ios/chrome/browser/passwords/resources/password_controller.js - chromium/src - Git at Google

 // Copyright 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.

 // This file adheres to closure-compiler conventions in order to enable
 // compilation with ADVANCED_OPTIMIZATIONS. See http://goo.gl/FwOgy
 //
 // Installs password management functions on the |__gCrWeb| object.
 //
 // Finds all password forms in the current document and extracts
 // their attributes and elements using the same logic as
 // third_party/WebKit/Source/WebCore/html/HTMLFormElement.cpp
 //
 // Returns a JSON string representing an array of objects,
 // where each object represents a password form with the discovered
 // elements and their values.
 //
 // The search for password form fields follows the same algorithm
 // as the WebKit implementation, see http://goo.gl/4hwh6

 // Only install the password management functions once.
 if (__gCrWeb && !__gCrWeb['fillPasswordForm']) {

   /**
    * Finds all password forms in the window and returns form data as a JSON
    * string.
    * @return {string} Form data as a JSON string.
    */
   __gCrWeb['findPasswordForms'] = function() {
     var formDataList = [];
     if (hasPasswordField_(window)) {
       __gCrWeb.getPasswordFormDataList(formDataList, window);
     }
     return __gCrWeb.stringify(formDataList);
   };

   /** Returns true if the supplied window or any frames inside contain an input
    * field of type 'password'.
    * @private
    */
   var hasPasswordField_ = function(win) {
     var doc = win.document;

     // We may will not be allowed to read the 'document' property from a frame
     // that is in a different domain.
     if (!doc) {
       return false;
     }

     if (doc.querySelector('input[type=password]')) {
       return true;
     }

     return getSameOriginFrames_(win).some(hasPasswordField_);
   };

   /**
    * Returns the contentWindow of all iframes that are from the the same origin
    * as the containing window.
    * @param {Window} win The window in which to look for frames.
    * @return {Array.<Window>} Array of the same-origin frames found.
    */
   var getSameOriginFrames_ = function(win) {
     var frames = win.document.getElementsByTagName("iframe");
     var result = [];
     for (var i = 0; i < frames.length; i++) {
       if (!frames[i].src ||
           __gCrWeb.common.isSameOrigin(win.location.href, frames[i].src)) {
         result.push(frames[i].contentWindow);
       }
     }
     return result;
   };

   /**
    * Returns a canonical action for |formElement|. It works the same as upstream
    * function GetCanonicalActionForForm.
    * @param {Form} formElement.
    * @return {string} Canonical action.
    */
   var getCanonicalActionForForm_ = function(formElement) {
     var raw_action = formElement.getAttribute('action') || "";
     var absolute_url = __gCrWeb.common.absoluteURL(
           formElement.ownerDocument, raw_action);
     return __gCrWeb.common.removeQueryAndReferenceFromURL(absolute_url);
   };

   /**
    * If |form| has no submit elements and exactly 1 button that button
    * is assumed to be a submit button. This function adds onSubmitButtonClick_
    * as a handler for touchend event of this button. Touchend event is used as
    * a proxy for onclick event because onclick handling might be prevented by
    * the site JavaScript.
    */
   var addSubmitButtonTouchEndHandler_ = function(form) {
     if (form.querySelector('input[type=submit]'))
       return;
     // Try to find buttons of type submit at first.
     var buttons = form.querySelectorAll('button[type="submit"]');
     if (buttons.length == 0) {
       // Try to check all buttons. If there is only one button, assume that this
       // is the submit button.
       buttons = form.querySelectorAll('button');
       if (buttons.length != 1)
         return;
     }
     for (var i = 0; i < buttons.length; ++i)
       buttons[0].addEventListener('touchend', onSubmitButtonTouchEnd_);
    };

    /**
     * Click handler for the submit button. It sends to the host
     * form.submitButtonClick command.
     */
    var onSubmitButtonTouchEnd_ = function(evt) {
        var form = evt.currentTarget.form;
        var formData = __gCrWeb.getPasswordFormData(form);
        if (!formData)
          return;
        formData["command"] = 'passwordForm.submitButtonClick';
        __gCrWeb.message.invokeOnHost(formData);
     };

   /**
    * Returns the element from |inputs| which has the field identifier equal to
    * |identifier| and null if there is no such element.
    * @param {Array.<Input>}
    * @return {Input}
    */
    var findInputByFieldIdentifier_ = function(inputs, identifier) {
      for (var i = 0; i < inputs.length; ++i) {
        if (identifier == __gCrWeb.common.getFieldIdentifier(inputs[i])) {
          return inputs[i];
        }
      }
      return null;
    }

   /**
    * Returns the password form with the given |name| as a JSON string.
    * @param {string} name The name of the form to extract.
    * @return {string} The password form.
    */
   __gCrWeb['getPasswordForm'] = function(name) {
     var el = __gCrWeb.common.getFormElementFromIdentifier(name);
     if (!el)
       return 'noPasswordsFound';
     var formData = __gCrWeb.getPasswordFormData(el);
     if (!formData)
       return 'noPasswordsFound';
     return __gCrWeb.stringify(formData);
   };

   /**
    * Finds the form described by |formData| and fills in the
    * username and password values.
    *
    * This is a public function invoked by Chrome. There is no information
    * passed to this function that the page does not have access to anyway.
    *
    * @param {!Object.<string, *>} formData Dictionary of parameters,
    *    including:
    *      'action': <string> The form action URL;
    *      'fields': {Array.{Object.<string, string>}} Field name/value pairs;
    * @param {string} username The username to fill.
    * @param {string} password The password to fill.
    * @param {string=} opt_normalizedOrigin The origin URL to compare to.
    * @return {boolean} Whether a form field has been filled.
    */
   __gCrWeb['fillPasswordForm'] = function(formData, username, password,
                                           opt_normalizedOrigin) {
   var normalizedOrigin = opt_normalizedOrigin ||
       __gCrWeb.common.removeQueryAndReferenceFromURL(window.location.href);
   var origin = formData['origin'];
   if (!__gCrWeb.common.isSameOrigin(origin, normalizedOrigin)) {
     return false;
   }
   return fillPasswordFormWithData_(
         formData, username, password, window, opt_normalizedOrigin);
   };

   /**
    * Given a description of a form (origin, action and input fields),
    * finds that form on the page and fills in the specified username
    * and password.
    *
    * @param {Object} formData Form data.
    * @param {string} username The username to fill.
    * @param {string} password The password to fill.
    * @param {Object} win A window or a frame containing formData.
    * @param {string=} opt_normalizedOrigin The origin URL to compare to.
    * @return {boolean} Whether a form field has been filled.
    */
   var fillPasswordFormWithData_ = function(
       formData, username, password, win, opt_normalizedOrigin) {
     var doc = win.document;
     var forms = doc.forms;
     var filled = false;

     for (var i = 0; i < forms.length; i++) {
       var form = forms[i];
       var normalizedFormAction = opt_normalizedOrigin ||
           getCanonicalActionForForm_(form);
       if (formData.action != normalizedFormAction)
         continue;

       var inputs = form.getElementsByTagName('input');
       var usernameInput =
           findInputByFieldIdentifier_(inputs, formData.fields[0].name);
       if (usernameInput == null || !__gCrWeb.common.isTextField(usernameInput)
           || usernameInput.disabled)
         continue;
       var passwordInput =
           findInputByFieldIdentifier_(inputs, formData.fields[1].name);
       if (passwordInput == null || passwordInput.type != "password" ||
           passwordInput.readOnly || passwordInput.disabled)
         continue;

       // If username was provided on a read-only field and it matches the
       // requested username, fill the form.
       if (usernameInput.readOnly) {
         if (usernameInput.value == username) {
           passwordInput.value = password;
           filled = true;
         }
       } else {
         // Setting input fields via .value assignment does not trigger all
         // the events that a web site can observe. This has the effect of
         // certain web sites rejecting an autofilled sign in form as not
         // signed in because the user didn't actually "typed" into the field.
         // Adding the .focus() works around this problems.
         usernameInput.focus();
         usernameInput.value = username;
         passwordInput.focus();
         passwordInput.value = password;
         filled = true;
       }
     }

     // Recursively invoke for all iframes.
     var frames = getSameOriginFrames_(win);
     for (var i = 0; i < frames.length; i++) {
       if (fillPasswordFormWithData_(
           formData, username, password, frames[i], opt_normalizedOrigin)) {
         filled = true;
       }
     }

     return filled;
   };

   /**
    * Finds all forms with passwords in the supplied window or frame and appends
    * JS objects containing the form data to |formDataList|.
    * @param {!Array.<Object>} formDataList A list that this function populates
    *     with descriptions of discovered forms.
    * @param {Window} win A window (or frame) in which the function should
    *    look for password forms.
    */
   __gCrWeb.getPasswordFormDataList = function(formDataList, win) {
     var doc = win.document;
     var forms = doc.forms;
     for (var i = 0; i < forms.length; i++) {
       var formData = __gCrWeb.getPasswordFormData(forms[i]);
       if (formData) {
         formDataList.push(formData);
         addSubmitButtonTouchEndHandler_(forms[i]);
       }
     }

     // Recursively invoke for all iframes.
     var frames = getSameOriginFrames_(win);
     for (var i = 0; i < frames.length; i++) {
       __gCrWeb.getPasswordFormDataList(formDataList, frames[i]);
     }
   };

   /**
    * Returns a JS object containing the data from |formElement|.
    * @param {Element} formElement An HTML Form element.
    * @return {Object} Object of data from formElement.
    */
   __gCrWeb.getPasswordFormData = function(formElement) {
     var inputs = formElement.getElementsByTagName('input');

     var fields = [];
     var passwords = [];
     var firstPasswordIndex = 0;
     for (var j = 0; j < inputs.length; j++) {
       // TODO(dplotnikov): figure out a way to identify the activated
       // submit, which is the button that the user has already hit
       // before this code is called.

       var input = inputs[j];

       fields.push({
         'element': __gCrWeb.common.getFieldIdentifier(input),
         'type': input.type
       });

       if (!input.disabled && input.type == 'password') {
         if (passwords.length == 0) {
           firstPasswordIndex = j;
         }
         passwords.push({
           'element': __gCrWeb.common.getFieldIdentifier(input),
           'value': input.value
         });
       }
     }

     if (passwords.length == 0)
       return null;

     var usernameElement = '';
     var usernameValue = '';
     for (var j = firstPasswordIndex - 1; j >= 0; j--) {
       var input = inputs[j];
       if (!input.disabled && __gCrWeb.common.isTextField(input)) {
         usernameElement = __gCrWeb.common.getFieldIdentifier(input);
         usernameValue = input.value;
         break;
       }
     }

     var origin = __gCrWeb.common.removeQueryAndReferenceFromURL(
         formElement.ownerDocument.location.href);

     return {
       'action': getCanonicalActionForForm_(formElement),
       'name': __gCrWeb.common.getFormIdentifier(formElement),
       'origin': origin,
       'fields': fields,
       'usernameElement': usernameElement,
       'usernameValue': usernameValue,
       'passwords': passwords
     };
   };
 }
	// Copyright 2012 The Chromium Authors. All rights reserved.
	// Use of this source code is governed by a BSD-style license that can be
	// found in the LICENSE file.

	// This file adheres to closure-compiler conventions in order to enable
	// compilation with ADVANCED_OPTIMIZATIONS. See http://goo.gl/FwOgy
	//
	// Installs password management functions on the \|__gCrWeb\| object.
	//
	// Finds all password forms in the current document and extracts
	// their attributes and elements using the same logic as
	// third_party/WebKit/Source/WebCore/html/HTMLFormElement.cpp
	//
	// Returns a JSON string representing an array of objects,
	// where each object represents a password form with the discovered
	// elements and their values.
	//
	// The search for password form fields follows the same algorithm
	// as the WebKit implementation, see http://goo.gl/4hwh6

	// Only install the password management functions once.
	if (__gCrWeb && !__gCrWeb['fillPasswordForm']) {

	/**
	* Finds all password forms in the window and returns form data as a JSON
	* string.
	* @return {string} Form data as a JSON string.
	*/
	__gCrWeb['findPasswordForms'] = function() {
	var formDataList = [];
	if (hasPasswordField_(window)) {
	__gCrWeb.getPasswordFormDataList(formDataList, window);
	}
	return __gCrWeb.stringify(formDataList);
	};

	/** Returns true if the supplied window or any frames inside contain an input
	* field of type 'password'.
	* @private
	*/
	var hasPasswordField_ = function(win) {
	var doc = win.document;

	// We may will not be allowed to read the 'document' property from a frame
	// that is in a different domain.
	if (!doc) {
	return false;
	}

	if (doc.querySelector('input[type=password]')) {
	return true;
	}

	return getSameOriginFrames_(win).some(hasPasswordField_);
	};

	/**
	* Returns the contentWindow of all iframes that are from the the same origin
	* as the containing window.
	* @param {Window} win The window in which to look for frames.
	* @return {Array.<Window>} Array of the same-origin frames found.
	*/
	var getSameOriginFrames_ = function(win) {
	var frames = win.document.getElementsByTagName("iframe");
	var result = [];
	for (var i = 0; i < frames.length; i++) {
	if (!frames[i].src \|\|
	__gCrWeb.common.isSameOrigin(win.location.href, frames[i].src)) {
	result.push(frames[i].contentWindow);
	}
	}
	return result;
	};

	/**
	* Returns a canonical action for \|formElement\|. It works the same as upstream
	* function GetCanonicalActionForForm.
	* @param {Form} formElement.
	* @return {string} Canonical action.
	*/
	var getCanonicalActionForForm_ = function(formElement) {
	var raw_action = formElement.getAttribute('action') \|\| "";
	var absolute_url = __gCrWeb.common.absoluteURL(
	formElement.ownerDocument, raw_action);
	return __gCrWeb.common.removeQueryAndReferenceFromURL(absolute_url);
	};

	/**
	* If \|form\| has no submit elements and exactly 1 button that button
	* is assumed to be a submit button. This function adds onSubmitButtonClick_
	* as a handler for touchend event of this button. Touchend event is used as
	* a proxy for onclick event because onclick handling might be prevented by
	* the site JavaScript.
	*/
	var addSubmitButtonTouchEndHandler_ = function(form) {
	if (form.querySelector('input[type=submit]'))
	return;
	// Try to find buttons of type submit at first.
	var buttons = form.querySelectorAll('button[type="submit"]');
	if (buttons.length == 0) {
	// Try to check all buttons. If there is only one button, assume that this
	// is the submit button.
	buttons = form.querySelectorAll('button');
	if (buttons.length != 1)
	return;
	}
	for (var i = 0; i < buttons.length; ++i)
	buttons[0].addEventListener('touchend', onSubmitButtonTouchEnd_);
	};

	/**
	* Click handler for the submit button. It sends to the host
	* form.submitButtonClick command.
	*/
	var onSubmitButtonTouchEnd_ = function(evt) {
	var form = evt.currentTarget.form;
	var formData = __gCrWeb.getPasswordFormData(form);
	if (!formData)
	return;
	formData["command"] = 'passwordForm.submitButtonClick';
	__gCrWeb.message.invokeOnHost(formData);
	};

	/**
	* Returns the element from \|inputs\| which has the field identifier equal to
	* \|identifier\| and null if there is no such element.
	* @param {Array.<Input>}
	* @return {Input}
	*/
	var findInputByFieldIdentifier_ = function(inputs, identifier) {
	for (var i = 0; i < inputs.length; ++i) {
	if (identifier == __gCrWeb.common.getFieldIdentifier(inputs[i])) {
	return inputs[i];
	}
	}
	return null;
	}

	/**
	* Returns the password form with the given \|name\| as a JSON string.
	* @param {string} name The name of the form to extract.
	* @return {string} The password form.
	*/
	__gCrWeb['getPasswordForm'] = function(name) {
	var el = __gCrWeb.common.getFormElementFromIdentifier(name);
	if (!el)
	return 'noPasswordsFound';
	var formData = __gCrWeb.getPasswordFormData(el);
	if (!formData)
	return 'noPasswordsFound';
	return __gCrWeb.stringify(formData);
	};

	/**
	* Finds the form described by \|formData\| and fills in the
	* username and password values.
	*
	* This is a public function invoked by Chrome. There is no information
	* passed to this function that the page does not have access to anyway.
	*
	* @param {!Object.<string, *>} formData Dictionary of parameters,
	* including:
	* 'action': <string> The form action URL;
	* 'fields': {Array.{Object.<string, string>}} Field name/value pairs;
	* @param {string} username The username to fill.
	* @param {string} password The password to fill.
	* @param {string=} opt_normalizedOrigin The origin URL to compare to.
	* @return {boolean} Whether a form field has been filled.
	*/
	__gCrWeb['fillPasswordForm'] = function(formData, username, password,
	opt_normalizedOrigin) {
	var normalizedOrigin = opt_normalizedOrigin \|\|
	__gCrWeb.common.removeQueryAndReferenceFromURL(window.location.href);
	var origin = formData['origin'];
	if (!__gCrWeb.common.isSameOrigin(origin, normalizedOrigin)) {
	return false;
	}
	return fillPasswordFormWithData_(
	formData, username, password, window, opt_normalizedOrigin);
	};

	/**
	* Given a description of a form (origin, action and input fields),
	* finds that form on the page and fills in the specified username
	* and password.
	*
	* @param {Object} formData Form data.
	* @param {string} username The username to fill.
	* @param {string} password The password to fill.
	* @param {Object} win A window or a frame containing formData.
	* @param {string=} opt_normalizedOrigin The origin URL to compare to.
	* @return {boolean} Whether a form field has been filled.
	*/
	var fillPasswordFormWithData_ = function(
	formData, username, password, win, opt_normalizedOrigin) {
	var doc = win.document;
	var forms = doc.forms;
	var filled = false;

	for (var i = 0; i < forms.length; i++) {
	var form = forms[i];
	var normalizedFormAction = opt_normalizedOrigin \|\|
	getCanonicalActionForForm_(form);
	if (formData.action != normalizedFormAction)
	continue;

	var inputs = form.getElementsByTagName('input');
	var usernameInput =
	findInputByFieldIdentifier_(inputs, formData.fields[0].name);
	if (usernameInput == null \|\| !__gCrWeb.common.isTextField(usernameInput)
	\|\| usernameInput.disabled)
	continue;
	var passwordInput =
	findInputByFieldIdentifier_(inputs, formData.fields[1].name);
	if (passwordInput == null \|\| passwordInput.type != "password" \|\|
	passwordInput.readOnly \|\| passwordInput.disabled)
	continue;

	// If username was provided on a read-only field and it matches the
	// requested username, fill the form.
	if (usernameInput.readOnly) {
	if (usernameInput.value == username) {
	passwordInput.value = password;
	filled = true;
	}
	} else {
	// Setting input fields via .value assignment does not trigger all
	// the events that a web site can observe. This has the effect of
	// certain web sites rejecting an autofilled sign in form as not
	// signed in because the user didn't actually "typed" into the field.
	// Adding the .focus() works around this problems.
	usernameInput.focus();
	usernameInput.value = username;
	passwordInput.focus();
	passwordInput.value = password;
	filled = true;
	}
	}

	// Recursively invoke for all iframes.
	var frames = getSameOriginFrames_(win);
	for (var i = 0; i < frames.length; i++) {
	if (fillPasswordFormWithData_(
	formData, username, password, frames[i], opt_normalizedOrigin)) {
	filled = true;
	}
	}

	return filled;
	};

	/**
	* Finds all forms with passwords in the supplied window or frame and appends
	* JS objects containing the form data to \|formDataList\|.
	* @param {!Array.<Object>} formDataList A list that this function populates
	* with descriptions of discovered forms.
	* @param {Window} win A window (or frame) in which the function should
	* look for password forms.
	*/
	__gCrWeb.getPasswordFormDataList = function(formDataList, win) {
	var doc = win.document;
	var forms = doc.forms;
	for (var i = 0; i < forms.length; i++) {
	var formData = __gCrWeb.getPasswordFormData(forms[i]);
	if (formData) {
	formDataList.push(formData);
	addSubmitButtonTouchEndHandler_(forms[i]);
	}
	}

	// Recursively invoke for all iframes.
	var frames = getSameOriginFrames_(win);
	for (var i = 0; i < frames.length; i++) {
	__gCrWeb.getPasswordFormDataList(formDataList, frames[i]);
	}
	};

	/**
	* Returns a JS object containing the data from \|formElement\|.
	* @param {Element} formElement An HTML Form element.
	* @return {Object} Object of data from formElement.
	*/
	__gCrWeb.getPasswordFormData = function(formElement) {
	var inputs = formElement.getElementsByTagName('input');

	var fields = [];
	var passwords = [];
	var firstPasswordIndex = 0;
	for (var j = 0; j < inputs.length; j++) {
	// TODO(dplotnikov): figure out a way to identify the activated
	// submit, which is the button that the user has already hit
	// before this code is called.

	var input = inputs[j];

	fields.push({
	'element': __gCrWeb.common.getFieldIdentifier(input),
	'type': input.type
	});

	if (!input.disabled && input.type == 'password') {
	if (passwords.length == 0) {
	firstPasswordIndex = j;
	}
	passwords.push({
	'element': __gCrWeb.common.getFieldIdentifier(input),
	'value': input.value
	});
	}
	}

	if (passwords.length == 0)
	return null;

	var usernameElement = '';
	var usernameValue = '';
	for (var j = firstPasswordIndex - 1; j >= 0; j--) {
	var input = inputs[j];
	if (!input.disabled && __gCrWeb.common.isTextField(input)) {
	usernameElement = __gCrWeb.common.getFieldIdentifier(input);
	usernameValue = input.value;
	break;
	}
	}

	var origin = __gCrWeb.common.removeQueryAndReferenceFromURL(
	formElement.ownerDocument.location.href);

	return {
	'action': getCanonicalActionForForm_(formElement),
	'name': __gCrWeb.common.getFormIdentifier(formElement),
	'origin': origin,
	'fields': fields,
	'usernameElement': usernameElement,
	'usernameValue': usernameValue,
	'passwords': passwords
	};
	};
	}