summaryrefslogtreecommitdiffstats
path: root/dom/ipc/PTabContext.ipdlh
diff options
context:
space:
mode:
Diffstat (limited to 'dom/ipc/PTabContext.ipdlh')
-rw-r--r--dom/ipc/PTabContext.ipdlh84
1 files changed, 84 insertions, 0 deletions
diff --git a/dom/ipc/PTabContext.ipdlh b/dom/ipc/PTabContext.ipdlh
new file mode 100644
index 000000000..507ef59d9
--- /dev/null
+++ b/dom/ipc/PTabContext.ipdlh
@@ -0,0 +1,84 @@
+/* -*- Mode: C++; c-basic-offset: 4; indent-tabs-mode: nil; tab-width: 8 -*- */
+/* vim: set sw=4 ts=8 et tw=80 ft=cpp : */
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+
+include protocol PBrowser;
+include PBrowserOrId;
+
+using UIStateChangeType from "nsPIDOMWindow.h";
+using mozilla::DocShellOriginAttributes from "mozilla/ipc/BackgroundUtils.h";
+
+namespace mozilla {
+namespace dom {
+
+// An IPCTabContext which corresponds to a PBrowser opened by a child when it
+// receives window.open().
+//
+// If isMozBrowserElement is false, this PopupIPCTabContext is either a
+// <xul:browser> or an app frame. The frame's app-id and app-frame-owner-app-id
+// will be equal to the opener's values. For a <xul:browser>, those app IDs
+// will be NO_APP_ID.
+//
+// If isMozBrowserElement is true, the frame's browserFrameOwnerAppId will be
+// equal to the opener's app-id.
+//
+// It's an error to set isMozBrowserElement == false if opener is a mozbrowser
+// element. Such a PopupIPCTabContext should be rejected by code which receives
+// it.
+struct PopupIPCTabContext
+{
+ PBrowserOrId opener;
+ bool isMozBrowserElement;
+};
+
+// An IPCTabContext which corresponds to an app, browser, or normal frame.
+struct FrameIPCTabContext
+{
+ // The originAttributes dictionary.
+ DocShellOriginAttributes originAttributes;
+
+ // The ID of the app containing this app/browser frame, if applicable.
+ uint32_t frameOwnerAppId;
+
+ // Whether this is a mozbrowser frame. <iframe mozbrowser mozapp> and
+ // <xul:browser> are not considered to be mozbrowser frames.
+ bool isMozBrowserElement;
+
+ // Whether this TabContext should work in prerender mode.
+ bool isPrerendered;
+
+ // The requested presentation URL.
+ // This value would be empty if the TabContext isn't created for
+ // presented content.
+ nsString presentationURL;
+
+ // Keyboard indicator state inherited from the parent.
+ UIStateChangeType showAccelerators;
+ UIStateChangeType showFocusRings;
+};
+
+// XXXcatalinb: This is only used by ServiceWorkerClients::OpenWindow.
+// Because service workers don't have an associated TabChild
+// we can't satisfy the security constraints on b2g. As such, the parent
+// process will accept this tab context only on desktop.
+struct UnsafeIPCTabContext
+{ };
+
+// IPCTabContext is an analog to mozilla::dom::TabContext. Both specify an
+// iframe/PBrowser's own and containing app-ids and tell you whether the
+// iframe/PBrowser is a browser frame. But only IPCTabContext is allowed to
+// travel over IPC.
+//
+// We need IPCTabContext (specifically, PopupIPCTabContext) to prevent a
+// privilege escalation attack by a compromised child process.
+union IPCTabContext
+{
+ PopupIPCTabContext;
+ FrameIPCTabContext;
+ UnsafeIPCTabContext;
+};
+
+}
+}