| // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| #include "chrome/browser/extensions/crx_installer.h" |
| |
| #include <map> |
| #include <set> |
| #include <utility> |
| |
| #include "base/bind.h" |
| #include "base/files/file_util.h" |
| #include "base/files/scoped_temp_dir.h" |
| #include "base/lazy_instance.h" |
| #include "base/macros.h" |
| #include "base/memory/ptr_util.h" |
| #include "base/metrics/histogram_macros.h" |
| #include "base/sequenced_task_runner.h" |
| #include "base/strings/string_util.h" |
| #include "base/strings/utf_string_conversions.h" |
| #include "base/threading/sequenced_worker_pool.h" |
| #include "base/threading/thread_restrictions.h" |
| #include "base/time/time.h" |
| #include "base/version.h" |
| #include "build/build_config.h" |
| #include "chrome/browser/extensions/blacklist_check.h" |
| #include "chrome/browser/extensions/convert_user_script.h" |
| #include "chrome/browser/extensions/convert_web_app.h" |
| #include "chrome/browser/extensions/extension_assets_manager.h" |
| #include "chrome/browser/extensions/extension_service.h" |
| #include "chrome/browser/extensions/install_tracker.h" |
| #include "chrome/browser/extensions/install_tracker_factory.h" |
| #include "chrome/browser/extensions/load_error_reporter.h" |
| #include "chrome/browser/extensions/permissions_updater.h" |
| #include "chrome/browser/extensions/webstore_installer.h" |
| #include "chrome/browser/profiles/profile.h" |
| #include "chrome/browser/web_applications/web_app.h" |
| #include "chrome/common/chrome_paths.h" |
| #include "chrome/common/extensions/extension_constants.h" |
| #include "chrome/grit/generated_resources.h" |
| #include "content/public/browser/browser_thread.h" |
| #include "content/public/browser/notification_service.h" |
| #include "content/public/browser/resource_dispatcher_host.h" |
| #include "extensions/browser/extension_file_task_runner.h" |
| #include "extensions/browser/extension_prefs.h" |
| #include "extensions/browser/extension_registry.h" |
| #include "extensions/browser/extension_system.h" |
| #include "extensions/browser/install/crx_install_error.h" |
| #include "extensions/browser/install/extension_install_ui.h" |
| #include "extensions/browser/install_flag.h" |
| #include "extensions/browser/notification_types.h" |
| #include "extensions/browser/policy_check.h" |
| #include "extensions/browser/preload_check_group.h" |
| #include "extensions/browser/requirements_checker.h" |
| #include "extensions/common/extension_icon_set.h" |
| #include "extensions/common/file_util.h" |
| #include "extensions/common/manifest.h" |
| #include "extensions/common/manifest_handlers/kiosk_mode_info.h" |
| #include "extensions/common/manifest_handlers/shared_module_info.h" |
| #include "extensions/common/manifest_url_handlers.h" |
| #include "extensions/common/permissions/permission_message_provider.h" |
| #include "extensions/common/permissions/permission_set.h" |
| #include "extensions/common/permissions/permissions_data.h" |
| #include "extensions/common/user_script.h" |
| #include "extensions/strings/grit/extensions_strings.h" |
| #include "third_party/skia/include/core/SkBitmap.h" |
| #include "ui/base/l10n/l10n_util.h" |
| |
| #if defined(OS_CHROMEOS) |
| #include "components/user_manager/user_manager.h" |
| #endif |
| |
| using content::BrowserThread; |
| |
| namespace extensions { |
| |
| namespace { |
| |
| // Used in histograms; do not change order. |
| enum OffStoreInstallDecision { |
| OnStoreInstall, |
| OffStoreInstallAllowed, |
| OffStoreInstallDisallowed, |
| NumOffStoreInstallDecision |
| }; |
| |
| } // namespace |
| |
| // static |
| scoped_refptr<CrxInstaller> CrxInstaller::CreateSilent( |
| ExtensionService* frontend) { |
| return new CrxInstaller(frontend->AsWeakPtr(), |
| std::unique_ptr<ExtensionInstallPrompt>(), NULL); |
| } |
| |
| // static |
| scoped_refptr<CrxInstaller> CrxInstaller::Create( |
| ExtensionService* frontend, |
| std::unique_ptr<ExtensionInstallPrompt> client) { |
| return new CrxInstaller(frontend->AsWeakPtr(), std::move(client), NULL); |
| } |
| |
| // static |
| scoped_refptr<CrxInstaller> CrxInstaller::Create( |
| ExtensionService* service, |
| std::unique_ptr<ExtensionInstallPrompt> client, |
| const WebstoreInstaller::Approval* approval) { |
| return new CrxInstaller(service->AsWeakPtr(), std::move(client), approval); |
| } |
| |
| CrxInstaller::CrxInstaller(base::WeakPtr<ExtensionService> service_weak, |
| std::unique_ptr<ExtensionInstallPrompt> client, |
| const WebstoreInstaller::Approval* approval) |
| : profile_(service_weak->profile()), |
| install_directory_(service_weak->install_directory()), |
| install_source_(Manifest::INTERNAL), |
| approved_(false), |
| hash_check_failed_(false), |
| expected_manifest_check_level_( |
| WebstoreInstaller::MANIFEST_CHECK_LEVEL_STRICT), |
| fail_install_if_unexpected_version_(false), |
| extensions_enabled_(service_weak->extensions_enabled()), |
| delete_source_(false), |
| create_app_shortcut_(false), |
| service_weak_(service_weak), |
| // See header file comment on |client_| for why we use a raw pointer here. |
| client_(client.release()), |
| apps_require_extension_mime_type_(false), |
| allow_silent_install_(false), |
| grant_permissions_(true), |
| install_cause_(extension_misc::INSTALL_CAUSE_UNSET), |
| creation_flags_(Extension::NO_FLAGS), |
| off_store_install_allow_reason_(OffStoreInstallDisallowed), |
| did_handle_successfully_(true), |
| error_on_unsupported_requirements_(false), |
| installer_task_runner_(GetExtensionFileTaskRunner()), |
| update_from_settings_page_(false), |
| install_flags_(kInstallFlagNone) { |
| if (!approval) |
| return; |
| |
| CHECK(profile()->IsSameProfile(approval->profile)); |
| if (client_) { |
| client_->install_ui()->SetUseAppInstalledBubble( |
| approval->use_app_installed_bubble); |
| client_->install_ui()->SetSkipPostInstallUI(approval->skip_post_install_ui); |
| } |
| |
| if (approval->skip_install_dialog) { |
| // Mark the extension as approved, but save the expected manifest and ID |
| // so we can check that they match the CRX's. |
| approved_ = true; |
| expected_manifest_check_level_ = approval->manifest_check_level; |
| if (expected_manifest_check_level_ != |
| WebstoreInstaller::MANIFEST_CHECK_LEVEL_NONE) |
| expected_manifest_.reset(approval->manifest->DeepCopy()); |
| expected_id_ = approval->extension_id; |
| } |
| if (approval->minimum_version.get()) |
| minimum_version_ = base::Version(*approval->minimum_version); |
| |
| show_dialog_callback_ = approval->show_dialog_callback; |
| } |
| |
| CrxInstaller::~CrxInstaller() { |
| DCHECK(!service_weak_ || service_weak_->browser_terminating() || |
| installer_callback_.is_null()); |
| DCHECK_CURRENTLY_ON(BrowserThread::UI); |
| // Ensure |client_| and |install_checker_| data members are destroyed on the |
| // UI thread. The |client_| dialog has a weak reference as |this| is its |
| // delegate, and |install_checker_| owns WeakPtrs, so must be destroyed on the |
| // same thread that created it. |
| } |
| |
| void CrxInstaller::InstallCrx(const base::FilePath& source_file) { |
| InstallCrxFile(CRXFileInfo(source_file)); |
| } |
| |
| void CrxInstaller::InstallCrxFile(const CRXFileInfo& source_file) { |
| ExtensionService* service = service_weak_.get(); |
| if (!service || service->browser_terminating()) |
| return; |
| |
| NotifyCrxInstallBegin(); |
| |
| source_file_ = source_file.path; |
| |
| auto unpacker = base::MakeRefCounted<SandboxedUnpacker>( |
| install_source_, creation_flags_, install_directory_, |
| installer_task_runner_.get(), this); |
| |
| if (!installer_task_runner_->PostTask( |
| FROM_HERE, base::BindOnce(&SandboxedUnpacker::StartWithCrx, unpacker, |
| source_file))) { |
| NOTREACHED(); |
| } |
| } |
| |
| void CrxInstaller::InstallUnpackedCrx(const std::string& extension_id, |
| const std::string& public_key, |
| const base::FilePath& unpacked_dir) { |
| ExtensionService* service = service_weak_.get(); |
| if (!service || service->browser_terminating()) |
| return; |
| |
| NotifyCrxInstallBegin(); |
| |
| source_file_ = unpacked_dir; |
| |
| auto unpacker = base::MakeRefCounted<SandboxedUnpacker>( |
| install_source_, creation_flags_, install_directory_, |
| installer_task_runner_.get(), this); |
| |
| if (!installer_task_runner_->PostTask( |
| FROM_HERE, |
| base::BindOnce(&SandboxedUnpacker::StartWithDirectory, unpacker, |
| extension_id, public_key, unpacked_dir))) { |
| NOTREACHED(); |
| } |
| } |
| |
| void CrxInstaller::InstallUserScript(const base::FilePath& source_file, |
| const GURL& download_url) { |
| DCHECK(!download_url.is_empty()); |
| |
| NotifyCrxInstallBegin(); |
| |
| source_file_ = source_file; |
| download_url_ = download_url; |
| |
| if (!installer_task_runner_->PostTask( |
| FROM_HERE, |
| base::BindOnce(&CrxInstaller::ConvertUserScriptOnFileThread, this))) |
| NOTREACHED(); |
| } |
| |
| void CrxInstaller::ConvertUserScriptOnFileThread() { |
| base::string16 error; |
| scoped_refptr<Extension> extension = ConvertUserScriptToExtension( |
| source_file_, download_url_, install_directory_, &error); |
| if (!extension.get()) { |
| ReportFailureFromFileThread(CrxInstallError(error)); |
| return; |
| } |
| |
| OnUnpackSuccess(extension->path(), extension->path(), nullptr, |
| extension.get(), SkBitmap(), base::nullopt); |
| } |
| |
| void CrxInstaller::InstallWebApp(const WebApplicationInfo& web_app) { |
| NotifyCrxInstallBegin(); |
| |
| if (!installer_task_runner_->PostTask( |
| FROM_HERE, base::BindOnce(&CrxInstaller::ConvertWebAppOnFileThread, |
| this, web_app))) |
| NOTREACHED(); |
| } |
| |
| void CrxInstaller::UpdateExtensionFromUnpackedCrx( |
| const std::string& extension_id, |
| const std::string& public_key, |
| const base::FilePath& unpacked_dir) { |
| ExtensionService* service = service_weak_.get(); |
| if (!service || service->browser_terminating()) |
| return; |
| |
| const Extension* extension = service->GetInstalledExtension(extension_id); |
| if (!extension) { |
| LOG(WARNING) << "Will not update extension " << extension_id |
| << " because it is not installed"; |
| if (delete_source_) |
| temp_dir_ = unpacked_dir; |
| if (installer_callback_.is_null()) { |
| installer_task_runner_->PostTask( |
| FROM_HERE, base::BindOnce(&CrxInstaller::CleanupTempFiles, this)); |
| } else { |
| installer_task_runner_->PostTaskAndReply( |
| FROM_HERE, base::BindOnce(&CrxInstaller::CleanupTempFiles, this), |
| base::BindOnce( |
| base::BindOnce(std::move(installer_callback_), false))); |
| } |
| return; |
| } |
| |
| expected_id_ = extension_id; |
| install_source_ = extension->location(); |
| install_cause_ = extension_misc::INSTALL_CAUSE_UPDATE; |
| InitializeCreationFlagsForUpdate(extension, Extension::NO_FLAGS); |
| |
| const ExtensionPrefs* extension_prefs = |
| ExtensionPrefs::Get(service->GetBrowserContext()); |
| DCHECK(extension_prefs); |
| set_do_not_sync(extension_prefs->DoNotSync(extension_id)); |
| |
| InstallUnpackedCrx(extension_id, public_key, unpacked_dir); |
| } |
| |
| void CrxInstaller::ConvertWebAppOnFileThread( |
| const WebApplicationInfo& web_app) { |
| scoped_refptr<Extension> extension(ConvertWebAppToExtension( |
| web_app, base::Time::Now(), install_directory_)); |
| if (!extension.get()) { |
| // Validation should have stopped any potential errors before getting here. |
| NOTREACHED() << "Could not convert web app to extension."; |
| return; |
| } |
| |
| // TODO(aa): conversion data gets lost here :( |
| |
| OnUnpackSuccess(extension->path(), extension->path(), nullptr, |
| extension.get(), SkBitmap(), base::nullopt); |
| } |
| |
| CrxInstallError CrxInstaller::AllowInstall(const Extension* extension) { |
| DCHECK(installer_task_runner_->RunsTasksInCurrentSequence()); |
| |
| // Make sure the expected ID matches if one was supplied or if we want to |
| // bypass the prompt. |
| if ((approved_ || !expected_id_.empty()) && |
| expected_id_ != extension->id()) { |
| return CrxInstallError(l10n_util::GetStringFUTF16( |
| IDS_EXTENSION_INSTALL_UNEXPECTED_ID, base::ASCIIToUTF16(expected_id_), |
| base::ASCIIToUTF16(extension->id()))); |
| } |
| |
| if (minimum_version_.IsValid() && |
| extension->version().CompareTo(minimum_version_) < 0) { |
| return CrxInstallError(l10n_util::GetStringFUTF16( |
| IDS_EXTENSION_INSTALL_UNEXPECTED_VERSION, |
| base::ASCIIToUTF16(minimum_version_.GetString() + "+"), |
| base::ASCIIToUTF16(extension->version().GetString()))); |
| } |
| |
| if (expected_version_.IsValid() && fail_install_if_unexpected_version_ && |
| expected_version_ != extension->version()) { |
| return CrxInstallError(l10n_util::GetStringFUTF16( |
| IDS_EXTENSION_INSTALL_UNEXPECTED_VERSION, |
| base::ASCIIToUTF16(expected_version_.GetString()), |
| base::ASCIIToUTF16(extension->version().GetString()))); |
| } |
| |
| // Make sure the manifests match if we want to bypass the prompt. |
| if (approved_) { |
| bool valid = false; |
| if (expected_manifest_check_level_ == |
| WebstoreInstaller::MANIFEST_CHECK_LEVEL_NONE) { |
| // To skip manifest checking, the extension must be a shared module |
| // and not request any permissions. |
| if (SharedModuleInfo::IsSharedModule(extension) && |
| extension->permissions_data()->active_permissions().IsEmpty()) { |
| valid = true; |
| } |
| } else { |
| valid = expected_manifest_->Equals(original_manifest_.get()); |
| if (!valid && expected_manifest_check_level_ == |
| WebstoreInstaller::MANIFEST_CHECK_LEVEL_LOOSE) { |
| std::string error; |
| scoped_refptr<Extension> dummy_extension = |
| Extension::Create(base::FilePath(), |
| install_source_, |
| *expected_manifest_->value(), |
| creation_flags_, |
| extension->id(), |
| &error); |
| if (error.empty()) { |
| valid = !(PermissionMessageProvider::Get()->IsPrivilegeIncrease( |
| dummy_extension->permissions_data()->active_permissions(), |
| extension->permissions_data()->active_permissions(), |
| extension->GetType())); |
| } |
| } |
| } |
| |
| if (!valid) |
| return CrxInstallError( |
| l10n_util::GetStringUTF16(IDS_EXTENSION_MANIFEST_INVALID)); |
| } |
| |
| // The checks below are skipped for themes, external installs, and bookmark |
| // apps. |
| // TODO(pamg): After ManagementPolicy refactoring is complete, remove this |
| // and other uses of install_source_ that are no longer needed now that the |
| // SandboxedUnpacker sets extension->location. |
| if (extension->is_theme() || extension->from_bookmark() || |
| Manifest::IsExternalLocation(install_source_)) { |
| return CrxInstallError(); |
| } |
| |
| if (!extensions_enabled_) { |
| return CrxInstallError( |
| CrxInstallError::ERROR_DECLINED, |
| l10n_util::GetStringUTF16(IDS_EXTENSION_INSTALL_NOT_ENABLED)); |
| } |
| |
| if (install_cause_ == extension_misc::INSTALL_CAUSE_USER_DOWNLOAD) { |
| // TODO(devlin): It appears that these histograms are never logged. We |
| // should either add them to histograms.xml or delete them. |
| const char kHistogramName[] = "Extensions.OffStoreInstallDecisionHard"; |
| if (is_gallery_install()) { |
| UMA_HISTOGRAM_ENUMERATION(kHistogramName, |
| OffStoreInstallDecision::OnStoreInstall, |
| NumOffStoreInstallDecision); |
| } else if (off_store_install_allow_reason_ != OffStoreInstallDisallowed) { |
| UMA_HISTOGRAM_ENUMERATION(kHistogramName, |
| OffStoreInstallDecision::OffStoreInstallAllowed, |
| NumOffStoreInstallDecision); |
| UMA_HISTOGRAM_ENUMERATION("Extensions.OffStoreInstallAllowReason", |
| off_store_install_allow_reason_, |
| NumOffStoreInstallAllowReasons); |
| } else { |
| UMA_HISTOGRAM_ENUMERATION( |
| kHistogramName, OffStoreInstallDecision::OffStoreInstallDisallowed, |
| NumOffStoreInstallDecision); |
| // Don't delete source in this case so that the user can install |
| // manually if they want. |
| delete_source_ = false; |
| did_handle_successfully_ = false; |
| |
| return CrxInstallError( |
| CrxInstallError::ERROR_OFF_STORE, |
| l10n_util::GetStringUTF16(IDS_EXTENSION_INSTALL_DISALLOWED_ON_SITE)); |
| } |
| } |
| |
| if (extension_->is_app()) { |
| // If the app was downloaded, apps_require_extension_mime_type_ |
| // will be set. In this case, check that it was served with the |
| // right mime type. Make an exception for file URLs, which come |
| // from the users computer and have no headers. |
| if (!download_url_.SchemeIsFile() && |
| apps_require_extension_mime_type_ && |
| original_mime_type_ != Extension::kMimeType) { |
| return CrxInstallError(l10n_util::GetStringFUTF16( |
| IDS_EXTENSION_INSTALL_INCORRECT_APP_CONTENT_TYPE, |
| base::ASCIIToUTF16(Extension::kMimeType))); |
| } |
| |
| // If the client_ is NULL, then the app is either being installed via |
| // an internal mechanism like sync, external_extensions, or default apps. |
| // In that case, we don't want to enforce things like the install origin. |
| if (!is_gallery_install() && client_) { |
| // For apps with a gallery update URL, require that they be installed |
| // from the gallery. |
| // TODO(erikkay) Apply this rule for paid extensions and themes as well. |
| if (ManifestURL::UpdatesFromGallery(extension)) { |
| return CrxInstallError(l10n_util::GetStringFUTF16( |
| IDS_EXTENSION_DISALLOW_NON_DOWNLOADED_GALLERY_INSTALLS, |
| l10n_util::GetStringUTF16(IDS_EXTENSION_WEB_STORE_TITLE))); |
| } |
| |
| // For self-hosted apps, verify that the entire extent is on the same |
| // host (or a subdomain of the host) the download happened from. There's |
| // no way for us to verify that the app controls any other hosts. |
| URLPattern pattern(UserScript::ValidUserScriptSchemes()); |
| pattern.SetHost(download_url_.host()); |
| pattern.SetMatchSubdomains(true); |
| |
| URLPatternSet patterns = extension_->web_extent(); |
| for (URLPatternSet::const_iterator i = patterns.begin(); |
| i != patterns.end(); ++i) { |
| if (!pattern.MatchesHost(i->host())) { |
| return CrxInstallError(l10n_util::GetStringUTF16( |
| IDS_EXTENSION_INSTALL_INCORRECT_INSTALL_HOST)); |
| } |
| } |
| } |
| } |
| |
| return CrxInstallError(); |
| } |
| |
| void CrxInstaller::OnUnpackFailure(const CrxInstallError& error) { |
| DCHECK(installer_task_runner_->RunsTasksInCurrentSequence()); |
| |
| UMA_HISTOGRAM_ENUMERATION("Extensions.UnpackFailureInstallSource", |
| install_source(), Manifest::NUM_LOCATIONS); |
| |
| UMA_HISTOGRAM_ENUMERATION("Extensions.UnpackFailureInstallCause", |
| install_cause(), |
| extension_misc::NUM_INSTALL_CAUSES); |
| |
| ReportFailureFromFileThread(error); |
| } |
| |
| void CrxInstaller::OnUnpackSuccess( |
| const base::FilePath& temp_dir, |
| const base::FilePath& extension_dir, |
| std::unique_ptr<base::DictionaryValue> original_manifest, |
| const Extension* extension, |
| const SkBitmap& install_icon, |
| const base::Optional<int>& dnr_ruleset_checksum) { |
| DCHECK(installer_task_runner_->RunsTasksInCurrentSequence()); |
| |
| UMA_HISTOGRAM_ENUMERATION("Extensions.UnpackSuccessInstallSource", |
| install_source(), Manifest::NUM_LOCATIONS); |
| |
| |
| UMA_HISTOGRAM_ENUMERATION("Extensions.UnpackSuccessInstallCause", |
| install_cause(), |
| extension_misc::NUM_INSTALL_CAUSES); |
| |
| extension_ = extension; |
| temp_dir_ = temp_dir; |
| dnr_ruleset_checksum_ = dnr_ruleset_checksum; |
| |
| if (!install_icon.empty()) |
| install_icon_ = std::make_unique<SkBitmap>(install_icon); |
| |
| if (original_manifest) { |
| original_manifest_ = std::make_unique<Manifest>( |
| Manifest::INVALID_LOCATION, std::move(original_manifest)); |
| } |
| |
| // We don't have to delete the unpack dir explicity since it is a child of |
| // the temp dir. |
| unpacked_extension_root_ = extension_dir; |
| |
| CrxInstallError error = AllowInstall(extension); |
| if (error.type() != CrxInstallError::ERROR_NONE) { |
| ReportFailureFromFileThread(error); |
| return; |
| } |
| |
| if (!BrowserThread::PostTask( |
| BrowserThread::UI, FROM_HERE, |
| base::BindOnce(&CrxInstaller::CheckInstall, this))) |
| NOTREACHED(); |
| } |
| |
| void CrxInstaller::CheckInstall() { |
| DCHECK_CURRENTLY_ON(BrowserThread::UI); |
| ExtensionService* service = service_weak_.get(); |
| if (!service || service->browser_terminating()) |
| return; |
| |
| // TODO(crbug.com/420147): Move this code to a utility class to avoid |
| // duplication of SharedModuleService::CheckImports code. |
| if (SharedModuleInfo::ImportsModules(extension())) { |
| const std::vector<SharedModuleInfo::ImportInfo>& imports = |
| SharedModuleInfo::GetImports(extension()); |
| for (const auto& import : imports) { |
| const Extension* imported_module = |
| service->GetExtensionById(import.extension_id, true); |
| if (!imported_module) |
| continue; |
| |
| if (!SharedModuleInfo::IsSharedModule(imported_module)) { |
| ReportFailureFromUIThread(CrxInstallError( |
| CrxInstallError::ERROR_DECLINED, |
| l10n_util::GetStringFUTF16( |
| IDS_EXTENSION_INSTALL_DEPENDENCY_NOT_SHARED_MODULE, |
| base::UTF8ToUTF16(imported_module->name())))); |
| return; |
| } |
| base::Version version_required(import.minimum_version); |
| if (version_required.IsValid() && |
| imported_module->version().CompareTo(version_required) < 0) { |
| ReportFailureFromUIThread(CrxInstallError( |
| CrxInstallError::ERROR_DECLINED, |
| l10n_util::GetStringFUTF16( |
| IDS_EXTENSION_INSTALL_DEPENDENCY_OLD_VERSION, |
| base::UTF8ToUTF16(imported_module->name()), |
| base::ASCIIToUTF16(import.minimum_version), |
| base::ASCIIToUTF16(imported_module->version().GetString())))); |
| return; |
| } |
| if (!SharedModuleInfo::IsExportAllowedByWhitelist(imported_module, |
| extension()->id())) { |
| ReportFailureFromUIThread(CrxInstallError( |
| CrxInstallError::ERROR_DECLINED, |
| l10n_util::GetStringFUTF16( |
| IDS_EXTENSION_INSTALL_DEPENDENCY_NOT_WHITELISTED, |
| base::UTF8ToUTF16(extension()->name()), |
| base::UTF8ToUTF16(imported_module->name())))); |
| return; |
| } |
| } |
| } |
| |
| // Skip the checks if the extension is a bookmark app. |
| if (extension()->from_bookmark()) { |
| ConfirmInstall(); |
| return; |
| } |
| |
| // Run the policy, requirements and blacklist checks in parallel. |
| check_group_ = base::MakeUnique<PreloadCheckGroup>(); |
| |
| policy_check_ = base::MakeUnique<PolicyCheck>(profile_, extension()); |
| requirements_check_ = base::MakeUnique<RequirementsChecker>(extension()); |
| blacklist_check_ = |
| base::MakeUnique<BlacklistCheck>(Blacklist::Get(profile_), extension_); |
| |
| check_group_->AddCheck(policy_check_.get()); |
| check_group_->AddCheck(requirements_check_.get()); |
| check_group_->AddCheck(blacklist_check_.get()); |
| |
| check_group_->Start( |
| base::BindOnce(&CrxInstaller::OnInstallChecksComplete, this)); |
| } |
| |
| void CrxInstaller::OnInstallChecksComplete(const PreloadCheck::Errors& errors) { |
| DCHECK_CURRENTLY_ON(BrowserThread::UI); |
| if (!service_weak_) |
| return; |
| |
| if (errors.empty()) { |
| ConfirmInstall(); |
| return; |
| } |
| |
| // Check for requirement errors. |
| if (!requirements_check_->GetErrorMessage().empty()) { |
| if (error_on_unsupported_requirements_) { |
| ReportFailureFromUIThread( |
| CrxInstallError(CrxInstallError::ERROR_DECLINED, |
| requirements_check_->GetErrorMessage())); |
| return; |
| } |
| install_flags_ |= kInstallFlagHasRequirementErrors; |
| } |
| |
| // Check the blacklist state. |
| if (errors.count(PreloadCheck::BLACKLISTED_ID) || |
| errors.count(PreloadCheck::BLACKLISTED_UNKNOWN)) { |
| if (allow_silent_install_) { |
| // NOTE: extension may still be blacklisted, but we're forced to silently |
| // install it. In this case, ExtensionService::OnExtensionInstalled needs |
| // to deal with it. |
| if (errors.count(PreloadCheck::BLACKLISTED_ID)) |
| install_flags_ |= kInstallFlagIsBlacklistedForMalware; |
| } else { |
| // User tried to install a blacklisted extension. Show an error and |
| // refuse to install it. |
| ReportFailureFromUIThread(CrxInstallError( |
| CrxInstallError::ERROR_DECLINED, |
| l10n_util::GetStringFUTF16(IDS_EXTENSION_IS_BLACKLISTED, |
| base::UTF8ToUTF16(extension()->name())))); |
| UMA_HISTOGRAM_ENUMERATION("ExtensionBlacklist.BlockCRX", |
| extension()->location(), |
| Manifest::NUM_LOCATIONS); |
| return; |
| } |
| } |
| |
| // Check for policy errors. |
| if (errors.count(PreloadCheck::DISALLOWED_BY_POLICY)) { |
| // We don't want to show the error infobar for installs from the WebStore, |
| // because the WebStore already shows an error dialog itself. |
| // Note: |client_| can be NULL in unit_tests! |
| if (extension()->from_webstore() && client_) |
| client_->install_ui()->SetSkipPostInstallUI(true); |
| |
| ReportFailureFromUIThread(CrxInstallError( |
| CrxInstallError::ERROR_DECLINED, policy_check_->GetErrorMessage())); |
| return; |
| } |
| |
| ConfirmInstall(); |
| } |
| |
| void CrxInstaller::ConfirmInstall() { |
| DCHECK_CURRENTLY_ON(BrowserThread::UI); |
| ExtensionService* service = service_weak_.get(); |
| if (!service || service->browser_terminating()) |
| return; |
| |
| if (KioskModeInfo::IsKioskOnly(extension())) { |
| bool in_kiosk_mode = false; |
| #if defined(OS_CHROMEOS) |
| user_manager::UserManager* user_manager = user_manager::UserManager::Get(); |
| in_kiosk_mode = user_manager && user_manager->IsLoggedInAsKioskApp(); |
| #endif |
| if (!in_kiosk_mode) { |
| ReportFailureFromUIThread(CrxInstallError( |
| CrxInstallError::ERROR_DECLINED, |
| l10n_util::GetStringUTF16(IDS_EXTENSION_INSTALL_KIOSK_MODE_ONLY))); |
| return; |
| } |
| } |
| |
| // Check whether this install is initiated from the settings page to |
| // update an existing extension or app. |
| CheckUpdateFromSettingsPage(); |
| |
| GURL overlapping_url; |
| ExtensionRegistry* registry = ExtensionRegistry::Get(service->profile()); |
| const Extension* overlapping_extension = |
| registry->enabled_extensions().GetHostedAppByOverlappingWebExtent( |
| extension()->web_extent()); |
| if (overlapping_extension && |
| overlapping_extension->id() != extension()->id()) { |
| ReportFailureFromUIThread(CrxInstallError(l10n_util::GetStringFUTF16( |
| IDS_EXTENSION_OVERLAPPING_WEB_EXTENT, |
| base::UTF8ToUTF16(extension()->name()), |
| base::UTF8ToUTF16(overlapping_extension->name())))); |
| return; |
| } |
| |
| current_version_ = base::Version(ExtensionPrefs::Get(service->profile()) |
| ->GetVersionString(extension()->id())); |
| |
| if (client_ && |
| (!allow_silent_install_ || !approved_) && |
| !update_from_settings_page_) { |
| AddRef(); // Balanced in OnInstallPromptDone(). |
| client_->ShowDialog(base::Bind(&CrxInstaller::OnInstallPromptDone, this), |
| extension(), nullptr, show_dialog_callback_); |
| } else { |
| UpdateCreationFlagsAndCompleteInstall(); |
| } |
| } |
| |
| void CrxInstaller::OnInstallPromptDone(ExtensionInstallPrompt::Result result) { |
| DCHECK_CURRENTLY_ON(BrowserThread::UI); |
| |
| // If update_from_settings_page_ boolean is true, this functions is |
| // getting called in response to ExtensionInstallPrompt::ConfirmReEnable() |
| // and if it is false, this function is called in response to |
| // ExtensionInstallPrompt::ShowDialog(). |
| if (result == ExtensionInstallPrompt::Result::ACCEPTED) { |
| ExtensionService* service = service_weak_.get(); |
| if (!service || service->browser_terminating()) |
| return; |
| |
| if (update_from_settings_page_) { |
| service->GrantPermissionsAndEnableExtension(extension()); |
| } else { |
| UpdateCreationFlagsAndCompleteInstall(); |
| } |
| } else if (!update_from_settings_page_) { |
| const char* histogram_name = |
| result == ExtensionInstallPrompt::Result::USER_CANCELED |
| ? "InstallCancel" |
| : "InstallAbort"; |
| ExtensionService::RecordPermissionMessagesHistogram( |
| extension(), histogram_name); |
| |
| NotifyCrxInstallComplete(false); |
| } |
| |
| Release(); // balanced in ConfirmInstall() or ConfirmReEnable(). |
| } |
| |
| void CrxInstaller::InitializeCreationFlagsForUpdate(const Extension* extension, |
| const int initial_flags) { |
| DCHECK(extension); |
| |
| creation_flags_ = initial_flags; |
| |
| // If the extension was installed from or has migrated to the webstore, or |
| // its auto-update URL is from the webstore, treat it as a webstore install. |
| // Note that we ignore some older extensions with blank auto-update URLs |
| // because we are mostly concerned with restrictions on NaCl extensions, |
| // which are newer. |
| if (extension->from_webstore() || ManifestURL::UpdatesFromGallery(extension)) |
| creation_flags_ |= Extension::FROM_WEBSTORE; |
| |
| // Bookmark apps being updated is kind of a contradiction, but that's because |
| // we mark the default apps as bookmark apps, and they're hosted in the web |
| // store, thus they can get updated. See http://crbug.com/101605 for more |
| // details. |
| if (extension->from_bookmark()) |
| creation_flags_ |= Extension::FROM_BOOKMARK; |
| |
| if (extension->was_installed_by_default()) |
| creation_flags_ |= Extension::WAS_INSTALLED_BY_DEFAULT; |
| |
| if (extension->was_installed_by_oem()) |
| creation_flags_ |= Extension::WAS_INSTALLED_BY_OEM; |
| } |
| |
| void CrxInstaller::UpdateCreationFlagsAndCompleteInstall() { |
| creation_flags_ = extension()->creation_flags() | Extension::REQUIRE_KEY; |
| // If the extension was already installed and had file access, also grant file |
| // access to the updated extension. |
| if (ExtensionPrefs::Get(profile())->AllowFileAccess(extension()->id())) |
| creation_flags_ |= Extension::ALLOW_FILE_ACCESS; |
| |
| if (!installer_task_runner_->PostTask( |
| FROM_HERE, base::BindOnce(&CrxInstaller::CompleteInstall, this))) { |
| NOTREACHED(); |
| } |
| } |
| |
| void CrxInstaller::CompleteInstall() { |
| DCHECK(installer_task_runner_->RunsTasksInCurrentSequence()); |
| |
| if (current_version_.IsValid() && |
| current_version_.CompareTo(extension()->version()) > 0) { |
| ReportFailureFromFileThread(CrxInstallError( |
| CrxInstallError::ERROR_DECLINED, |
| l10n_util::GetStringUTF16( |
| extension()->is_app() ? IDS_APP_CANT_DOWNGRADE_VERSION |
| : IDS_EXTENSION_CANT_DOWNGRADE_VERSION))); |
| return; |
| } |
| |
| // See how long extension install paths are. This is important on |
| // windows, because file operations may fail if the path to a file |
| // exceeds a small constant. See crbug.com/69693 . |
| UMA_HISTOGRAM_CUSTOM_COUNTS( |
| "Extensions.CrxInstallDirPathLength", |
| install_directory_.value().length(), 1, 500, 100); |
| |
| ExtensionAssetsManager* assets_manager = |
| ExtensionAssetsManager::GetInstance(); |
| assets_manager->InstallExtension( |
| extension(), |
| unpacked_extension_root_, |
| install_directory_, |
| profile(), |
| base::Bind(&CrxInstaller::ReloadExtensionAfterInstall, this)); |
| } |
| |
| void CrxInstaller::ReloadExtensionAfterInstall( |
| const base::FilePath& version_dir) { |
| DCHECK(installer_task_runner_->RunsTasksInCurrentSequence()); |
| |
| if (version_dir.empty()) { |
| ReportFailureFromFileThread(CrxInstallError(l10n_util::GetStringUTF16( |
| IDS_EXTENSION_MOVE_DIRECTORY_TO_PROFILE_FAILED))); |
| return; |
| } |
| |
| // This is lame, but we must reload the extension because absolute paths |
| // inside the content scripts are established inside InitFromValue() and we |
| // just moved the extension. |
| // TODO(aa): All paths to resources inside extensions should be created |
| // lazily and based on the Extension's root path at that moment. |
| // TODO(rdevlin.cronin): Continue removing std::string errors and replacing |
| // with base::string16 |
| std::string extension_id = extension()->id(); |
| std::string error; |
| extension_ = file_util::LoadExtension( |
| version_dir, install_source_, |
| // Note: modified by UpdateCreationFlagsAndCompleteInstall. |
| creation_flags_, &error); |
| |
| if (extension()) { |
| ReportSuccessFromFileThread(); |
| } else { |
| LOG(ERROR) << error << " " << extension_id << " " << download_url_; |
| ReportFailureFromFileThread(CrxInstallError(base::UTF8ToUTF16(error))); |
| } |
| } |
| |
| void CrxInstaller::ReportFailureFromFileThread(const CrxInstallError& error) { |
| DCHECK(installer_task_runner_->RunsTasksInCurrentSequence()); |
| if (!BrowserThread::PostTask( |
| BrowserThread::UI, FROM_HERE, |
| base::BindOnce(&CrxInstaller::ReportFailureFromUIThread, this, |
| error))) { |
| NOTREACHED(); |
| } |
| } |
| |
| void CrxInstaller::ReportFailureFromUIThread(const CrxInstallError& error) { |
| DCHECK_CURRENTLY_ON(BrowserThread::UI); |
| |
| if (!service_weak_.get() || service_weak_->browser_terminating()) |
| return; |
| |
| content::NotificationService* service = |
| content::NotificationService::current(); |
| service->Notify(NOTIFICATION_EXTENSION_INSTALL_ERROR, |
| content::Source<CrxInstaller>(this), |
| content::Details<const CrxInstallError>(&error)); |
| |
| // This isn't really necessary, it is only used because unit tests expect to |
| // see errors get reported via this interface. |
| // |
| // TODO(aa): Need to go through unit tests and clean them up too, probably get |
| // rid of this line. |
| LoadErrorReporter::GetInstance()->ReportError(error.message(), |
| false); // Be quiet. |
| |
| if (client_) |
| client_->OnInstallFailure(error); |
| |
| NotifyCrxInstallComplete(false); |
| |
| // Delete temporary files. |
| CleanupTempFiles(); |
| } |
| |
| void CrxInstaller::ReportSuccessFromFileThread() { |
| DCHECK(installer_task_runner_->RunsTasksInCurrentSequence()); |
| |
| // Tracking number of extensions installed by users |
| if (install_cause() == extension_misc::INSTALL_CAUSE_USER_DOWNLOAD) |
| UMA_HISTOGRAM_ENUMERATION("Extensions.ExtensionInstalled", 1, 2); |
| |
| if (!BrowserThread::PostTask( |
| BrowserThread::UI, FROM_HERE, |
| base::BindOnce(&CrxInstaller::ReportSuccessFromUIThread, this))) |
| NOTREACHED(); |
| |
| // Delete temporary files. |
| CleanupTempFiles(); |
| } |
| |
| void CrxInstaller::ReportSuccessFromUIThread() { |
| DCHECK_CURRENTLY_ON(BrowserThread::UI); |
| |
| if (!service_weak_.get() || service_weak_->browser_terminating()) |
| return; |
| |
| extension()->permissions_data()->BindToCurrentThread(); |
| |
| if (!update_from_settings_page_) { |
| // If there is a client, tell the client about installation. |
| if (client_) |
| client_->OnInstallSuccess(extension(), install_icon_.get()); |
| |
| // We update the extension's granted permissions if the user already |
| // approved the install (client_ is non NULL), or we are allowed to install |
| // this silently. |
| if ((client_ || allow_silent_install_) && grant_permissions_ && |
| (!expected_version_.IsValid() || |
| expected_version_ == extension()->version())) { |
| PermissionsUpdater perms_updater(profile()); |
| perms_updater.InitializePermissions(extension()); |
| perms_updater.GrantActivePermissions(extension()); |
| } |
| } |
| |
| service_weak_->OnExtensionInstalled(extension(), page_ordinal_, |
| install_flags_, dnr_ruleset_checksum_); |
| NotifyCrxInstallComplete(true); |
| } |
| |
| void CrxInstaller::NotifyCrxInstallBegin() { |
| InstallTrackerFactory::GetForBrowserContext(profile()) |
| ->OnBeginCrxInstall(expected_id_); |
| } |
| |
| void CrxInstaller::NotifyCrxInstallComplete(bool success) { |
| // Some users (such as the download shelf) need to know when a |
| // CRXInstaller is done. Listening for the EXTENSION_* events |
| // is problematic because they don't know anything about the |
| // extension before it is unpacked, so they cannot filter based |
| // on the extension. |
| content::NotificationService::current()->Notify( |
| NOTIFICATION_CRX_INSTALLER_DONE, content::Source<CrxInstaller>(this), |
| content::Details<const Extension>(success ? extension() : NULL)); |
| |
| InstallTrackerFactory::GetForBrowserContext(profile()) |
| ->OnFinishCrxInstall(success ? extension()->id() : expected_id_, success); |
| |
| if (success) |
| ConfirmReEnable(); |
| |
| if (!installer_callback_.is_null() && |
| !BrowserThread::GetTaskRunnerForThread(BrowserThread::UI) |
| ->PostTask(FROM_HERE, base::BindOnce(std::move(installer_callback_), |
| success))) { |
| NOTREACHED(); |
| } |
| } |
| |
| void CrxInstaller::CleanupTempFiles() { |
| if (!installer_task_runner_->RunsTasksInCurrentSequence()) { |
| if (!installer_task_runner_->PostTask( |
| FROM_HERE, base::BindOnce(&CrxInstaller::CleanupTempFiles, this))) { |
| NOTREACHED(); |
| } |
| return; |
| } |
| |
| // Delete the temp directory and crx file as necessary. |
| if (!temp_dir_.value().empty()) { |
| file_util::DeleteFile(temp_dir_, true); |
| temp_dir_ = base::FilePath(); |
| } |
| |
| if (delete_source_ && !source_file_.value().empty()) { |
| file_util::DeleteFile(source_file_, false); |
| source_file_ = base::FilePath(); |
| } |
| } |
| |
| void CrxInstaller::CheckUpdateFromSettingsPage() { |
| DCHECK_CURRENTLY_ON(BrowserThread::UI); |
| |
| ExtensionService* service = service_weak_.get(); |
| if (!service || service->browser_terminating()) |
| return; |
| |
| if (off_store_install_allow_reason_ != OffStoreInstallAllowedFromSettingsPage) |
| return; |
| |
| const Extension* installed_extension = |
| service->GetInstalledExtension(extension()->id()); |
| if (installed_extension) { |
| // Previous version of the extension exists. |
| update_from_settings_page_ = true; |
| expected_id_ = installed_extension->id(); |
| install_source_ = installed_extension->location(); |
| install_cause_ = extension_misc::INSTALL_CAUSE_UPDATE; |
| } |
| } |
| |
| void CrxInstaller::ConfirmReEnable() { |
| DCHECK_CURRENTLY_ON(BrowserThread::UI); |
| |
| ExtensionService* service = service_weak_.get(); |
| if (!service || service->browser_terminating()) |
| return; |
| |
| if (!update_from_settings_page_) |
| return; |
| |
| ExtensionPrefs* prefs = ExtensionPrefs::Get(service->profile()); |
| if (!prefs->DidExtensionEscalatePermissions(extension()->id())) |
| return; |
| |
| if (client_) { |
| AddRef(); // Balanced in OnInstallPromptDone(). |
| ExtensionInstallPrompt::PromptType type = |
| ExtensionInstallPrompt::GetReEnablePromptTypeForExtension( |
| service->profile(), extension()); |
| client_->ShowDialog(base::Bind(&CrxInstaller::OnInstallPromptDone, this), |
| extension(), nullptr, |
| base::MakeUnique<ExtensionInstallPrompt::Prompt>(type), |
| ExtensionInstallPrompt::GetDefaultShowDialogCallback()); |
| } |
| } |
| |
| } // namespace extensions |
