx, const nsAString& aName, bool& aFound, + JS::MutableHandle<JSObject*> aRetval, + ErrorResult& rv) +{ + nsWrapperCache* cache; + nsISupports* supp = ResolveName(aName, &cache); + if (!supp) { + aFound = false; + aRetval.set(nullptr); + return; + } + + JS::Rooted<JS::Value> val(cx); + if (!dom::WrapObject(cx, supp, cache, nullptr, &val)) { + rv.Throw(NS_ERROR_OUT_OF_MEMORY); + return; + } + aFound = true; + aRetval.set(&val.toObject()); +} + +void +nsHTMLDocument::GetSupportedNames(nsTArray<nsString>& aNames) +{ + for (auto iter = mIdentifierMap.Iter(); !iter.Done(); iter.Next()) { + nsIdentifierMapEntry* entry = iter.Get(); + if (entry->HasNameElement() || + entry->HasIdElementExposedAsHTMLDocumentProperty()) { + aNames.AppendElement(entry->GetKey()); + } + } +} + +//---------------------------- + +// forms related stuff + +NS_IMETHODIMP +nsHTMLDocument::GetForms(nsIDOMHTMLCollection** aForms) +{ + NS_ADDREF(*aForms = nsHTMLDocument::GetForms()); + return NS_OK; +} + +nsContentList* +nsHTMLDocument::GetForms() +{ + if (!mForms) { + mForms = new nsContentList(this, kNameSpaceID_XHTML, nsGkAtoms::form, nsGkAtoms::form); + } + + return mForms; +} + +static bool MatchFormControls(nsIContent* aContent, int32_t aNamespaceID, + nsIAtom* aAtom, void* aData) +{ + return aContent->IsNodeOfType(nsIContent::eHTML_FORM_CONTROL); +} + +nsContentList* +nsHTMLDocument::GetFormControls() +{ + if (!mFormControls) { + mFormControls = new nsContentList(this, MatchFormControls, nullptr, nullptr); + } + + return mFormControls; +} + +nsresult +nsHTMLDocument::CreateAndAddWyciwygChannel(void) +{ + nsresult rv = NS_OK; + nsAutoCString url, originalSpec; + + mDocumentURI->GetSpec(originalSpec); + + // Generate the wyciwyg url + url = NS_LITERAL_CSTRING("wyciwyg://") + + nsPrintfCString("%d", gWyciwygSessionCnt++) + + NS_LITERAL_CSTRING("/") + + originalSpec; + + nsCOMPtr<nsIURI> wcwgURI; + NS_NewURI(getter_AddRefs(wcwgURI), url); + + // Create the nsIWyciwygChannel to store out-of-band + // document.write() script to cache + nsCOMPtr<nsIChannel> channel; + // Create a wyciwyg Channel + rv = NS_NewChannel(getter_AddRefs(channel), + wcwgURI, + NodePrincipal(), + nsILoadInfo::SEC_FORCE_INHERIT_PRINCIPAL, + nsIContentPolicy::TYPE_OTHER); + NS_ENSURE_SUCCESS(rv, rv); + nsCOMPtr<nsILoadInfo> loadInfo = channel->GetLoadInfo(); + loadInfo->SetPrincipalToInherit(NodePrincipal()); + + mWyciwygChannel = do_QueryInterface(channel); + + mWyciwygChannel->SetSecurityInfo(mSecurityInfo); + + // Note: we want to treat this like a "previous document" hint so that, + // e.g. a <meta> tag in the document.write content can override it. + SetDocumentCharacterSetSource(kCharsetFromHintPrevDoc); + mWyciwygChannel->SetCharsetAndSource(kCharsetFromHintPrevDoc, + GetDocumentCharacterSet()); + + // Inherit load flags from the original document's channel + channel->SetLoadFlags(mLoadFlags); + + nsCOMPtr<nsILoadGroup> loadGroup = GetDocumentLoadGroup(); + + // Use the Parent document's loadgroup to trigger load notifications + if (loadGroup && channel) { + rv = channel->SetLoadGroup(loadGroup); + NS_ENSURE_SUCCESS(rv, rv); + + nsLoadFlags loadFlags = 0; + channel->GetLoadFlags(&loadFlags); + loadFlags |= nsIChannel::LOAD_DOCUMENT_URI; + channel->SetLoadFlags(loadFlags); + + channel->SetOriginalURI(wcwgURI); + + rv = loadGroup->AddRequest(mWyciwygChannel, nullptr); + NS_ASSERTION(NS_SUCCEEDED(rv), "Failed to add request to load group."); + } + + return rv; +} + +nsresult +nsHTMLDocument::RemoveWyciwygChannel(void) +{ + nsCOMPtr<nsILoadGroup> loadGroup = GetDocumentLoadGroup(); + + // note there can be a write request without a load group if + // this is a synchronously constructed about:blank document + if (loadGroup && mWyciwygChannel) { + mWyciwygChannel->CloseCacheEntry(NS_OK); + loadGroup->RemoveRequest(mWyciwygChannel, nullptr, NS_OK); + } + + mWyciwygChannel = nullptr; + + return NS_OK; +} + +void * +nsHTMLDocument::GenerateParserKey(void) +{ + if (!mScriptLoader) { + // If we don't have a script loader, then the parser probably isn't parsing + // anything anyway, so just return null. + return nullptr; + } + + // The script loader provides us with the currently executing script element, + // which is guaranteed to be unique per script. + nsIScriptElement* script = mScriptLoader->GetCurrentParserInsertedScript(); + if (script && mParser && mParser->IsScriptCreated()) { + nsCOMPtr<nsIParser> creatorParser = script->GetCreatorParser(); + if (creatorParser != mParser) { + // Make scripts that aren't inserted by the active parser of this document + // participate in the context of the script that document.open()ed + // this document. + return nullptr; + } + } + return script; +} + +NS_IMETHODIMP +nsHTMLDocument::GetDesignMode(nsAString& aDesignMode) +{ + if (HasFlag(NODE_IS_EDITABLE)) { + aDesignMode.AssignLiteral("on"); + } + else { + aDesignMode.AssignLiteral("off"); + } + return NS_OK; +} + +void +nsHTMLDocument::MaybeEditingStateChanged() +{ + if (!mPendingMaybeEditingStateChanged && + mUpdateNestLevel == 0 && (mContentEditableCount > 0) != IsEditingOn()) { + if (nsContentUtils::IsSafeToRunScript()) { + EditingStateChanged(); + } else if (!mInDestructor) { + nsContentUtils::AddScriptRunner( + NewRunnableMethod(this, &nsHTMLDocument::MaybeEditingStateChanged)); + } + } +} + +void +nsHTMLDocument::EndUpdate(nsUpdateType aUpdateType) +{ + const bool reset = !mPendingMaybeEditingStateChanged; + mPendingMaybeEditingStateChanged = true; + nsDocument::EndUpdate(aUpdateType); + if (reset) { + mPendingMaybeEditingStateChanged = false; + } + MaybeEditingStateChanged(); +} + + +// Helper class, used below in ChangeContentEditableCount(). +class DeferredContentEditableCountChangeEvent : public Runnable +{ +public: + DeferredContentEditableCountChangeEvent(nsHTMLDocument *aDoc, + nsIContent *aElement) + : mDoc(aDoc) + , mElement(aElement) + { + } + + NS_IMETHOD Run() override { + if (mElement && mElement->OwnerDoc() == mDoc) { + mDoc->DeferredContentEditableCountChange(mElement); + } + return NS_OK; + } + +private: + RefPtr<nsHTMLDocument> mDoc; + nsCOMPtr<nsIContent> mElement; +}; + +nsresult +nsHTMLDocument::ChangeContentEditableCount(nsIContent *aElement, + int32_t aChange) +{ + NS_ASSERTION(int32_t(mContentEditableCount) + aChange >= 0, + "Trying to decrement too much."); + + mContentEditableCount += aChange; + + nsContentUtils::AddScriptRunner( + new DeferredContentEditableCountChangeEvent(this, aElement)); + + return NS_OK; +} + +void +nsHTMLDocument::DeferredContentEditableCountChange(nsIContent *aElement) +{ + if (mParser || + (mUpdateNestLevel > 0 && (mContentEditableCount > 0) != IsEditingOn())) { + return; + } + + EditingState oldState = mEditingState; + + nsresult rv = EditingStateChanged(); + NS_ENSURE_SUCCESS_VOID(rv); + + if (oldState == mEditingState && mEditingState == eContentEditable) { + // We just changed the contentEditable state of a node, we need to reset + // the spellchecking state of that node. + nsCOMPtr<nsIDOMNode> node = do_QueryInterface(aElement); + if (node) { + nsPIDOMWindowOuter *window = GetWindow(); + if (!window) + return; + + nsIDocShell *docshell = window->GetDocShell(); + if (!docshell) + return; + + nsCOMPtr<nsIEditor> editor; + docshell->GetEditor(getter_AddRefs(editor)); + if (editor) { + RefPtr<nsRange> range = new nsRange(aElement); + rv = range->SelectNode(node); + if (NS_FAILED(rv)) { + // The node might be detached from the document at this point, + // which would cause this call to fail. In this case, we can + // safely ignore the contenteditable count change. + return; + } + + nsCOMPtr<nsIInlineSpellChecker> spellChecker; + rv = editor->GetInlineSpellChecker(false, + getter_AddRefs(spellChecker)); + NS_ENSURE_SUCCESS_VOID(rv); + + if (spellChecker) { + rv = spellChecker->SpellCheckRange(range); + } + } + } + } +} + +HTMLAllCollection* +nsHTMLDocument::All() +{ + if (!mAll) { + mAll = new HTMLAllCollection(this); + } + return mAll; +} + +static void +NotifyEditableStateChange(nsINode *aNode, nsIDocument *aDocument) +{ + for (nsIContent* child = aNode->GetFirstChild(); + child; + child = child->GetNextSibling()) { + if (child->IsElement()) { + child->AsElement()->UpdateState(true); + } + NotifyEditableStateChange(child, aDocument); + } +} + +void +nsHTMLDocument::TearingDownEditor(nsIEditor *aEditor) +{ + if (IsEditingOn()) { + EditingState oldState = mEditingState; + mEditingState = eTearingDown; + + nsCOMPtr<nsIPresShell> presShell = GetShell(); + if (!presShell) + return; + + nsTArray<RefPtr<StyleSheet>> agentSheets; + presShell->GetAgentStyleSheets(agentSheets); + + auto cache = nsLayoutStylesheetCache::For(GetStyleBackendType()); + + agentSheets.RemoveElement(cache->ContentEditableSheet()); + if (oldState == eDesignMode) + agentSheets.RemoveElement(cache->DesignModeSheet()); + + presShell->SetAgentStyleSheets(agentSheets); + + presShell->RestyleForCSSRuleChanges(); + } +} + +nsresult +nsHTMLDocument::TurnEditingOff() +{ + NS_ASSERTION(mEditingState != eOff, "Editing is already off."); + + nsPIDOMWindowOuter *window = GetWindow(); + if (!window) + return NS_ERROR_FAILURE; + + nsIDocShell *docshell = window->GetDocShell(); + if (!docshell) + return NS_ERROR_FAILURE; + + nsCOMPtr<nsIEditingSession> editSession; + nsresult rv = docshell->GetEditingSession(getter_AddRefs(editSession)); + NS_ENSURE_SUCCESS(rv, rv); + + // turn editing off + rv = editSession->TearDownEditorOnWindow(window); + NS_ENSURE_SUCCESS(rv, rv); + + mEditingState = eOff; + + return NS_OK; +} + +static bool HasPresShell(nsPIDOMWindowOuter *aWindow) +{ + nsIDocShell *docShell = aWindow->GetDocShell(); + if (!docShell) + return false; + return docShell->GetPresShell() != nullptr; +} + +nsresult +nsHTMLDocument::SetEditingState(EditingState aState) +{ + mEditingState = aState; + return NS_OK; +} + +nsresult +nsHTMLDocument::EditingStateChanged() +{ + if (mRemovedFromDocShell) { + return NS_OK; + } + + if (mEditingState == eSettingUp || mEditingState == eTearingDown) { + // XXX We shouldn't recurse + return NS_OK; + } + + bool designMode = HasFlag(NODE_IS_EDITABLE); + EditingState newState = designMode ? eDesignMode : + (mContentEditableCount > 0 ? eContentEditable : eOff); + if (mEditingState == newState) { + // No changes in editing mode. + return NS_OK; + } + + if (newState == eOff) { + // Editing is being turned off. + nsAutoScriptBlocker scriptBlocker; + NotifyEditableStateChange(this, this); + return TurnEditingOff(); + } + + // Flush out style changes on our _parent_ document, if any, so that + // our check for a presshell won't get stale information. + if (mParentDocument) { + mParentDocument->FlushPendingNotifications(Flush_Style); + } + + // get editing session, make sure this is a strong reference so the + // window can't get deleted during the rest of this call. + nsCOMPtr<nsPIDOMWindowOuter> window = GetWindow(); + if (!window) + return NS_ERROR_FAILURE; + + nsIDocShell *docshell = window->GetDocShell(); + if (!docshell) + return NS_ERROR_FAILURE; + + nsCOMPtr<nsIEditingSession> editSession; + nsresult rv = docshell->GetEditingSession(getter_AddRefs(editSession)); + NS_ENSURE_SUCCESS(rv, rv); + + nsCOMPtr<nsIEditor> existingEditor; + editSession->GetEditorForWindow(window, getter_AddRefs(existingEditor)); + if (existingEditor) { + // We might already have an editor if it was set up for mail, let's see + // if this is actually the case. +#ifdef DEBUG + nsCOMPtr<nsIHTMLEditor> htmlEditor = do_QueryInterface(existingEditor); + MOZ_ASSERT(htmlEditor, "If we have an editor, it must be an HTML editor"); +#endif + uint32_t flags = 0; + existingEditor->GetFlags(&flags); + if (flags & nsIPlaintextEditor::eEditorMailMask) { + // We already have a mail editor, then we should not attempt to create + // another one. + return NS_OK; + } + } + + if (!HasPresShell(window)) { + // We should not make the window editable or setup its editor. + // It's probably style=display:none. + return NS_OK; + } + + bool makeWindowEditable = mEditingState == eOff; + bool updateState = false; + bool spellRecheckAll = false; + bool putOffToRemoveScriptBlockerUntilModifyingEditingState = false; + nsCOMPtr<nsIEditor> editor; + + { + EditingState oldState = mEditingState; + nsAutoEditingState push(this, eSettingUp); + + nsCOMPtr<nsIPresShell> presShell = GetShell(); + NS_ENSURE_TRUE(presShell, NS_ERROR_FAILURE); + + // Before making this window editable, we need to modify UA style sheet + // because new style may change whether focused element will be focusable + // or not. + nsTArray<RefPtr<StyleSheet>> agentSheets; + rv = presShell->GetAgentStyleSheets(agentSheets); + NS_ENSURE_SUCCESS(rv, rv); + + auto cache = nsLayoutStylesheetCache::For(GetStyleBackendType()); + + StyleSheet* contentEditableSheet = cache->ContentEditableSheet(); + + if (!agentSheets.Contains(contentEditableSheet)) { + agentSheets.AppendElement(contentEditableSheet); + } + + // Should we update the editable state of all the nodes in the document? We + // need to do this when the designMode value changes, as that overrides + // specific states on the elements. + if (designMode) { + // designMode is being turned on (overrides contentEditable). + StyleSheet* designModeSheet = cache->DesignModeSheet(); + if (!agentSheets.Contains(designModeSheet)) { + agentSheets.AppendElement(designModeSheet); + } + + updateState = true; + spellRecheckAll = oldState == eContentEditable; + } + else if (oldState == eDesignMode) { + // designMode is being turned off (contentEditable is still on). + agentSheets.RemoveElement(cache->DesignModeSheet()); + updateState = true; + } + + rv = presShell->SetAgentStyleSheets(agentSheets); + NS_ENSURE_SUCCESS(rv, rv); + + presShell->RestyleForCSSRuleChanges(); + + // Adjust focused element with new style but blur event shouldn't be fired + // until mEditingState is modified with newState. + nsAutoScriptBlocker scriptBlocker; + if (designMode) { + nsCOMPtr<nsPIDOMWindowOuter> focusedWindow; + nsIContent* focusedContent = + nsFocusManager::GetFocusedDescendant(window, false, + getter_AddRefs(focusedWindow)); + if (focusedContent) { + nsIFrame* focusedFrame = focusedContent->GetPrimaryFrame(); + bool clearFocus = focusedFrame ? !focusedFrame->IsFocusable() : + !focusedContent->IsFocusable(); + if (clearFocus) { + nsFocusManager* fm = nsFocusManager::GetFocusManager(); + if (fm) { + fm->ClearFocus(window); + // If we need to dispatch blur event, we should put off after + // modifying mEditingState since blur event handler may change + // designMode state again. + putOffToRemoveScriptBlockerUntilModifyingEditingState = true; + } + } + } + } + + if (makeWindowEditable) { + // Editing is being turned on (through designMode or contentEditable) + // Turn on editor. + // XXX This can cause flushing which can change the editing state, so make + // sure to avoid recursing. + rv = editSession->MakeWindowEditable(window, "html", false, false, + true); + NS_ENSURE_SUCCESS(rv, rv); + } + + // XXX Need to call TearDownEditorOnWindow for all failures. + docshell->GetEditor(getter_AddRefs(editor)); + if (!editor) + return NS_ERROR_FAILURE; + + // If we're entering the design mode, put the selection at the beginning of + // the document for compatibility reasons. + if (designMode && oldState == eOff) { + editor->BeginningOfDocument(); + } + + if (putOffToRemoveScriptBlockerUntilModifyingEditingState) { + nsContentUtils::AddScriptBlocker(); + } + } + + mEditingState = newState; + if (putOffToRemoveScriptBlockerUntilModifyingEditingState) { + nsContentUtils::RemoveScriptBlocker(); + // If mEditingState is overwritten by another call and already disabled + // the editing, we shouldn't keep making window editable. + if (mEditingState == eOff) { + return NS_OK; + } + } + + if (makeWindowEditable) { + // Set the editor to not insert br's on return when in p + // elements by default. + // XXX Do we only want to do this for designMode? + bool unused; + rv = ExecCommand(NS_LITERAL_STRING("insertBrOnReturn"), false, + NS_LITERAL_STRING("false"), &unused); + + if (NS_FAILED(rv)) { + // Editor setup failed. Editing is not on after all. + // XXX Should we reset the editable flag on nodes? + editSession->TearDownEditorOnWindow(window); + mEditingState = eOff; + + return rv; + } + } + + if (updateState) { + nsAutoScriptBlocker scriptBlocker; + NotifyEditableStateChange(this, this); + } + + // Resync the editor's spellcheck state. + if (spellRecheckAll) { + nsCOMPtr<nsISelectionController> selcon; + nsresult rv = editor->GetSelectionController(getter_AddRefs(selcon)); + NS_ENSURE_SUCCESS(rv, rv); + + nsCOMPtr<nsISelection> spellCheckSelection; + rv = selcon->GetSelection(nsISelectionController::SELECTION_SPELLCHECK, + getter_AddRefs(spellCheckSelection)); + if (NS_SUCCEEDED(rv)) { + spellCheckSelection->RemoveAllRanges(); + } + } + editor->SyncRealTimeSpell(); + + return NS_OK; +} + +NS_IMETHODIMP +nsHTMLDocument::SetDesignMode(const nsAString& aDesignMode) +{ + ErrorResult rv; + SetDesignMode(aDesignMode, nsContentUtils::GetCurrentJSContext() + ? Some(nsContentUtils::SubjectPrincipal()) + : Nothing(), rv); + return rv.StealNSResult(); +} + +void +nsHTMLDocument::SetDesignMode(const nsAString& aDesignMode, + nsIPrincipal& aSubjectPrincipal, + ErrorResult& rv) +{ + SetDesignMode(aDesignMode, Some(&aSubjectPrincipal), rv); +} + +void +nsHTMLDocument::SetDesignMode(const nsAString& aDesignMode, + const Maybe<nsIPrincipal*>& aSubjectPrincipal, + ErrorResult& rv) +{ + if (aSubjectPrincipal.isSome() && + !aSubjectPrincipal.value()->Subsumes(NodePrincipal())) { + rv.Throw(NS_ERROR_DOM_PROP_ACCESS_DENIED); + return; + } + bool editableMode = HasFlag(NODE_IS_EDITABLE); + if (aDesignMode.LowerCaseEqualsASCII(editableMode ? "off" : "on")) { + SetEditableFlag(!editableMode); + + rv = EditingStateChanged(); + } +} + +nsresult +nsHTMLDocument::GetMidasCommandManager(nsICommandManager** aCmdMgr) +{ + // initialize return value + NS_ENSURE_ARG_POINTER(aCmdMgr); + + // check if we have it cached + if (mMidasCommandManager) { + NS_ADDREF(*aCmdMgr = mMidasCommandManager); + return NS_OK; + } + + *aCmdMgr = nullptr; + + nsPIDOMWindowOuter *window = GetWindow(); + if (!window) + return NS_ERROR_FAILURE; + + nsIDocShell *docshell = window->GetDocShell(); + if (!docshell) + return NS_ERROR_FAILURE; + + mMidasCommandManager = docshell->GetCommandManager(); + if (!mMidasCommandManager) + return NS_ERROR_FAILURE; + + NS_ADDREF(*aCmdMgr = mMidasCommandManager); + + return NS_OK; +} + + +struct MidasCommand { + const char* incomingCommandString; + const char* internalCommandString; + const char* internalParamString; + bool useNewParam; + bool convertToBoolean; +}; + +static const struct MidasCommand gMidasCommandTable[] = { + { "bold", "cmd_bold", "", true, false }, + { "italic", "cmd_italic", "", true, false }, + { "underline", "cmd_underline", "", true, false }, + { "strikethrough", "cmd_strikethrough", "", true, false }, + { "subscript", "cmd_subscript", "", true, false }, + { "superscript", "cmd_superscript", "", true, false }, + { "cut", "cmd_cut", "", true, false }, + { "copy", "cmd_copy", "", true, false }, + { "paste", "cmd_paste", "", true, false }, + { "delete", "cmd_deleteCharBackward", "", true, false }, + { "forwarddelete", "cmd_deleteCharForward", "", true, false }, + { "selectall", "cmd_selectAll", "", true, false }, + { "undo", "cmd_undo", "", true, false }, + { "redo", "cmd_redo", "", true, false }, + { "indent", "cmd_indent", "", true, false }, + { "outdent", "cmd_outdent", "", true, false }, + { "backcolor", "cmd_highlight", "", false, false }, + { "forecolor", "cmd_fontColor", "", false, false }, + { "hilitecolor", "cmd_highlight", "", false, false }, + { "fontname", "cmd_fontFace", "", false, false }, + { "fontsize", "cmd_fontSize", "", false, false }, + { "increasefontsize", "cmd_increaseFont", "", false, false }, + { "decreasefontsize", "cmd_decreaseFont", "", false, false }, + { "inserthorizontalrule", "cmd_insertHR", "", true, false }, + { "createlink", "cmd_insertLinkNoUI", "", false, false }, + { "insertimage", "cmd_insertImageNoUI", "", false, false }, + { "inserthtml", "cmd_insertHTML", "", false, false }, + { "inserttext", "cmd_insertText", "", false, false }, + { "gethtml", "cmd_getContents", "", false, false }, + { "justifyleft", "cmd_align", "left", true, false }, + { "justifyright", "cmd_align", "right", true, false }, + { "justifycenter", "cmd_align", "center", true, false }, + { "justifyfull", "cmd_align", "justify", true, false }, + { "removeformat", "cmd_removeStyles", "", true, false }, + { "unlink", "cmd_removeLinks", "", true, false }, + { "insertorderedlist", "cmd_ol", "", true, false }, + { "insertunorderedlist", "cmd_ul", "", true, false }, + { "insertparagraph", "cmd_insertParagraph", "", true, false }, + { "insertlinebreak", "cmd_insertLineBreak", "", true, false }, + { "formatblock", "cmd_paragraphState", "", false, false }, + { "heading", "cmd_paragraphState", "", false, false }, + { "styleWithCSS", "cmd_setDocumentUseCSS", "", false, true }, + { "contentReadOnly", "cmd_setDocumentReadOnly", "", false, true }, + { "insertBrOnReturn", "cmd_insertBrOnReturn", "", false, true }, + { "enableObjectResizing", "cmd_enableObjectResizing", "", false, true }, + { "enableInlineTableEditing", "cmd_enableInlineTableEditing", "", false, true }, +#if 0 +// no editor support to remove alignments right now + { "justifynone", "cmd_align", "", true, false }, + +// the following will need special review before being turned on + { "saveas", "cmd_saveAs", "", true, false }, + { "print", "cmd_print", "", true, false }, +#endif + { nullptr, nullptr, nullptr, false, false } +}; + +#define MidasCommandCount ((sizeof(gMidasCommandTable) / sizeof(struct MidasCommand)) - 1) + +static const char* const gBlocks[] = { + "ADDRESS", + "BLOCKQUOTE", + "DD", + "DIV", + "DL", + "DT", + "H1", + "H2", + "H3", + "H4", + "H5", + "H6", + "P", + "PRE" +}; + +static bool +ConvertToMidasInternalCommandInner(const nsAString& inCommandID, + const nsAString& inParam, + nsACString& outCommandID, + nsACString& outParam, + bool& outIsBoolean, + bool& outBooleanValue, + bool aIgnoreParams) +{ + NS_ConvertUTF16toUTF8 convertedCommandID(inCommandID); + + // Hack to support old boolean commands that were backwards (see bug 301490). + bool invertBool = false; + if (convertedCommandID.LowerCaseEqualsLiteral("usecss")) { + convertedCommandID.AssignLiteral("styleWithCSS"); + invertBool = true; + } else if (convertedCommandID.LowerCaseEqualsLiteral("readonly")) { + convertedCommandID.AssignLiteral("contentReadOnly"); + invertBool = true; + } + + uint32_t i; + bool found = false; + for (i = 0; i < MidasCommandCount; ++i) { + if (convertedCommandID.Equals(gMidasCommandTable[i].incomingCommandString, + nsCaseInsensitiveCStringComparator())) { + found = true; + break; + } + } + + if (!found) { + // reset results if the command is not found in our table + outCommandID.SetLength(0); + outParam.SetLength(0); + outIsBoolean = false; + return false; + } + + // set outCommandID (what we use internally) + outCommandID.Assign(gMidasCommandTable[i].internalCommandString); + + // set outParam & outIsBoolean based on flags from the table + outIsBoolean = gMidasCommandTable[i].convertToBoolean; + + if (aIgnoreParams) { + // No further work to do + return true; + } + + if (gMidasCommandTable[i].useNewParam) { + // Just have to copy it, no checking + outParam.Assign(gMidasCommandTable[i].internalParamString); + return true; + } + + // handle checking of param passed in + if (outIsBoolean) { + // If this is a boolean value and it's not explicitly false (e.g. no value) + // we default to "true". For old backwards commands we invert the check (see + // bug 301490). + if (invertBool) { + outBooleanValue = inParam.LowerCaseEqualsLiteral("false"); + } else { + outBooleanValue = !inParam.LowerCaseEqualsLiteral("false"); + } + outParam.Truncate(); + + return true; + } + + // String parameter -- see if we need to convert it (necessary for + // cmd_paragraphState and cmd_fontSize) + if (outCommandID.EqualsLiteral("cmd_paragraphState")) { + const char16_t* start = inParam.BeginReading(); + const char16_t* end = inParam.EndReading(); + if (start != end && *start == '<' && *(end - 1) == '>') { + ++start; + --end; + } + + NS_ConvertUTF16toUTF8 convertedParam(Substring(start, end)); + uint32_t j; + for (j = 0; j < ArrayLength(gBlocks); ++j) { + if (convertedParam.Equals(gBlocks[j], + nsCaseInsensitiveCStringComparator())) { + outParam.Assign(gBlocks[j]); + break; + } + } + + if (j == ArrayLength(gBlocks)) { + outParam.Truncate(); + } + } else if (outCommandID.EqualsLiteral("cmd_fontSize")) { + // Per editing spec as of April 23, 2012, we need to reject the value if + // it's not a valid floating-point number surrounded by optional whitespace. + // Otherwise, we parse it as a legacy font size. For now, we just parse as + // a legacy font size regardless (matching WebKit) -- bug 747879. + outParam.Truncate(); + int32_t size = nsContentUtils::ParseLegacyFontSize(inParam); + if (size) { + outParam.AppendInt(size); + } + } else { + CopyUTF16toUTF8(inParam, outParam); + } + + return true; +} + +static bool +ConvertToMidasInternalCommand(const nsAString & inCommandID, + const nsAString & inParam, + nsACString& outCommandID, + nsACString& outParam, + bool& outIsBoolean, + bool& outBooleanValue) +{ + return ConvertToMidasInternalCommandInner(inCommandID, inParam, outCommandID, + outParam, outIsBoolean, + outBooleanValue, false); +} + +static bool +ConvertToMidasInternalCommand(const nsAString & inCommandID, + nsACString& outCommandID) +{ + nsAutoCString dummyCString; + nsAutoString dummyString; + bool dummyBool; + return ConvertToMidasInternalCommandInner(inCommandID, dummyString, + outCommandID, dummyCString, + dummyBool, dummyBool, true); +} + +/* TODO: don't let this call do anything if the page is not done loading */ +NS_IMETHODIMP +nsHTMLDocument::ExecCommand(const nsAString& commandID, + bool doShowUI, + const nsAString& value, + bool* _retval) +{ + ErrorResult rv; + *_retval = ExecCommand(commandID, doShowUI, value, rv); + return rv.StealNSResult(); +} + +bool +nsHTMLDocument::ExecCommand(const nsAString& commandID, + bool doShowUI, + const nsAString& value, + ErrorResult& rv) +{ + // for optional parameters see dom/src/base/nsHistory.cpp: HistoryImpl::Go() + // this might add some ugly JS dependencies? + + nsAutoCString cmdToDispatch, paramStr; + bool isBool, boolVal; + if (!ConvertToMidasInternalCommand(commandID, value, + cmdToDispatch, paramStr, + isBool, boolVal)) { + return false; + } + + bool isCutCopy = (commandID.LowerCaseEqualsLiteral("cut") || + commandID.LowerCaseEqualsLiteral("copy")); + + // if editing is not on, bail + if (!isCutCopy && !IsEditingOnAfterFlush()) { + return false; + } + + // if they are requesting UI from us, let's fail since we have no UI + if (doShowUI) { + return false; + } + + // special case for cut & copy + // cut & copy are allowed in non editable documents + if (isCutCopy) { + if (!nsContentUtils::IsCutCopyAllowed()) { + // We have rejected the event due to it not being performed in an + // input-driven context therefore, we report the error to the console. + nsContentUtils::ReportToConsole(nsIScriptError::warningFlag, + NS_LITERAL_CSTRING("DOM"), this, + nsContentUtils::eDOM_PROPERTIES, + "ExecCommandCutCopyDeniedNotInputDriven"); + return false; + } + + // For cut & copy commands, we need the behaviour from nsWindowRoot::GetControllers + // which is to look at the focused element, and defer to a focused textbox's controller + // The code past taken by other commands in ExecCommand always uses the window directly, + // rather than deferring to the textbox, which is desireable for most editor commands, + // but not 'cut' and 'copy' (as those should allow copying out of embedded editors). + // This behaviour is invoked if we call DoCommand directly on the docShell. + nsCOMPtr<nsIDocShell> docShell(mDocumentContainer); + if (docShell) { + nsresult res = docShell->DoCommand(cmdToDispatch.get()); + return NS_SUCCEEDED(res); + } + return false; + } + + if (commandID.LowerCaseEqualsLiteral("gethtml")) { + rv.Throw(NS_ERROR_FAILURE); + return false; + } + + bool restricted = commandID.LowerCaseEqualsLiteral("paste"); + if (restricted && !nsContentUtils::IsCallerChrome()) { + return false; + } + + // get command manager and dispatch command to our window if it's acceptable + nsCOMPtr<nsICommandManager> cmdMgr; + GetMidasCommandManager(getter_AddRefs(cmdMgr)); + if (!cmdMgr) { + rv.Throw(NS_ERROR_FAILURE); + return false; + } + + nsPIDOMWindowOuter* window = GetWindow(); + if (!window) { + rv.Throw(NS_ERROR_FAILURE); + return false; + } + + if ((cmdToDispatch.EqualsLiteral("cmd_fontSize") || + cmdToDispatch.EqualsLiteral("cmd_insertImageNoUI") || + cmdToDispatch.EqualsLiteral("cmd_insertLinkNoUI") || + cmdToDispatch.EqualsLiteral("cmd_paragraphState")) && + paramStr.IsEmpty()) { + // Invalid value, return false + return false; + } + + // Return false for disabled commands (bug 760052) + bool enabled = false; + cmdMgr->IsCommandEnabled(cmdToDispatch.get(), window, &enabled); + if (!enabled) { + return false; + } + + if (!isBool && paramStr.IsEmpty()) { + rv = cmdMgr->DoCommand(cmdToDispatch.get(), nullptr, window); + } else { + // we have a command that requires a parameter, create params + nsCOMPtr<nsICommandParams> cmdParams = do_CreateInstance( + NS_COMMAND_PARAMS_CONTRACTID); + if (!cmdParams) { + rv.Throw(NS_ERROR_OUT_OF_MEMORY); + return false; + } + + if (isBool) { + rv = cmdParams->SetBooleanValue("state_attribute", boolVal); + } else if (cmdToDispatch.EqualsLiteral("cmd_fontFace")) { + rv = cmdParams->SetStringValue("state_attribute", value); + } else if (cmdToDispatch.EqualsLiteral("cmd_insertHTML") || + cmdToDispatch.EqualsLiteral("cmd_insertText")) { + rv = cmdParams->SetStringValue("state_data", value); + } else { + rv = cmdParams->SetCStringValue("state_attribute", paramStr.get()); + } + if (rv.Failed()) { + return false; + } + rv = cmdMgr->DoCommand(cmdToDispatch.get(), cmdParams, window); + } + + return !rv.Failed(); +} + +NS_IMETHODIMP +nsHTMLDocument::QueryCommandEnabled(const nsAString& commandID, + bool* _retval) +{ + ErrorResult rv; + *_retval = QueryCommandEnabled(commandID, rv); + return rv.StealNSResult(); +} + +bool +nsHTMLDocument::QueryCommandEnabled(const nsAString& commandID, ErrorResult& rv) +{ + nsAutoCString cmdToDispatch; + if (!ConvertToMidasInternalCommand(commandID, cmdToDispatch)) { + return false; + } + + // cut & copy are always allowed + bool isCutCopy = commandID.LowerCaseEqualsLiteral("cut") || + commandID.LowerCaseEqualsLiteral("copy"); + if (isCutCopy) { + return nsContentUtils::IsCutCopyAllowed(); + } + + // Report false for restricted commands + bool restricted = commandID.LowerCaseEqualsLiteral("paste"); + if (restricted && !nsContentUtils::IsCallerChrome()) { + return false; + } + + // if editing is not on, bail + if (!IsEditingOnAfterFlush()) { + return false; + } + + // get command manager and dispatch command to our window if it's acceptable + nsCOMPtr<nsICommandManager> cmdMgr; + GetMidasCommandManager(getter_AddRefs(cmdMgr)); + if (!cmdMgr) { + rv.Throw(NS_ERROR_FAILURE); + return false; + } + + nsPIDOMWindowOuter* window = GetWindow(); + if (!window) { + rv.Throw(NS_ERROR_FAILURE); + return false; + } + + bool retval; + rv = cmdMgr->IsCommandEnabled(cmdToDispatch.get(), window, &retval); + return retval; +} + +NS_IMETHODIMP +nsHTMLDocument::QueryCommandIndeterm(const nsAString & commandID, + bool *_retval) +{ + ErrorResult rv; + *_retval = QueryCommandIndeterm(commandID, rv); + return rv.StealNSResult(); +} + +bool +nsHTMLDocument::QueryCommandIndeterm(const nsAString& commandID, ErrorResult& rv) +{ + nsAutoCString cmdToDispatch; + if (!ConvertToMidasInternalCommand(commandID, cmdToDispatch)) { + return false; + } + + // if editing is not on, bail + if (!IsEditingOnAfterFlush()) { + return false; + } + + // get command manager and dispatch command to our window if it's acceptable + nsCOMPtr<nsICommandManager> cmdMgr; + GetMidasCommandManager(getter_AddRefs(cmdMgr)); + if (!cmdMgr) { + rv.Throw(NS_ERROR_FAILURE); + return false; + } + + nsPIDOMWindowOuter* window = GetWindow(); + if (!window) { + rv.Throw(NS_ERROR_FAILURE); + return false; + } + + nsresult res; + nsCOMPtr<nsICommandParams> cmdParams = do_CreateInstance( + NS_COMMAND_PARAMS_CONTRACTID, &res); + if (NS_FAILED(res)) { + rv.Throw(res); + return false; + } + + rv = cmdMgr->GetCommandState(cmdToDispatch.get(), window, cmdParams); + if (rv.Failed()) { + return false; + } + + // If command does not have a state_mixed value, this call fails and sets + // retval to false. This is fine -- we want to return false in that case + // anyway (bug 738385), so we just don't throw regardless. + bool retval = false; + cmdParams->GetBooleanValue("state_mixed", &retval); + return retval; +} + +NS_IMETHODIMP +nsHTMLDocument::QueryCommandState(const nsAString & commandID, bool *_retval) +{ + ErrorResult rv; + *_retval = QueryCommandState(commandID, rv); + return rv.StealNSResult(); +} + +bool +nsHTMLDocument::QueryCommandState(const nsAString& commandID, ErrorResult& rv) +{ + nsAutoCString cmdToDispatch, paramToCheck; + bool dummy, dummy2; + if (!ConvertToMidasInternalCommand(commandID, commandID, + cmdToDispatch, paramToCheck, + dummy, dummy2)) { + return false; + } + + // if editing is not on, bail + if (!IsEditingOnAfterFlush()) { + return false; + } + + // get command manager and dispatch command to our window if it's acceptable + nsCOMPtr<nsICommandManager> cmdMgr; + GetMidasCommandManager(getter_AddRefs(cmdMgr)); + if (!cmdMgr) { + rv.Throw(NS_ERROR_FAILURE); + return false; + } + + nsPIDOMWindowOuter* window = GetWindow(); + if (!window) { + rv.Throw(NS_ERROR_FAILURE); + return false; + } + + if (commandID.LowerCaseEqualsLiteral("usecss")) { + // Per spec, state is supported for styleWithCSS but not useCSS, so we just + // return false always. + return false; + } + + nsCOMPtr<nsICommandParams> cmdParams = do_CreateInstance( + NS_COMMAND_PARAMS_CONTRACTID); + if (!cmdParams) { + rv.Throw(NS_ERROR_OUT_OF_MEMORY); + return false; + } + + rv = cmdMgr->GetCommandState(cmdToDispatch.get(), window, cmdParams); + if (rv.Failed()) { + return false; + } + + // handle alignment as a special case (possibly other commands too?) + // Alignment is special because the external api is individual + // commands but internally we use cmd_align with different + // parameters. When getting the state of this command, we need to + // return the boolean for this particular alignment rather than the + // string of 'which alignment is this?' + if (cmdToDispatch.EqualsLiteral("cmd_align")) { + char * actualAlignmentType = nullptr; + rv = cmdParams->GetCStringValue("state_attribute", &actualAlignmentType); + bool retval = false; + if (!rv.Failed() && actualAlignmentType && actualAlignmentType[0]) { + retval = paramToCheck.Equals(actualAlignmentType); + } + if (actualAlignmentType) { + free(actualAlignmentType); + } + return retval; + } + + // If command does not have a state_all value, this call fails and sets + // retval to false. This is fine -- we want to return false in that case + // anyway (bug 738385), so we just succeed and return false regardless. + bool retval = false; + cmdParams->GetBooleanValue("state_all", &retval); + return retval; +} + +NS_IMETHODIMP +nsHTMLDocument::QueryCommandSupported(const nsAString & commandID, + bool *_retval) +{ + *_retval = QueryCommandSupported(commandID); + return NS_OK; +} + +bool +nsHTMLDocument::QueryCommandSupported(const nsAString& commandID) +{ + // Gecko technically supports all the clipboard commands including + // cut/copy/paste, but non-privileged content will be unable to call + // paste, and depending on the pref "dom.allow_cut_copy", cut and copy + // may also be disallowed to be called from non-privileged content. + // For that reason, we report the support status of corresponding + // command accordingly. + if (!nsContentUtils::IsCallerChrome()) { + if (commandID.LowerCaseEqualsLiteral("paste")) { + return false; + } + if (nsContentUtils::IsCutCopyRestricted()) { + if (commandID.LowerCaseEqualsLiteral("cut") || + commandID.LowerCaseEqualsLiteral("copy")) { + return false; + } + } + } + + // commandID is supported if it can be converted to a Midas command + nsAutoCString cmdToDispatch; + return ConvertToMidasInternalCommand(commandID, cmdToDispatch); +} + +NS_IMETHODIMP +nsHTMLDocument::QueryCommandValue(const nsAString & commandID, + nsAString &_retval) +{ + ErrorResult rv; + QueryCommandValue(commandID, _retval, rv); + return rv.StealNSResult(); +} + +void +nsHTMLDocument::QueryCommandValue(const nsAString& commandID, + nsAString& aValue, + ErrorResult& rv) +{ + aValue.Truncate(); + + nsAutoCString cmdToDispatch, paramStr; + if (!ConvertToMidasInternalCommand(commandID, cmdToDispatch)) { + // Return empty string + return; + } + + // if editing is not on, bail + if (!IsEditingOnAfterFlush()) { + return; + } + + // get command manager and dispatch command to our window if it's acceptable + nsCOMPtr<nsICommandManager> cmdMgr; + GetMidasCommandManager(getter_AddRefs(cmdMgr)); + if (!cmdMgr) { + rv.Throw(NS_ERROR_FAILURE); + return; + } + + nsPIDOMWindowOuter* window = GetWindow(); + if (!window) { + rv.Throw(NS_ERROR_FAILURE); + return; + } + + // create params + nsCOMPtr<nsICommandParams> cmdParams = do_CreateInstance( + NS_COMMAND_PARAMS_CONTRACTID); + if (!cmdParams) { + rv.Throw(NS_ERROR_OUT_OF_MEMORY); + return; + } + + // this is a special command since we are calling DoCommand rather than + // GetCommandState like the other commands + if (cmdToDispatch.EqualsLiteral("cmd_getContents")) { + rv = cmdParams->SetBooleanValue("selection_only", true); + if (rv.Failed()) { + return; + } + rv = cmdParams->SetCStringValue("format", "text/html"); + if (rv.Failed()) { + return; + } + rv = cmdMgr->DoCommand(cmdToDispatch.get(), cmdParams, window); + if (rv.Failed()) { + return; + } + rv = cmdParams->GetStringValue("result", aValue); + return; + } + + rv = cmdParams->SetCStringValue("state_attribute", paramStr.get()); + if (rv.Failed()) { + return; + } + + rv = cmdMgr->GetCommandState(cmdToDispatch.get(), window, cmdParams); + if (rv.Failed()) { + return; + } + + // If command does not have a state_attribute value, this call fails, and + // aValue will wind up being the empty string. This is fine -- we want to + // return "" in that case anyway (bug 738385), so we just return NS_OK + // regardless. + nsXPIDLCString cStringResult; + cmdParams->GetCStringValue("state_attribute", + getter_Copies(cStringResult)); + CopyUTF8toUTF16(cStringResult, aValue); +} + +nsresult +nsHTMLDocument::Clone(mozilla::dom::NodeInfo *aNodeInfo, nsINode **aResult) const +{ + NS_ASSERTION(aNodeInfo->NodeInfoManager() == mNodeInfoManager, + "Can't import this document into another document!"); + + RefPtr<nsHTMLDocument> clone = new nsHTMLDocument(); + nsresult rv = CloneDocHelper(clone.get()); + NS_ENSURE_SUCCESS(rv, rv); + + // State from nsHTMLDocument + clone->mLoadFlags = mLoadFlags; + + return CallQueryInterface(clone.get(), aResult); +} + +bool +nsHTMLDocument::IsEditingOnAfterFlush() +{ + nsIDocument* doc = GetParentDocument(); + if (doc) { + // Make sure frames are up to date, since that can affect whether + // we're editable. + doc->FlushPendingNotifications(Flush_Frames); + } + + return IsEditingOn(); +} + +void +nsHTMLDocument::RemovedFromDocShell() +{ + mEditingState = eOff; + nsDocument::RemovedFromDocShell(); +} + +/* virtual */ void +nsHTMLDocument::DocAddSizeOfExcludingThis(nsWindowSizes* aWindowSizes) const +{ + nsDocument::DocAddSizeOfExcludingThis(aWindowSizes); + + // Measurement of the following members may be added later if DMD finds it is + // worthwhile: + // - mImages + // - mApplets + // - mEmbeds + // - mLinks + // - mAnchors + // - mScripts + // - mForms + // - mFormControls + // - mWyciwygChannel + // - mMidasCommandManager +} + +bool +nsHTMLDocument::WillIgnoreCharsetOverride() +{ + if (mType != eHTML) { + MOZ_ASSERT(mType == eXHTML); + return true; + } + if (mCharacterSetSource == kCharsetFromByteOrderMark) { + return true; + } + if (!EncodingUtils::IsAsciiCompatible(mCharacterSet)) { + return true; + } + nsCOMPtr<nsIWyciwygChannel> wyciwyg = do_QueryInterface(mChannel); + if (wyciwyg) { + return true; + } + nsIURI* uri = GetOriginalURI(); + if (uri) { + bool schemeIs = false; + uri->SchemeIs("about", &schemeIs); + if (schemeIs) { + return true; + } + bool isResource; + nsresult rv = NS_URIChainHasFlags(uri, + nsIProtocolHandler::URI_IS_UI_RESOURCE, + &isResource); + if (NS_FAILED(rv) || isResource) { + return true; + } + } + return false; +} |