blob: 06c72a81f5a319d0455ed7430744999ab51609b9 [file] [log] [blame]
[email protected]d4a8ca482013-10-30 21:06:401// Copyright 2013 The Chromium Authors. All rights reserved.
license.botbf09a502008-08-24 00:55:552// Use of this source code is governed by a BSD-style license that can be
3// found in the LICENSE file.
initial.commit09911bf2008-07-26 23:55:294
creis4e2ecb72015-06-20 00:46:305/*
6 * Copyright (C) 2006, 2007, 2008, 2009 Apple Inc. All rights reserved.
7 * Copyright (C) 2008 Nokia Corporation and/or its subsidiary(-ies)
8 * Copyright (C) 2008, 2009 Torch Mobile Inc. All rights reserved.
9 * (http://www.torchmobile.com/)
10 *
11 * Redistribution and use in source and binary forms, with or without
12 * modification, are permitted provided that the following conditions
13 * are met:
14 *
15 * 1. Redistributions of source code must retain the above copyright
16 * notice, this list of conditions and the following disclaimer.
17 * 2. Redistributions in binary form must reproduce the above copyright
18 * notice, this list of conditions and the following disclaimer in the
19 * documentation and/or other materials provided with the distribution.
20 * 3. Neither the name of Apple Computer, Inc. ("Apple") nor the names of
21 * its contributors may be used to endorse or promote products derived
22 * from this software without specific prior written permission.
23 *
24 * THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND ANY
25 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
26 * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
27 * DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY
28 * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
29 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
30 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
31 * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
32 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
33 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34 */
35
danakjc492bf82020-09-09 20:02:4436#include "content/browser/renderer_host/navigation_controller_impl.h"
initial.commit09911bf2008-07-26 23:55:2937
Lei Zhang96031532019-10-10 19:05:4738#include <algorithm>
dcheng36b6aec92015-12-26 06:16:3639#include <utility>
40
[email protected]c5b88d82012-10-06 17:03:3341#include "base/bind.h"
[email protected]eabfe1912014-05-12 10:07:2842#include "base/command_line.h"
initial.commit09911bf2008-07-26 23:55:2943#include "base/logging.h"
asvitkine30330812016-08-30 04:01:0844#include "base/metrics/histogram_macros.h"
[email protected]348fbaac2013-06-11 06:31:5145#include "base/strings/string_util.h"
[email protected]74ebfb12013-06-07 20:48:0046#include "base/strings/utf_string_conversions.h"
[email protected]a43858f2013-06-28 15:18:3747#include "base/time/time.h"
Carlos Caballero40b0efd2021-01-26 11:55:0048#include "base/trace_event/optional_trace_event.h"
Carlos Caballeroede6f8c2021-01-28 11:01:5049#include "base/trace_event/trace_conversion_helper.h"
ssid3e765612015-01-28 04:03:4250#include "base/trace_event/trace_event.h"
servolkf3955532015-05-16 00:01:5951#include "build/build_config.h"
[email protected]eabfe1912014-05-12 10:07:2852#include "cc/base/switches.h"
jamescookda2505812015-03-20 18:01:1853#include "content/browser/bad_message.h"
Marijn Kruisselbrink0c87e6e2018-06-22 22:57:3954#include "content/browser/blob_storage/chrome_blob_storage_context.h"
[email protected]825b1662012-03-12 19:07:3155#include "content/browser/browser_url_handler_impl.h"
[email protected]5f2aa722013-08-07 16:59:4156#include "content/browser/dom_storage/dom_storage_context_wrapper.h"
[email protected]1ea3c792012-04-17 01:25:0457#include "content/browser/dom_storage/session_storage_namespace_impl.h"
danakjc492bf82020-09-09 20:02:4458#include "content/browser/renderer_host/debug_urls.h"
59#include "content/browser/renderer_host/frame_tree.h"
Carlos Caballero40b0efd2021-01-26 11:55:0060#include "content/browser/renderer_host/frame_tree_node.h"
danakjc492bf82020-09-09 20:02:4461#include "content/browser/renderer_host/navigation_entry_impl.h"
62#include "content/browser/renderer_host/navigation_request.h"
63#include "content/browser/renderer_host/navigator.h"
64#include "content/browser/renderer_host/render_frame_host_delegate.h"
Carlos Caballero40b0efd2021-01-26 11:55:0065#include "content/browser/renderer_host/render_view_host_impl.h"
[email protected]b6583592012-01-25 19:52:3366#include "content/browser/site_instance_impl.h"
Tsuyoshi Horo37493af2019-11-21 23:43:1467#include "content/browser/web_package/web_bundle_navigation_info.h"
Camille Lamy5193caa2018-10-12 11:59:4268#include "content/common/content_constants_internal.h"
[email protected]37567b432014-02-12 01:12:2269#include "content/common/frame_messages.h"
Nasko Oskovae49e292020-08-13 02:08:5170#include "content/common/trace_utils.h"
[email protected]ccb797302011-12-15 16:55:1171#include "content/public/browser/browser_context.h"
[email protected]d1198fd2012-08-13 22:50:1972#include "content/public/browser/content_browser_client.h"
[email protected]d9083482012-01-06 00:38:4673#include "content/public/browser/invalidate_type.h"
[email protected]5b96836f2011-12-22 07:39:0074#include "content/public/browser/navigation_details.h"
[email protected]7f6f44c2011-12-14 13:23:3875#include "content/public/browser/notification_service.h"
[email protected]0d6e9bd2011-10-18 04:29:1676#include "content/public/browser/notification_types.h"
Lei Zhang96031532019-10-10 19:05:4777#include "content/public/browser/render_view_host.h"
[email protected]9677a3c2012-12-22 04:18:5878#include "content/public/browser/render_widget_host.h"
79#include "content/public/browser/render_widget_host_view.h"
Mikel Astizba9cf2fd2017-12-17 10:38:1080#include "content/public/browser/replaced_navigation_entry_data.h"
[email protected]4c3a23582012-08-18 08:54:3481#include "content/public/browser/storage_partition.h"
[email protected]d1198fd2012-08-13 22:50:1982#include "content/public/common/content_client.h"
[email protected]7f6f44c2011-12-14 13:23:3883#include "content/public/common/content_constants.h"
toyoshim86e34ec2016-02-25 08:56:1084#include "content/public/common/content_features.h"
Lei Zhang96031532019-10-10 19:05:4785#include "content/public/common/url_constants.h"
clamy7fced7b2017-11-16 19:52:4386#include "content/public/common/url_utils.h"
servolkf3955532015-05-16 00:01:5987#include "media/base/mime_util.h"
[email protected]a23de8572009-06-03 02:16:3288#include "net/base/escape.h"
Arthur Sonzogni620cec62018-12-13 13:08:5789#include "net/http/http_status_code.h"
Shivani Sharma93329102019-01-24 19:44:1890#include "services/metrics/public/cpp/ukm_builders.h"
91#include "services/metrics/public/cpp/ukm_recorder.h"
Yue Ru Sun128804932020-09-30 22:19:1792#include "services/metrics/public/cpp/ukm_source_id.h"
[email protected]9677a3c2012-12-22 04:18:5893#include "skia/ext/platform_canvas.h"
Marijn Kruisselbrink0c87e6e2018-06-22 22:57:3994#include "third_party/blink/public/common/blob/blob_utils.h"
Blink Reformata30d4232018-04-07 15:31:0695#include "third_party/blink/public/common/mime_util/mime_util.h"
Carlos Caballeroede6f8c2021-01-28 11:01:5096#include "third_party/blink/public/common/page_state/page_state_serialization.h"
[email protected]cca6f392014-05-28 21:32:2697#include "url/url_constants.h"
initial.commit09911bf2008-07-26 23:55:2998
[email protected]8ff00d72012-10-23 19:12:2199namespace content {
[email protected]e9ba4472008-09-14 15:42:43100namespace {
101
102// Invoked when entries have been pruned, or removed. For example, if the
103// current entries are [google, digg, yahoo], with the current entry google,
104// and the user types in cnet, then digg and yahoo are pruned.
[email protected]d202a7c2012-01-04 07:53:47105void NotifyPrunedEntries(NavigationControllerImpl* nav_controller,
Shivani Sharmab9c46de82019-02-08 16:54:50106 int index,
[email protected]c12bf1a12008-09-17 16:28:49107 int count) {
[email protected]8ff00d72012-10-23 19:12:21108 PrunedDetails details;
Shivani Sharmab9c46de82019-02-08 16:54:50109 details.index = index;
[email protected]c12bf1a12008-09-17 16:28:49110 details.count = count;
Sam McNally5c087a32017-08-25 01:46:14111 nav_controller->delegate()->NotifyNavigationListPruned(details);
[email protected]e9ba4472008-09-14 15:42:43112}
113
[email protected]e9ba4472008-09-14 15:42:43114// Configure all the NavigationEntries in entries for restore. This resets
115// the transition type to reload and makes sure the content state isn't empty.
116void ConfigureEntriesForRestore(
dcheng9bfa5162016-04-09 01:00:57117 std::vector<std::unique_ptr<NavigationEntryImpl>>* entries,
toyoshim0df1d3a2016-09-09 09:52:48118 RestoreType type) {
Lei Zhang96031532019-10-10 19:05:47119 for (auto& entry : *entries) {
[email protected]e9ba4472008-09-14 15:42:43120 // Use a transition type of reload so that we don't incorrectly increase
121 // the typed count.
Lei Zhang96031532019-10-10 19:05:47122 entry->SetTransitionType(ui::PAGE_TRANSITION_RELOAD);
123 entry->set_restore_type(type);
[email protected]e9ba4472008-09-14 15:42:43124 }
125}
126
[email protected]bf70edce2012-06-20 22:32:22127// Determines whether or not we should be carrying over a user agent override
128// between two NavigationEntries.
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57129bool ShouldKeepOverride(NavigationEntry* last_entry) {
[email protected]bf70edce2012-06-20 22:32:22130 return last_entry && last_entry->GetIsOverridingUserAgent();
131}
132
Camille Lamy5193caa2018-10-12 11:59:42133// Determines whether to override user agent for a navigation.
134bool ShouldOverrideUserAgent(
135 NavigationController::UserAgentOverrideOption override_user_agent,
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57136 NavigationEntry* last_committed_entry) {
Camille Lamy5193caa2018-10-12 11:59:42137 switch (override_user_agent) {
138 case NavigationController::UA_OVERRIDE_INHERIT:
139 return ShouldKeepOverride(last_committed_entry);
140 case NavigationController::UA_OVERRIDE_TRUE:
141 return true;
142 case NavigationController::UA_OVERRIDE_FALSE:
143 return false;
Camille Lamy5193caa2018-10-12 11:59:42144 }
145 NOTREACHED();
146 return false;
147}
148
clamy0a656e42018-02-06 18:18:28149// Returns true this navigation should be treated as a reload. For e.g.
150// navigating to the last committed url via the address bar or clicking on a
151// link which results in a navigation to the last committed or pending
152// navigation, etc.
Fergal Daly766177d2020-07-07 07:54:04153// |node| is the FrameTreeNode which is navigating. |url|, |virtual_url|,
154// |base_url_for_data_url|, |transition_type| correspond to the new navigation
155// (i.e. the pending NavigationEntry). |last_committed_entry| is the last
156// navigation that committed.
157bool ShouldTreatNavigationAsReload(FrameTreeNode* node,
158 const GURL& url,
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57159 const GURL& virtual_url,
160 const GURL& base_url_for_data_url,
161 ui::PageTransition transition_type,
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57162 bool is_post,
163 bool is_reload,
164 bool is_navigation_to_existing_entry,
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57165 NavigationEntryImpl* last_committed_entry) {
Fergal Daly766177d2020-07-07 07:54:04166 if (is_reload || is_navigation_to_existing_entry)
clamy0a656e42018-02-06 18:18:28167 return false;
clamy0a656e42018-02-06 18:18:28168 // Only convert to reload if at least one navigation committed.
169 if (!last_committed_entry)
ananta3bdd8ae2016-12-22 17:11:55170 return false;
171
arthursonzogni7a8243682017-12-14 16:41:42172 // Skip navigations initiated by external applications.
clamy0a656e42018-02-06 18:18:28173 if (transition_type & ui::PAGE_TRANSITION_FROM_API)
arthursonzogni7a8243682017-12-14 16:41:42174 return false;
175
ananta3bdd8ae2016-12-22 17:11:55176 // We treat (PAGE_TRANSITION_RELOAD | PAGE_TRANSITION_FROM_ADDRESS_BAR),
177 // PAGE_TRANSITION_TYPED or PAGE_TRANSITION_LINK transitions as navigations
178 // which should be treated as reloads.
clamy0a656e42018-02-06 18:18:28179 bool transition_type_can_be_converted = false;
180 if (ui::PageTransitionCoreTypeIs(transition_type,
181 ui::PAGE_TRANSITION_RELOAD) &&
182 (transition_type & ui::PAGE_TRANSITION_FROM_ADDRESS_BAR)) {
183 transition_type_can_be_converted = true;
ananta3bdd8ae2016-12-22 17:11:55184 }
clamy0a656e42018-02-06 18:18:28185 if (ui::PageTransitionCoreTypeIs(transition_type,
ananta3bdd8ae2016-12-22 17:11:55186 ui::PAGE_TRANSITION_TYPED)) {
clamy0a656e42018-02-06 18:18:28187 transition_type_can_be_converted = true;
188 }
189 if (ui::PageTransitionCoreTypeIs(transition_type, ui::PAGE_TRANSITION_LINK))
190 transition_type_can_be_converted = true;
191 if (!transition_type_can_be_converted)
192 return false;
193
194 // This check is required for cases like view-source:, etc. Here the URL of
195 // the navigation entry would contain the url of the page, while the virtual
196 // URL contains the full URL including the view-source prefix.
197 if (virtual_url != last_committed_entry->GetVirtualURL())
198 return false;
199
Fergal Daly766177d2020-07-07 07:54:04200 // Check that the URLs match.
201 FrameNavigationEntry* frame_entry = last_committed_entry->GetFrameEntry(node);
202 // If there's no frame entry then by definition the URLs don't match.
203 if (!frame_entry)
204 return false;
205
206 if (url != frame_entry->url())
clamy0a656e42018-02-06 18:18:28207 return false;
208
209 // This check is required for Android WebView loadDataWithBaseURL. Apps
210 // can pass in anything in the base URL and we need to ensure that these
211 // match before classifying it as a reload.
212 if (url.SchemeIs(url::kDataScheme) && base_url_for_data_url.is_valid()) {
213 if (base_url_for_data_url != last_committed_entry->GetBaseURLForDataURL())
214 return false;
ananta3bdd8ae2016-12-22 17:11:55215 }
216
clamy0a656e42018-02-06 18:18:28217 // Skip entries with SSL errors.
218 if (last_committed_entry->ssl_error())
219 return false;
220
221 // Don't convert to a reload when the last navigation was a POST or the new
222 // navigation is a POST.
Fergal Daly766177d2020-07-07 07:54:04223 if (frame_entry->get_has_post_data() || is_post)
clamy0a656e42018-02-06 18:18:28224 return false;
225
226 return true;
ananta3bdd8ae2016-12-22 17:11:55227}
228
Nasko Oskov03912102019-01-11 00:21:32229bool DoesURLMatchOriginForNavigation(
230 const GURL& url,
231 const base::Optional<url::Origin>& origin) {
232 // If there is no origin supplied there is nothing to match. This can happen
233 // for navigations to a pending entry and therefore it should be allowed.
234 if (!origin)
235 return true;
236
237 return origin->CanBeDerivedFrom(url);
238}
239
240base::Optional<url::Origin> GetCommittedOriginForFrameEntry(
arthursonzogni73fe3212020-11-17 13:24:07241 const mojom::DidCommitProvisionalLoadParams& params) {
Nasko Oskov03912102019-01-11 00:21:32242 // Error pages commit in an opaque origin, yet have the real URL that resulted
243 // in an error as the |params.url|. Since successful reload of an error page
244 // should commit in the correct origin, setting the opaque origin on the
245 // FrameNavigationEntry will be incorrect.
246 if (params.url_is_unreachable)
247 return base::nullopt;
248
249 return base::make_optional(params.origin);
250}
251
Camille Lamy5193caa2018-10-12 11:59:42252bool IsValidURLForNavigation(bool is_main_frame,
253 const GURL& virtual_url,
254 const GURL& dest_url) {
255 // Don't attempt to navigate if the virtual URL is non-empty and invalid.
256 if (is_main_frame && !virtual_url.is_valid() && !virtual_url.is_empty()) {
257 LOG(WARNING) << "Refusing to load for invalid virtual URL: "
258 << virtual_url.possibly_invalid_spec();
259 return false;
260 }
261
262 // Don't attempt to navigate to non-empty invalid URLs.
263 if (!dest_url.is_valid() && !dest_url.is_empty()) {
264 LOG(WARNING) << "Refusing to load invalid URL: "
265 << dest_url.possibly_invalid_spec();
266 return false;
267 }
268
269 // The renderer will reject IPC messages with URLs longer than
270 // this limit, so don't attempt to navigate with a longer URL.
271 if (dest_url.spec().size() > url::kMaxURLChars) {
272 LOG(WARNING) << "Refusing to load URL as it exceeds " << url::kMaxURLChars
273 << " characters.";
274 return false;
275 }
276
Aaron Colwell33109c592020-04-21 21:31:19277 // Reject renderer debug URLs because they should have been handled before
278 // we get to this point. This check handles renderer debug URLs
279 // that are inside a view-source: URL (e.g. view-source:chrome://kill) and
280 // provides defense-in-depth if a renderer debug URL manages to get here via
281 // some other path. We want to reject the navigation here so it doesn't
282 // violate assumptions in downstream code.
283 if (IsRendererDebugURL(dest_url)) {
284 LOG(WARNING) << "Refusing to load renderer debug URL: "
285 << dest_url.possibly_invalid_spec();
286 return false;
287 }
288
Camille Lamy5193caa2018-10-12 11:59:42289 return true;
290}
291
Mikel Astizba9cf2fd2017-12-17 10:38:10292// See replaced_navigation_entry_data.h for details: this information is meant
293// to ensure |*output_entry| keeps track of its original URL (landing page in
294// case of server redirects) as it gets replaced (e.g. history.replaceState()),
295// without overwriting it later, for main frames.
296void CopyReplacedNavigationEntryDataIfPreviouslyEmpty(
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57297 NavigationEntryImpl* replaced_entry,
Mikel Astizba9cf2fd2017-12-17 10:38:10298 NavigationEntryImpl* output_entry) {
299 if (output_entry->GetReplacedEntryData().has_value())
300 return;
301
302 ReplacedNavigationEntryData data;
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57303 data.first_committed_url = replaced_entry->GetURL();
304 data.first_timestamp = replaced_entry->GetTimestamp();
305 data.first_transition_type = replaced_entry->GetTransitionType();
Charlie Reisb55438f2019-01-08 01:54:29306 output_entry->set_replaced_entry_data(data);
Mikel Astizba9cf2fd2017-12-17 10:38:10307}
308
Lucas Furukawa Gadanief8290a2019-07-29 20:27:51309mojom::NavigationType GetNavigationType(const GURL& old_url,
310 const GURL& new_url,
311 ReloadType reload_type,
312 NavigationEntryImpl* entry,
313 const FrameNavigationEntry& frame_entry,
danakjd83d706d2020-11-25 22:11:12314 bool has_pending_cross_document_commit,
danakjb952ef12021-01-14 19:58:49315 bool is_currently_error_page,
Lucas Furukawa Gadanief8290a2019-07-29 20:27:51316 bool is_same_document_history_load) {
clamyea99ea12018-05-28 13:54:23317 // Reload navigations
318 switch (reload_type) {
319 case ReloadType::NORMAL:
Lucas Furukawa Gadanief8290a2019-07-29 20:27:51320 return mojom::NavigationType::RELOAD;
clamyea99ea12018-05-28 13:54:23321 case ReloadType::BYPASSING_CACHE:
Lucas Furukawa Gadanief8290a2019-07-29 20:27:51322 return mojom::NavigationType::RELOAD_BYPASSING_CACHE;
clamyea99ea12018-05-28 13:54:23323 case ReloadType::ORIGINAL_REQUEST_URL:
Lucas Furukawa Gadanief8290a2019-07-29 20:27:51324 return mojom::NavigationType::RELOAD_ORIGINAL_REQUEST_URL;
clamyea99ea12018-05-28 13:54:23325 case ReloadType::NONE:
326 break; // Fall through to rest of function.
327 }
328
Lukasz Anforowicz6b75c0d2020-12-01 22:56:08329 if (entry->IsRestored()) {
Lei Zhang96031532019-10-10 19:05:47330 return entry->GetHasPostData() ? mojom::NavigationType::RESTORE_WITH_POST
331 : mojom::NavigationType::RESTORE;
clamyea99ea12018-05-28 13:54:23332 }
333
danakjb952ef12021-01-14 19:58:49334 const bool can_be_same_document =
335 // A pending cross-document commit means this navigation will not occur in
336 // the current document, as that document would end up being replaced in
337 // the meantime.
338 !has_pending_cross_document_commit &&
339 // If the current document is an error page, we should always treat it as
340 // a different-document navigation so that we'll attempt to load the
341 // document we're navigating to (and not stay in the current error page).
342 !is_currently_error_page;
danakjd83d706d2020-11-25 22:11:12343
clamyea99ea12018-05-28 13:54:23344 // History navigations.
345 if (frame_entry.page_state().IsValid()) {
danakjd83d706d2020-11-25 22:11:12346 return can_be_same_document && is_same_document_history_load
Lei Zhang96031532019-10-10 19:05:47347 ? mojom::NavigationType::HISTORY_SAME_DOCUMENT
348 : mojom::NavigationType::HISTORY_DIFFERENT_DOCUMENT;
clamyea99ea12018-05-28 13:54:23349 }
350 DCHECK(!is_same_document_history_load);
351
352 // A same-document fragment-navigation happens when the only part of the url
353 // that is modified is after the '#' character.
354 //
355 // When modifying this condition, please take a look at:
danakjd83d706d2020-11-25 22:11:12356 // FrameLoader::ShouldPerformFragmentNavigation().
clamyea99ea12018-05-28 13:54:23357 //
358 // Note: this check is only valid for navigations that are not history
359 // navigations. For instance, if the history is: 'A#bar' -> 'B' -> 'A#foo', a
360 // history navigation from 'A#foo' to 'A#bar' is not a same-document
361 // navigation, but a different-document one. This is why history navigation
362 // are classified before this check.
Lei Zhang96031532019-10-10 19:05:47363 bool is_same_doc = new_url.has_ref() && old_url.EqualsIgnoringRef(new_url) &&
364 frame_entry.method() == "GET";
danakjd83d706d2020-11-25 22:11:12365
366 // The one case where we do the wrong thing here and incorrectly choose
367 // SAME_DOCUMENT is if the navigation is browser-initiated but the document in
368 // the renderer is a frameset. All frameset navigations should be
369 // DIFFERENT_DOCUMENT, even if their URLs match. A renderer-initiated
370 // navigation would do the right thing, as it would send it to the browser and
371 // all renderer-initiated navigations are DIFFERENT_DOCUMENT (they don't get
372 // into this method). But since we can't tell that case here for browser-
373 // initiated navigations, we have to get the renderer involved. In that case
374 // the navigation would be restarted due to the renderer spending a reply of
375 // mojom::CommitResult::RestartCrossDocument.
376
377 return can_be_same_document && is_same_doc
378 ? mojom::NavigationType::SAME_DOCUMENT
379 : mojom::NavigationType::DIFFERENT_DOCUMENT;
clamyea99ea12018-05-28 13:54:23380}
381
Camille Lamy5193caa2018-10-12 11:59:42382// Adjusts the original input URL if needed, to get the URL to actually load and
383// the virtual URL, which may differ.
384void RewriteUrlForNavigation(const GURL& original_url,
385 BrowserContext* browser_context,
386 GURL* url_to_load,
387 GURL* virtual_url,
388 bool* reverse_on_redirect) {
Camille Lamy5193caa2018-10-12 11:59:42389 // Allow the browser URL handler to rewrite the URL. This will, for example,
390 // remove "view-source:" from the beginning of the URL to get the URL that
391 // will actually be loaded. This real URL won't be shown to the user, just
392 // used internally.
Lukasz Anforowicz7b078792020-10-20 17:04:31393 *url_to_load = *virtual_url = original_url;
Camille Lamy5193caa2018-10-12 11:59:42394 BrowserURLHandlerImpl::GetInstance()->RewriteURLIfNecessary(
395 url_to_load, browser_context, reverse_on_redirect);
396}
397
398#if DCHECK_IS_ON()
399// Helper sanity check function used in debug mode.
400void ValidateRequestMatchesEntry(NavigationRequest* request,
401 NavigationEntryImpl* entry) {
402 if (request->frame_tree_node()->IsMainFrame()) {
403 DCHECK_EQ(request->browser_initiated(), !entry->is_renderer_initiated());
404 DCHECK(ui::PageTransitionTypeIncludingQualifiersIs(
405 request->common_params().transition, entry->GetTransitionType()));
406 }
407 DCHECK_EQ(request->common_params().should_replace_current_entry,
408 entry->should_replace_entry());
Nasko Oskovc36327d2019-01-03 23:23:04409 DCHECK_EQ(request->commit_params().should_clear_history_list,
Camille Lamy5193caa2018-10-12 11:59:42410 entry->should_clear_history_list());
411 DCHECK_EQ(request->common_params().has_user_gesture,
412 entry->has_user_gesture());
413 DCHECK_EQ(request->common_params().base_url_for_data_url,
414 entry->GetBaseURLForDataURL());
Nasko Oskovc36327d2019-01-03 23:23:04415 DCHECK_EQ(request->commit_params().can_load_local_resources,
Camille Lamy5193caa2018-10-12 11:59:42416 entry->GetCanLoadLocalResources());
417 DCHECK_EQ(request->common_params().started_from_context_menu,
418 entry->has_started_from_context_menu());
419
420 FrameNavigationEntry* frame_entry =
421 entry->GetFrameEntry(request->frame_tree_node());
422 if (!frame_entry) {
423 NOTREACHED();
424 return;
425 }
426
Camille Lamy5193caa2018-10-12 11:59:42427 DCHECK_EQ(request->common_params().method, frame_entry->method());
428
Nasko Oskovc36327d2019-01-03 23:23:04429 size_t redirect_size = request->commit_params().redirects.size();
Camille Lamy5193caa2018-10-12 11:59:42430 if (redirect_size == frame_entry->redirect_chain().size()) {
431 for (size_t i = 0; i < redirect_size; ++i) {
Nasko Oskovc36327d2019-01-03 23:23:04432 DCHECK_EQ(request->commit_params().redirects[i],
Camille Lamy5193caa2018-10-12 11:59:42433 frame_entry->redirect_chain()[i]);
434 }
435 } else {
436 NOTREACHED();
437 }
438}
439#endif // DCHECK_IS_ON()
440
Dave Tapuska8bfd84c2019-03-26 20:47:16441// Returns whether the session history NavigationRequests in |navigations|
442// would stay within the subtree of the sandboxed iframe in
443// |sandbox_frame_tree_node_id|.
444bool DoesSandboxNavigationStayWithinSubtree(
445 int sandbox_frame_tree_node_id,
446 const std::vector<std::unique_ptr<NavigationRequest>>& navigations) {
447 for (auto& item : navigations) {
448 bool within_subtree = false;
449 // Check whether this NavigationRequest affects a frame within the
450 // sandboxed frame's subtree by walking up the tree looking for the
451 // sandboxed frame.
452 for (auto* frame = item->frame_tree_node(); frame;
Alexander Timin381e7e182020-04-28 19:04:03453 frame = FrameTreeNode::From(frame->parent())) {
Dave Tapuska8bfd84c2019-03-26 20:47:16454 if (frame->frame_tree_node_id() == sandbox_frame_tree_node_id) {
455 within_subtree = true;
456 break;
457 }
458 }
459 if (!within_subtree)
460 return false;
461 }
462 return true;
463}
464
Antonio Sartori78a749f2020-11-30 12:03:39465bool ShouldStoreDocumentPoliciesInFrameNavigationEntry(
466 const NavigationRequest* request) {
467 // For local schemes we need to store the policy container in the
468 // FrameNavigationEntry, so that we can reload it in case of history
469 // navigation.
470 //
471 // TODO(https://crbug.com/1146361 and https://crbug.com/1146362): blob: and
472 // filesystem: should be removed from this list when we have properly
473 // implemented storing their policy container in the respective store.
474 return (request->common_params().url.SchemeIs(url::kAboutScheme) ||
475 request->common_params().url.SchemeIs(url::kDataScheme) ||
476 request->common_params().url.SchemeIsBlob() ||
477 request->common_params().url.SchemeIsFileSystem());
478}
479
[email protected]e9ba4472008-09-14 15:42:43480} // namespace
481
arthursonzogni66f711c2019-10-08 14:40:36482// NavigationControllerImpl::PendingEntryRef------------------------------------
483
484NavigationControllerImpl::PendingEntryRef::PendingEntryRef(
485 base::WeakPtr<NavigationControllerImpl> controller)
486 : controller_(controller) {}
487
488NavigationControllerImpl::PendingEntryRef::~PendingEntryRef() {
489 if (!controller_) // Can be null with interstitials.
490 return;
491
492 controller_->PendingEntryRefDeleted(this);
493}
494
[email protected]d202a7c2012-01-04 07:53:47495// NavigationControllerImpl ----------------------------------------------------
initial.commit09911bf2008-07-26 23:55:29496
[email protected]23a918b2014-07-15 09:51:36497const size_t kMaxEntryCountForTestingNotSet = static_cast<size_t>(-1);
[email protected]9b51970d2011-12-09 23:10:23498
[email protected]765b35502008-08-21 00:51:20499// static
[email protected]d202a7c2012-01-04 07:53:47500size_t NavigationControllerImpl::max_entry_count_for_testing_ =
[email protected]9b51970d2011-12-09 23:10:23501 kMaxEntryCountForTestingNotSet;
[email protected]765b35502008-08-21 00:51:20502
[email protected]e6fec472013-05-14 05:29:02503// Should Reload check for post data? The default is true, but is set to false
[email protected]cdcb1dee2012-01-04 00:46:20504// when testing.
505static bool g_check_for_repost = true;
initial.commit09911bf2008-07-26 23:55:29506
[email protected]71fde352011-12-29 03:29:56507// static
dcheng9bfa5162016-04-09 01:00:57508std::unique_ptr<NavigationEntry> NavigationController::CreateNavigationEntry(
509 const GURL& url,
Lukasz Anforowicz641234d52019-11-07 21:07:10510 Referrer referrer,
511 base::Optional<url::Origin> initiator_origin,
512 ui::PageTransition transition,
513 bool is_renderer_initiated,
514 const std::string& extra_headers,
515 BrowserContext* browser_context,
516 scoped_refptr<network::SharedURLLoaderFactory> blob_url_loader_factory) {
517 return NavigationControllerImpl::CreateNavigationEntry(
518 url, referrer, std::move(initiator_origin),
519 nullptr /* source_site_instance */, transition, is_renderer_initiated,
Rakina Zata Amni66992a82020-06-24 03:57:52520 extra_headers, browser_context, std::move(blob_url_loader_factory),
Scott Violet5ae6c42e2020-10-28 02:47:37521 false /* should_replace_entry */, nullptr /* web_contents */);
Lukasz Anforowicz641234d52019-11-07 21:07:10522}
523
524// static
525std::unique_ptr<NavigationEntryImpl>
526NavigationControllerImpl::CreateNavigationEntry(
527 const GURL& url,
528 Referrer referrer,
529 base::Optional<url::Origin> initiator_origin,
530 SiteInstance* source_site_instance,
dcheng9bfa5162016-04-09 01:00:57531 ui::PageTransition transition,
532 bool is_renderer_initiated,
533 const std::string& extra_headers,
Marijn Kruisselbrink7a0d5e182018-05-24 22:55:09534 BrowserContext* browser_context,
Rakina Zata Amni66992a82020-06-24 03:57:52535 scoped_refptr<network::SharedURLLoaderFactory> blob_url_loader_factory,
Scott Violet5ae6c42e2020-10-28 02:47:37536 bool should_replace_entry,
537 WebContents* web_contents) {
Camille Lamy5193caa2018-10-12 11:59:42538 GURL url_to_load;
539 GURL virtual_url;
[email protected]71fde352011-12-29 03:29:56540 bool reverse_on_redirect = false;
Camille Lamy5193caa2018-10-12 11:59:42541 RewriteUrlForNavigation(url, browser_context, &url_to_load, &virtual_url,
542 &reverse_on_redirect);
[email protected]71fde352011-12-29 03:29:56543
Lukasz Anforowicz641234d52019-11-07 21:07:10544 // Let the NTP override the navigation params and pretend that this is a
545 // browser-initiated, bookmark-like navigation.
546 GetContentClient()->browser()->OverrideNavigationParams(
Scott Violet5ae6c42e2020-10-28 02:47:37547 web_contents, source_site_instance, &transition, &is_renderer_initiated,
548 &referrer, &initiator_origin);
Lukasz Anforowicz641234d52019-11-07 21:07:10549
Patrick Monettef507e982019-06-19 20:18:06550 auto entry = std::make_unique<NavigationEntryImpl>(
Ivan Kotenkov2c0d2bb32017-11-01 15:41:28551 nullptr, // The site instance for tabs is sent on navigation
552 // (WebContents::GetSiteInstance).
Lukasz Anforowicz435bcb582019-07-12 20:50:06553 url_to_load, referrer, initiator_origin, base::string16(), transition,
Camille Lamy5193caa2018-10-12 11:59:42554 is_renderer_initiated, blob_url_loader_factory);
555 entry->SetVirtualURL(virtual_url);
556 entry->set_user_typed_url(virtual_url);
[email protected]71fde352011-12-29 03:29:56557 entry->set_update_virtual_url_with_url(reverse_on_redirect);
558 entry->set_extra_headers(extra_headers);
Rakina Zata Amni66992a82020-06-24 03:57:52559 entry->set_should_replace_entry(should_replace_entry);
Patrick Monettef507e982019-06-19 20:18:06560 return entry;
[email protected]71fde352011-12-29 03:29:56561}
562
[email protected]cdcb1dee2012-01-04 00:46:20563// static
564void NavigationController::DisablePromptOnRepost() {
565 g_check_for_repost = false;
566}
567
[email protected]c5b88d82012-10-06 17:03:33568base::Time NavigationControllerImpl::TimeSmoother::GetSmoothedTime(
569 base::Time t) {
570 // If |t| is between the water marks, we're in a run of duplicates
571 // or just getting out of it, so increase the high-water mark to get
572 // a time that probably hasn't been used before and return it.
573 if (low_water_mark_ <= t && t <= high_water_mark_) {
574 high_water_mark_ += base::TimeDelta::FromMicroseconds(1);
575 return high_water_mark_;
576 }
577
578 // Otherwise, we're clear of the last duplicate run, so reset the
579 // water marks.
580 low_water_mark_ = high_water_mark_ = t;
581 return t;
582}
583
ckitagawa0faa5e42020-06-17 17:30:54584NavigationControllerImpl::ScopedShowRepostDialogForTesting::
585 ScopedShowRepostDialogForTesting()
586 : was_disallowed_(g_check_for_repost) {
587 g_check_for_repost = true;
588}
589
590NavigationControllerImpl::ScopedShowRepostDialogForTesting::
591 ~ScopedShowRepostDialogForTesting() {
592 g_check_for_repost = was_disallowed_;
593}
594
[email protected]d202a7c2012-01-04 07:53:47595NavigationControllerImpl::NavigationControllerImpl(
Carlos Caballero40b0efd2021-01-26 11:55:00596 BrowserContext* browser_context,
597 FrameTree& frame_tree,
598 NavigationControllerDelegate* delegate)
599 : frame_tree_(frame_tree),
600 browser_context_(browser_context),
[email protected]ec6c05f2013-10-23 18:41:57601 delegate_(delegate),
[email protected]69e797f2013-04-30 01:10:22602 ssl_manager_(this),
Lei Zhang96031532019-10-10 19:05:47603 get_timestamp_callback_(base::BindRepeating(&base::Time::Now)) {
[email protected]3d7474ff2011-07-27 17:47:37604 DCHECK(browser_context_);
initial.commit09911bf2008-07-26 23:55:29605}
606
[email protected]d202a7c2012-01-04 07:53:47607NavigationControllerImpl::~NavigationControllerImpl() {
arthursonzogni69a6a1b2019-09-17 09:23:00608 // The NavigationControllerImpl might be called inside its delegate
609 // destructor. Calling it is not valid anymore.
610 delegate_ = nullptr;
611 DiscardNonCommittedEntries();
initial.commit09911bf2008-07-26 23:55:29612}
613
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57614WebContents* NavigationControllerImpl::GetWebContents() {
[email protected]ec6c05f2013-10-23 18:41:57615 return delegate_->GetWebContents();
[email protected]fbc5e5f92012-01-02 06:08:32616}
617
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57618BrowserContext* NavigationControllerImpl::GetBrowserContext() {
[email protected]a26023822011-12-29 00:23:55619 return browser_context_;
620}
621
[email protected]d202a7c2012-01-04 07:53:47622void NavigationControllerImpl::Restore(
[email protected]5e369672009-11-03 23:48:30623 int selected_navigation,
[email protected]2ca1ea662012-10-04 02:26:36624 RestoreType type,
dcheng9bfa5162016-04-09 01:00:57625 std::vector<std::unique_ptr<NavigationEntry>>* entries) {
[email protected]ce3fa3c2009-04-20 19:55:57626 // Verify that this controller is unused and that the input is valid.
Lei Zhang96031532019-10-10 19:05:47627 DCHECK_EQ(0, GetEntryCount());
628 DCHECK(!GetPendingEntry());
[email protected]ce3fa3c2009-04-20 19:55:57629 DCHECK(selected_navigation >= 0 &&
[email protected]03838e22011-06-06 15:27:14630 selected_navigation < static_cast<int>(entries->size()));
arthursonzogni5c4c202d2017-04-25 23:41:27631 DCHECK_EQ(-1, pending_entry_index_);
[email protected]ce3fa3c2009-04-20 19:55:57632
[email protected]ce3fa3c2009-04-20 19:55:57633 needs_reload_ = true;
Bo Liucdfa4b12018-11-06 00:21:44634 needs_reload_type_ = NeedsReloadType::kRestoreSession;
avif16f85a72015-11-13 18:25:03635 entries_.reserve(entries->size());
636 for (auto& entry : *entries)
dcheng36b6aec92015-12-26 06:16:36637 entries_.push_back(
638 NavigationEntryImpl::FromNavigationEntry(std::move(entry)));
avif16f85a72015-11-13 18:25:03639
640 // At this point, the |entries| is full of empty scoped_ptrs, so it can be
641 // cleared out safely.
642 entries->clear();
[email protected]ce3fa3c2009-04-20 19:55:57643
644 // And finish the restore.
[email protected]2ca1ea662012-10-04 02:26:36645 FinishRestore(selected_navigation, type);
[email protected]ce3fa3c2009-04-20 19:55:57646}
647
toyoshim6142d96f2016-12-19 09:07:25648void NavigationControllerImpl::Reload(ReloadType reload_type,
649 bool check_for_repost) {
liaoyuke9168fba2017-03-10 19:20:28650 DCHECK_NE(ReloadType::NONE, reload_type);
Ivan Kotenkov2c0d2bb32017-11-01 15:41:28651 NavigationEntryImpl* entry = nullptr;
[email protected]59167c22013-06-03 18:07:32652 int current_index = -1;
653
Carlos IL42b416592019-10-07 23:10:36654 if (entry_replaced_by_post_commit_error_) {
655 // If there is an entry that was replaced by a currently active post-commit
656 // error navigation, this can't be the initial navigation.
657 DCHECK(!IsInitialNavigation());
658 // If the current entry is a post commit error, we reload the entry it
659 // replaced instead. We leave the error entry in place until a commit
660 // replaces it, but the pending entry points to the original entry in the
661 // meantime. Note that NavigateToExistingPendingEntry is able to handle the
662 // case that pending_entry_ != entries_[pending_entry_index_].
663 entry = entry_replaced_by_post_commit_error_.get();
664 current_index = GetCurrentEntryIndex();
665 } else if (IsInitialNavigation() && pending_entry_) {
666 // If we are reloading the initial navigation, just use the current
667 // pending entry. Otherwise look up the current entry.
[email protected]59167c22013-06-03 18:07:32668 entry = pending_entry_;
669 // The pending entry might be in entries_ (e.g., after a Clone), so we
670 // should also update the current_index.
671 current_index = pending_entry_index_;
672 } else {
arthursonzogni69a6a1b2019-09-17 09:23:00673 DiscardNonCommittedEntries();
[email protected]59167c22013-06-03 18:07:32674 current_index = GetCurrentEntryIndex();
675 if (current_index != -1) {
creis3da03872015-02-20 21:12:32676 entry = GetEntryAtIndex(current_index);
[email protected]59167c22013-06-03 18:07:32677 }
[email protected]979a4bc2013-04-24 01:27:15678 }
[email protected]241db352013-04-22 18:04:05679
[email protected]59167c22013-06-03 18:07:32680 // If we are no where, then we can't reload. TODO(darin): We should add a
681 // CanReload method.
682 if (!entry)
683 return;
684
Takashi Toyoshimac7df3c22019-06-25 14:18:47685 // Set ReloadType for |entry|.
toyoshima63c2a62016-09-29 09:03:26686 entry->set_reload_type(reload_type);
687
Aran Gilman37d11632019-10-08 23:07:15688 if (g_check_for_repost && check_for_repost && entry->GetHasPostData()) {
[email protected]a3a1d142008-12-19 00:42:30689 // The user is asking to reload a page with POST data. Prompt to make sure
[email protected]b5bb35f2009-02-05 20:17:07690 // they really want to do this. If they do, the dialog will call us back
691 // with check_for_repost = false.
[email protected]ec6c05f2013-10-23 18:41:57692 delegate_->NotifyBeforeFormRepostWarningShow();
[email protected]965bb092010-04-09 11:59:02693
[email protected]106a0812010-03-18 00:15:12694 pending_reload_ = reload_type;
[email protected]ec6c05f2013-10-23 18:41:57695 delegate_->ActivateAndShowRepostFormWarningDialog();
Lei Zhang96031532019-10-10 19:05:47696 return;
initial.commit09911bf2008-07-26 23:55:29697 }
Lei Zhang96031532019-10-10 19:05:47698
699 if (!IsInitialNavigation())
700 DiscardNonCommittedEntries();
701
702 pending_entry_ = entry;
703 pending_entry_index_ = current_index;
704 pending_entry_->SetTransitionType(ui::PAGE_TRANSITION_RELOAD);
705
706 NavigateToExistingPendingEntry(reload_type,
707 FrameTreeNode::kFrameTreeNodeInvalidId);
initial.commit09911bf2008-07-26 23:55:29708}
709
[email protected]d202a7c2012-01-04 07:53:47710void NavigationControllerImpl::CancelPendingReload() {
toyoshim0df1d3a2016-09-09 09:52:48711 DCHECK(pending_reload_ != ReloadType::NONE);
712 pending_reload_ = ReloadType::NONE;
[email protected]106a0812010-03-18 00:15:12713}
714
[email protected]d202a7c2012-01-04 07:53:47715void NavigationControllerImpl::ContinuePendingReload() {
toyoshim0df1d3a2016-09-09 09:52:48716 if (pending_reload_ == ReloadType::NONE) {
[email protected]106a0812010-03-18 00:15:12717 NOTREACHED();
718 } else {
toyoshim6142d96f2016-12-19 09:07:25719 Reload(pending_reload_, false);
toyoshim0df1d3a2016-09-09 09:52:48720 pending_reload_ = ReloadType::NONE;
[email protected]106a0812010-03-18 00:15:12721 }
722}
723
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57724bool NavigationControllerImpl::IsInitialNavigation() {
[email protected]27ba81c2012-08-21 17:04:09725 return is_initial_navigation_;
[email protected]c70f9b82010-04-21 07:31:11726}
727
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57728bool NavigationControllerImpl::IsInitialBlankNavigation() {
creis10a4ab72015-10-13 17:22:40729 // TODO(creis): Once we create a NavigationEntry for the initial blank page,
toyoshim0df1d3a2016-09-09 09:52:48730 // we'll need to check for entry count 1 and restore_type NONE (to exclude
731 // the cloned tab case).
creis10a4ab72015-10-13 17:22:40732 return IsInitialNavigation() && GetEntryCount() == 0;
733}
734
Aran Gilman37d11632019-10-08 23:07:15735NavigationEntryImpl* NavigationControllerImpl::GetEntryWithUniqueID(
736 int nav_entry_id) const {
avi254eff02015-07-01 08:27:58737 int index = GetEntryIndexWithUniqueID(nav_entry_id);
avif16f85a72015-11-13 18:25:03738 return (index != -1) ? entries_[index].get() : nullptr;
avi254eff02015-07-01 08:27:58739}
740
W. James MacLean1c40862c2020-04-27 21:05:57741void NavigationControllerImpl::RegisterExistingOriginToPreventOptInIsolation(
742 const url::Origin& origin) {
743 for (int i = 0; i < GetEntryCount(); i++) {
744 auto* entry = GetEntryAtIndex(i);
745 entry->RegisterExistingOriginToPreventOptInIsolation(origin);
746 }
747 if (entry_replaced_by_post_commit_error_) {
748 // It's possible we could come back to this entry if the error
749 // page/interstitial goes away.
750 entry_replaced_by_post_commit_error_
751 ->RegisterExistingOriginToPreventOptInIsolation(origin);
752 }
753 // TODO(wjmaclean): Register pending commit NavigationRequests rather than
754 // visiting pending_entry_, which lacks a committed origin. This will be done
755 // in https://chromium-review.googlesource.com/c/chromium/src/+/2136703.
756}
757
avi25764702015-06-23 15:43:37758void NavigationControllerImpl::SetPendingEntry(
dcheng9bfa5162016-04-09 01:00:57759 std::unique_ptr<NavigationEntryImpl> entry) {
arthursonzogni69a6a1b2019-09-17 09:23:00760 DiscardNonCommittedEntries();
avi25764702015-06-23 15:43:37761 pending_entry_ = entry.release();
arthursonzogni5c4c202d2017-04-25 23:41:27762 DCHECK_EQ(-1, pending_entry_index_);
[email protected]8ff00d72012-10-23 19:12:21763 NotificationService::current()->Notify(
Aran Gilman37d11632019-10-08 23:07:15764 NOTIFICATION_NAV_ENTRY_PENDING, Source<NavigationController>(this),
avi25764702015-06-23 15:43:37765 Details<NavigationEntry>(pending_entry_));
[email protected]765b35502008-08-21 00:51:20766}
767
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57768NavigationEntryImpl* NavigationControllerImpl::GetActiveEntry() {
[email protected]cbab76d2008-10-13 22:42:47769 if (pending_entry_)
770 return pending_entry_;
771 return GetLastCommittedEntry();
[email protected]765b35502008-08-21 00:51:20772}
773
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57774NavigationEntryImpl* NavigationControllerImpl::GetVisibleEntry() {
[email protected]59167c22013-06-03 18:07:32775 // The pending entry is safe to return for new (non-history), browser-
776 // initiated navigations. Most renderer-initiated navigations should not
777 // show the pending entry, to prevent URL spoof attacks.
778 //
779 // We make an exception for renderer-initiated navigations in new tabs, as
780 // long as no other page has tried to access the initial empty document in
781 // the new tab. If another page modifies this blank page, a URL spoof is
782 // possible, so we must stop showing the pending entry.
[email protected]59167c22013-06-03 18:07:32783 bool safe_to_show_pending =
784 pending_entry_ &&
785 // Require a new navigation.
avi0dca04d2015-01-26 20:21:09786 pending_entry_index_ == -1 &&
[email protected]59167c22013-06-03 18:07:32787 // Require either browser-initiated or an unmodified new tab.
[email protected]aa62afd2014-04-22 19:22:46788 (!pending_entry_->is_renderer_initiated() || IsUnmodifiedBlankTab());
[email protected]59167c22013-06-03 18:07:32789
790 // Also allow showing the pending entry for history navigations in a new tab,
791 // such as Ctrl+Back. In this case, no existing page is visible and no one
792 // can script the new tab before it commits.
Aran Gilman37d11632019-10-08 23:07:15793 if (!safe_to_show_pending && pending_entry_ && pending_entry_index_ != -1 &&
794 IsInitialNavigation() && !pending_entry_->is_renderer_initiated())
[email protected]59167c22013-06-03 18:07:32795 safe_to_show_pending = true;
796
797 if (safe_to_show_pending)
[email protected]867e1f92011-08-30 19:01:19798 return pending_entry_;
799 return GetLastCommittedEntry();
800}
801
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57802int NavigationControllerImpl::GetCurrentEntryIndex() {
[email protected]765b35502008-08-21 00:51:20803 if (pending_entry_index_ != -1)
804 return pending_entry_index_;
805 return last_committed_entry_index_;
806}
807
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57808NavigationEntryImpl* NavigationControllerImpl::GetLastCommittedEntry() {
[email protected]765b35502008-08-21 00:51:20809 if (last_committed_entry_index_ == -1)
Ivan Kotenkov2c0d2bb32017-11-01 15:41:28810 return nullptr;
avif16f85a72015-11-13 18:25:03811 return entries_[last_committed_entry_index_].get();
[email protected]765b35502008-08-21 00:51:20812}
813
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57814bool NavigationControllerImpl::CanViewSource() {
Carlos Caballeroede6f8c2021-01-28 11:01:50815 const std::string& mime_type = frame_tree_.root()
816 ->render_manager()
817 ->current_host()
818 ->contents_mime_type();
Kinuko Yasuda74702f92017-07-31 03:27:53819 bool is_viewable_mime_type = blink::IsSupportedNonImageMimeType(mime_type) &&
820 !media::IsSupportedMediaMimeType(mime_type);
[email protected]6286a3792013-10-09 04:03:27821 NavigationEntry* visible_entry = GetVisibleEntry();
822 return visible_entry && !visible_entry->IsViewSourceMode() &&
Carlos ILd51e7702020-05-07 18:51:39823 is_viewable_mime_type;
[email protected]31682282010-01-15 18:05:16824}
825
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57826int NavigationControllerImpl::GetLastCommittedEntryIndex() {
arthursonzogni5c4c202d2017-04-25 23:41:27827 // The last committed entry index must always be less than the number of
Carlos IL4dea8902020-05-26 15:14:29828 // entries. If there are no entries, it must be -1.
arthursonzogni5c4c202d2017-04-25 23:41:27829 DCHECK_LT(last_committed_entry_index_, GetEntryCount());
830 DCHECK(GetEntryCount() || last_committed_entry_index_ == -1);
[email protected]a26023822011-12-29 00:23:55831 return last_committed_entry_index_;
832}
833
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57834int NavigationControllerImpl::GetEntryCount() {
Carlos IL4dea8902020-05-26 15:14:29835 DCHECK_LE(entries_.size(), max_entry_count());
[email protected]a26023822011-12-29 00:23:55836 return static_cast<int>(entries_.size());
837}
838
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57839NavigationEntryImpl* NavigationControllerImpl::GetEntryAtIndex(int index) {
avi25764702015-06-23 15:43:37840 if (index < 0 || index >= GetEntryCount())
841 return nullptr;
842
avif16f85a72015-11-13 18:25:03843 return entries_[index].get();
[email protected]022af742011-12-28 18:37:25844}
845
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57846NavigationEntryImpl* NavigationControllerImpl::GetEntryAtOffset(int offset) {
avi057ce1492015-06-29 15:59:47847 return GetEntryAtIndex(GetIndexForOffset(offset));
[email protected]765b35502008-08-21 00:51:20848}
849
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57850int NavigationControllerImpl::GetIndexForOffset(int offset) {
[email protected]7bc2b032012-12-19 22:45:46851 return GetCurrentEntryIndex() + offset;
[email protected]9ba14052012-06-22 23:50:03852}
853
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57854bool NavigationControllerImpl::CanGoBack() {
Shivani Sharma298d12852019-01-22 20:04:03855 if (!base::FeatureList::IsEnabled(features::kHistoryManipulationIntervention))
856 return CanGoToOffset(-1);
857
858 for (int index = GetIndexForOffset(-1); index >= 0; index--) {
859 if (!GetEntryAtIndex(index)->should_skip_on_back_forward_ui())
860 return true;
861 }
862 return false;
[email protected]765b35502008-08-21 00:51:20863}
864
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57865bool NavigationControllerImpl::CanGoForward() {
avi56e40c92015-08-27 00:11:22866 return CanGoToOffset(1);
[email protected]765b35502008-08-21 00:51:20867}
868
Lucas Furukawa Gadani5553a1582019-01-08 18:55:57869bool NavigationControllerImpl::CanGoToOffset(int offset) {
[email protected]9ba14052012-06-22 23:50:03870 int index = GetIndexForOffset(offset);
871 return index >= 0 && index < GetEntryCount();
872}
873
[email protected]d202a7c2012-01-04 07:53:47874void NavigationControllerImpl::GoBack() {
shivanisha55201872018-12-13 04:29:06875 int target_index = GetIndexForOffset(-1);
876
877 // Log metrics for the number of entries that are eligible for skipping on
Shivani Sharma2d5b4b6b2019-01-08 16:07:16878 // back button and move the target index past the skippable entries, if
879 // history intervention is enabled.
shivanisha55201872018-12-13 04:29:06880 int count_entries_skipped = 0;
Shivani Sharma298d12852019-01-22 20:04:03881 bool all_skippable_entries = true;
Aran Gilman37d11632019-10-08 23:07:15882 bool history_intervention_enabled =
883 base::FeatureList::IsEnabled(features::kHistoryManipulationIntervention);
shivanisha55201872018-12-13 04:29:06884 for (int index = target_index; index >= 0; index--) {
Shivani Sharma2d5b4b6b2019-01-08 16:07:16885 if (GetEntryAtIndex(index)->should_skip_on_back_forward_ui()) {
shivanisha55201872018-12-13 04:29:06886 count_entries_skipped++;
Shivani Sharma2d5b4b6b2019-01-08 16:07:16887 } else {
888 if (history_intervention_enabled)
889 target_index = index;
Shivani Sharma298d12852019-01-22 20:04:03890 all_skippable_entries = false;
shivanisha55201872018-12-13 04:29:06891 break;
Shivani Sharma2d5b4b6b2019-01-08 16:07:16892 }
shivanisha55201872018-12-13 04:29:06893 }
894 UMA_HISTOGRAM_ENUMERATION("Navigation.BackForward.BackTargetSkipped",
895 count_entries_skipped, kMaxSessionHistoryEntries);
Shivani Sharma298d12852019-01-22 20:04:03896 UMA_HISTOGRAM_BOOLEAN("Navigation.BackForward.AllBackTargetsSkippable",
897 all_skippable_entries);
898
899 // Do nothing if all entries are skippable. Normally this path would not
900 // happen as consumers would have already checked it in CanGoBack but a lot of
901 // tests do not do that.
902 if (history_intervention_enabled && all_skippable_entries)
903 return;
shivanisha55201872018-12-13 04:29:06904
shivanisha55201872018-12-13 04:29:06905 GoToIndex(target_index);
[email protected]765b35502008-08-21 00:51:20906}
907
[email protected]d202a7c2012-01-04 07:53:47908void NavigationControllerImpl::GoForward() {
shivanisha55201872018-12-13 04:29:06909 int target_index = GetIndexForOffset(1);
910
911 // Log metrics for the number of entries that are eligible for skipping on
Shivani Sharma2d5b4b6b2019-01-08 16:07:16912 // forward button and move the target index past the skippable entries, if
913 // history intervention is enabled.
914 // Note that at least one entry (the last one) will be non-skippable since
915 // entries are marked skippable only when they add another entry because of
916 // redirect or pushState.
shivanisha55201872018-12-13 04:29:06917 int count_entries_skipped = 0;
Aran Gilman37d11632019-10-08 23:07:15918 bool history_intervention_enabled =
919 base::FeatureList::IsEnabled(features::kHistoryManipulationIntervention);
shivanisha55201872018-12-13 04:29:06920 for (size_t index = target_index; index < entries_.size(); index++) {
Shivani Sharma2d5b4b6b2019-01-08 16:07:16921 if (GetEntryAtIndex(index)->should_skip_on_back_forward_ui()) {
shivanisha55201872018-12-13 04:29:06922 count_entries_skipped++;
Shivani Sharma2d5b4b6b2019-01-08 16:07:16923 } else {
924 if (history_intervention_enabled)
925 target_index = index;
shivanisha55201872018-12-13 04:29:06926 break;
Shivani Sharma2d5b4b6b2019-01-08 16:07:16927 }
shivanisha55201872018-12-13 04:29:06928 }
929 UMA_HISTOGRAM_ENUMERATION("Navigation.BackForward.ForwardTargetSkipped",
930 count_entries_skipped, kMaxSessionHistoryEntries);
931
shivanisha55201872018-12-13 04:29:06932 GoToIndex(target_index);
[email protected]765b35502008-08-21 00:51:20933}
934
[email protected]d202a7c2012-01-04 07:53:47935void NavigationControllerImpl::GoToIndex(int index) {
Dave Tapuska8bfd84c2019-03-26 20:47:16936 GoToIndex(index, FrameTreeNode::kFrameTreeNodeInvalidId);
937}
938
939void NavigationControllerImpl::GoToIndex(int index,
940 int sandbox_frame_tree_node_id) {
sunjian30574a62017-03-21 21:39:44941 TRACE_EVENT0("browser,navigation,benchmark",
942 "NavigationControllerImpl::GoToIndex");
[email protected]765b35502008-08-21 00:51:20943 if (index < 0 || index >= static_cast<int>(entries_.size())) {
944 NOTREACHED();
945 return;
946 }
947
[email protected]cbab76d2008-10-13 22:42:47948 DiscardNonCommittedEntries();
[email protected]765b35502008-08-21 00:51:20949
arthursonzogni5c4c202d2017-04-25 23:41:27950 DCHECK_EQ(nullptr, pending_entry_);
951 DCHECK_EQ(-1, pending_entry_index_);
952 pending_entry_ = entries_[index].get();
[email protected]765b35502008-08-21 00:51:20953 pending_entry_index_ = index;
arthursonzogni5c4c202d2017-04-25 23:41:27954 pending_entry_->SetTransitionType(ui::PageTransitionFromInt(
955 pending_entry_->GetTransitionType() | ui::PAGE_TRANSITION_FORWARD_BACK));
Dave Tapuska8bfd84c2019-03-26 20:47:16956 NavigateToExistingPendingEntry(ReloadType::NONE, sandbox_frame_tree_node_id);
[email protected]765b35502008-08-21 00:51:20957}
958
[email protected]d202a7c2012-01-04 07:53:47959void NavigationControllerImpl::GoToOffset(int offset) {
toyoshim3af4d502016-03-30 12:38:12960 // Note: This is actually reached in unit tests.
[email protected]9ba14052012-06-22 23:50:03961 if (!CanGoToOffset(offset))
[email protected]765b35502008-08-21 00:51:20962 return;
963
[email protected]9ba14052012-06-22 23:50:03964 GoToIndex(GetIndexForOffset(offset));
[email protected]765b35502008-08-21 00:51:20965}
966
[email protected]41374f12013-07-24 02:49:28967bool NavigationControllerImpl::RemoveEntryAtIndex(int index) {
Aran Gilman37d11632019-10-08 23:07:15968 if (index == last_committed_entry_index_ || index == pending_entry_index_)
[email protected]41374f12013-07-24 02:49:28969 return false;
[email protected]6a13a6c2011-12-20 21:47:12970
[email protected]43032342011-03-21 14:10:31971 RemoveEntryAtIndexInternal(index);
[email protected]41374f12013-07-24 02:49:28972 return true;
[email protected]cbab76d2008-10-13 22:42:47973}
974
Michael Thiessen9b14d512019-09-23 21:19:47975void NavigationControllerImpl::PruneForwardEntries() {
976 DiscardNonCommittedEntries();
977 int remove_start_index = last_committed_entry_index_ + 1;
Lei Zhang96031532019-10-10 19:05:47978 int num_removed = static_cast<int>(entries_.size()) - remove_start_index;
Michael Thiessen9b14d512019-09-23 21:19:47979 if (num_removed <= 0)
980 return;
981 entries_.erase(entries_.begin() + remove_start_index, entries_.end());
982 NotifyPrunedEntries(this, remove_start_index /* start index */,
983 num_removed /* count */);
984}
985
Aran Gilman37d11632019-10-08 23:07:15986void NavigationControllerImpl::UpdateVirtualURLToURL(NavigationEntryImpl* entry,
987 const GURL& new_url) {
[email protected]38178a42009-12-17 18:58:32988 GURL new_virtual_url(new_url);
[email protected]825b1662012-03-12 19:07:31989 if (BrowserURLHandlerImpl::GetInstance()->ReverseURLRewrite(
[email protected]36fc0392011-12-25 03:59:51990 &new_virtual_url, entry->GetVirtualURL(), browser_context_)) {
991 entry->SetVirtualURL(new_virtual_url);
[email protected]38178a42009-12-17 18:58:32992 }
993}
994
Aran Gilman37d11632019-10-08 23:07:15995void NavigationControllerImpl::LoadURL(const GURL& url,
996 const Referrer& referrer,
997 ui::PageTransition transition,
998 const std::string& extra_headers) {
[email protected]cf002332012-08-14 19:17:47999 LoadURLParams params(url);
1000 params.referrer = referrer;
1001 params.transition_type = transition;
1002 params.extra_headers = extra_headers;
1003 LoadURLWithParams(params);
1004}
1005
1006void NavigationControllerImpl::LoadURLWithParams(const LoadURLParams& params) {
Lukasz Anforowicz435bcb582019-07-12 20:50:061007 if (params.is_renderer_initiated)
1008 DCHECK(params.initiator_origin.has_value());
1009
naskob8744d22014-08-28 17:07:431010 TRACE_EVENT1("browser,navigation",
Aran Gilman37d11632019-10-08 23:07:151011 "NavigationControllerImpl::LoadURLWithParams", "url",
1012 params.url.possibly_invalid_spec());
Ian Vollick9dda0522019-09-11 02:24:291013 bool is_explicit_navigation =
1014 GetContentClient()->browser()->IsExplicitNavigation(
1015 params.transition_type);
1016 if (HandleDebugURL(params.url, params.transition_type,
1017 is_explicit_navigation)) {
[email protected]47752982014-07-29 08:01:431018 // If Telemetry is running, allow the URL load to proceed as if it's
1019 // unhandled, otherwise Telemetry can't tell if Navigation completed.
avi83883c82014-12-23 00:08:491020 if (!base::CommandLine::ForCurrentProcess()->HasSwitch(
[email protected]47752982014-07-29 08:01:431021 cc::switches::kEnableGpuBenchmarking))
1022 return;
1023 }
[email protected]8bf1048012012-02-08 01:22:181024
[email protected]cf002332012-08-14 19:17:471025 // Checks based on params.load_type.
1026 switch (params.load_type) {
1027 case LOAD_TYPE_DEFAULT:
lukasza477a5a22016-06-16 18:28:431028 case LOAD_TYPE_HTTP_POST:
[email protected]cf002332012-08-14 19:17:471029 break;
1030 case LOAD_TYPE_DATA:
[email protected]cca6f392014-05-28 21:32:261031 if (!params.url.SchemeIs(url::kDataScheme)) {
[email protected]cf002332012-08-14 19:17:471032 NOTREACHED() << "Data load must use data scheme.";
1033 return;
1034 }
1035 break;
Lukasz Anforowiczbb0cfd5e2017-12-14 22:39:461036 }
[email protected]e47ae9472011-10-13 19:48:341037
[email protected]e47ae9472011-10-13 19:48:341038 // The user initiated a load, we don't need to reload anymore.
1039 needs_reload_ = false;
1040
clamy21718cc22018-06-13 13:34:241041 NavigateWithoutEntry(params);
[email protected]132e281a2012-07-31 18:32:441042}
1043
Mohamed Abdelhalim833de902019-09-16 17:41:451044bool NavigationControllerImpl::PendingEntryMatchesRequest(
1045 NavigationRequest* request) const {
creisb4dc9332016-03-14 21:39:191046 return pending_entry_ &&
Mohamed Abdelhalim833de902019-09-16 17:41:451047 pending_entry_->GetUniqueID() == request->nav_entry_id();
creisb4dc9332016-03-14 21:39:191048}
1049
[email protected]d202a7c2012-01-04 07:53:471050bool NavigationControllerImpl::RendererDidNavigate(
creis3da03872015-02-20 21:12:321051 RenderFrameHostImpl* rfh,
arthursonzogni73fe3212020-11-17 13:24:071052 const mojom::DidCommitProvisionalLoadParams& params,
peary21b0f797b2016-09-28 17:28:331053 LoadCommittedDetails* details,
Eugene But712f03d2018-05-22 16:03:441054 bool is_same_document_navigation,
Shivani Sharmaffb32b82019-04-09 16:58:471055 bool previous_document_was_activated,
Camille Lamy10aafcd32018-12-05 15:48:131056 NavigationRequest* navigation_request) {
1057 DCHECK(navigation_request);
[email protected]cd2e15742013-03-08 04:08:311058 is_initial_navigation_ = false;
1059
[email protected]0e8db942008-09-24 21:21:481060 // Save the previous state before we clobber it.
aelias100c9192017-01-13 00:01:431061 bool overriding_user_agent_changed = false;
[email protected]0e8db942008-09-24 21:21:481062 if (GetLastCommittedEntry()) {
Carlos IL42b416592019-10-07 23:10:361063 if (entry_replaced_by_post_commit_error_) {
1064 if (is_same_document_navigation) {
1065 // Same document navigations should not be possible on error pages and
1066 // would leave the controller in a weird state. Kill the renderer if
1067 // that happens.
1068 bad_message::ReceivedBadMessage(
1069 rfh->GetProcess(), bad_message::NC_SAME_DOCUMENT_POST_COMMIT_ERROR);
1070 }
1071 // Any commit while a post-commit error page is showing should put the
1072 // original entry back, replacing the error page's entry. This includes
1073 // reloads, where the original entry was used as the pending entry and
1074 // should now be at the correct index at commit time.
1075 entries_[last_committed_entry_index_] =
1076 std::move(entry_replaced_by_post_commit_error_);
1077 }
Fergal Daly8e33cf62020-12-12 01:06:071078 details->previous_main_frame_url = GetLastCommittedEntry()->GetURL();
[email protected]a26023822011-12-29 00:23:551079 details->previous_entry_index = GetLastCommittedEntryIndex();
aelias100c9192017-01-13 00:01:431080 if (pending_entry_ &&
1081 pending_entry_->GetIsOverridingUserAgent() !=
1082 GetLastCommittedEntry()->GetIsOverridingUserAgent())
1083 overriding_user_agent_changed = true;
[email protected]0e8db942008-09-24 21:21:481084 } else {
Fergal Daly8e33cf62020-12-12 01:06:071085 details->previous_main_frame_url = GURL();
[email protected]0e8db942008-09-24 21:21:481086 details->previous_entry_index = -1;
1087 }
[email protected]ecd9d8702008-08-28 22:10:171088
Alexander Timind2f2e4f22019-04-02 20:04:531089 // TODO(altimin, crbug.com/933147): Remove this logic after we are done with
1090 // implementing back-forward cache.
1091
1092 // Create a new metrics object or reuse the previous one depending on whether
1093 // it's a main frame navigation or not.
1094 scoped_refptr<BackForwardCacheMetrics> back_forward_cache_metrics =
1095 BackForwardCacheMetrics::CreateOrReuseBackForwardCacheMetrics(
1096 GetLastCommittedEntry(), !rfh->GetParent(),
1097 params.document_sequence_number);
1098 // Notify the last active entry that we have navigated away.
1099 if (!rfh->GetParent() && !is_same_document_navigation) {
1100 if (NavigationEntryImpl* navigation_entry = GetLastCommittedEntry()) {
1101 if (auto* metrics = navigation_entry->back_forward_cache_metrics()) {
Alexander Timinde527cd2019-12-02 09:41:121102 metrics->MainFrameDidNavigateAwayFromDocument(rfh, details,
1103 navigation_request);
Alexander Timind2f2e4f22019-04-02 20:04:531104 }
1105 }
1106 }
1107
fdegans9caf66a2015-07-30 21:10:421108 // If there is a pending entry at this point, it should have a SiteInstance,
1109 // except for restored entries.
jam48cea9082017-02-15 06:13:291110 bool was_restored = false;
toyoshim0df1d3a2016-09-09 09:52:481111 DCHECK(pending_entry_index_ == -1 || pending_entry_->site_instance() ||
Lukasz Anforowicz6b75c0d2020-12-01 22:56:081112 pending_entry_->IsRestored());
1113 if (pending_entry_ && pending_entry_->IsRestored()) {
Lukasz Anforowicz0de0f452020-12-02 19:57:151114 pending_entry_->set_restore_type(RestoreType::kNotRestored);
jam48cea9082017-02-15 06:13:291115 was_restored = true;
toyoshim0df1d3a2016-09-09 09:52:481116 }
[email protected]e9ba4472008-09-14 15:42:431117
Nasko Oskovaee2f862018-06-15 00:05:521118 // If this is a navigation to a matching pending_entry_ and the SiteInstance
1119 // has changed, this must be treated as a new navigation with replacement.
1120 // Set the replacement bit here and ClassifyNavigation will identify this
Charlie Reisc0f17d2d2021-01-12 18:52:491121 // case and return NEW_ENTRY.
Nasko Oskovaee2f862018-06-15 00:05:521122 if (!rfh->GetParent() && pending_entry_ &&
Rakina Zata Amnif6950d552020-11-24 03:26:101123 pending_entry_->GetUniqueID() ==
1124 navigation_request->commit_params().nav_entry_id &&
Nasko Oskovaee2f862018-06-15 00:05:521125 pending_entry_->site_instance() &&
1126 pending_entry_->site_instance() != rfh->GetSiteInstance()) {
1127 DCHECK_NE(-1, pending_entry_index_);
1128 // TODO(nasko,creis): Instead of setting this value here, set
1129 // should_replace_current_entry on the parameters we send to the
1130 // renderer process as part of CommitNavigation. The renderer should
1131 // in turn send it back here as part of |params| and it can be just
1132 // enforced and renderer process terminated on mismatch.
1133 details->did_replace_entry = true;
1134 } else {
1135 // The renderer tells us whether the navigation replaces the current entry.
1136 details->did_replace_entry = params.should_replace_current_entry;
1137 }
[email protected]bcd904482012-02-01 01:54:221138
[email protected]e9ba4472008-09-14 15:42:431139 // Do navigation-type specific actions. These will make and commit an entry.
Rakina Zata Amnif6950d552020-11-24 03:26:101140 details->type = ClassifyNavigation(rfh, params, navigation_request);
[email protected]4bf3522c2010-08-19 21:00:201141
eugenebutee08663a2017-04-27 17:43:121142 // is_same_document must be computed before the entry gets committed.
Eugene But712f03d2018-05-22 16:03:441143 details->is_same_document = is_same_document_navigation;
[email protected]b9d4dfdc2013-08-08 00:25:121144
Peter Boströmd7592132019-01-30 04:50:311145 // Make sure we do not discard the pending entry for a different ongoing
1146 // navigation when a same document commit comes in unexpectedly from the
1147 // renderer. Limit this to a very narrow set of conditions to avoid risks to
1148 // other navigation types. See https://crbug.com/900036.
1149 // TODO(crbug.com/926009): Handle history.pushState() as well.
1150 bool keep_pending_entry = is_same_document_navigation &&
Charlie Reisc0f17d2d2021-01-12 18:52:491151 details->type == NAVIGATION_TYPE_EXISTING_ENTRY &&
Peter Boströmd7592132019-01-30 04:50:311152 pending_entry_ &&
Mohamed Abdelhalim833de902019-09-16 17:41:451153 !PendingEntryMatchesRequest(navigation_request);
Peter Boströmd7592132019-01-30 04:50:311154
[email protected]0e8db942008-09-24 21:21:481155 switch (details->type) {
Charlie Reisc0f17d2d2021-01-12 18:52:491156 case NAVIGATION_TYPE_NEW_ENTRY:
1157 RendererDidNavigateToNewEntry(
shivanisha41f04c52018-12-12 15:52:051158 rfh, params, details->is_same_document, details->did_replace_entry,
Mohamed Abdelhalim833de902019-09-16 17:41:451159 previous_document_was_activated, navigation_request);
[email protected]e9ba4472008-09-14 15:42:431160 break;
Charlie Reisc0f17d2d2021-01-12 18:52:491161 case NAVIGATION_TYPE_EXISTING_ENTRY:
1162 RendererDidNavigateToExistingEntry(rfh, params, details->is_same_document,
1163 was_restored, navigation_request,
1164 keep_pending_entry);
[email protected]e9ba4472008-09-14 15:42:431165 break;
[email protected]8ff00d72012-10-23 19:12:211166 case NAVIGATION_TYPE_NEW_SUBFRAME:
Shivani Sharmaffb32b82019-04-09 16:58:471167 RendererDidNavigateNewSubframe(
1168 rfh, params, details->is_same_document, details->did_replace_entry,
Mohamed Abdelhalim833de902019-09-16 17:41:451169 previous_document_was_activated, navigation_request);
[email protected]e9ba4472008-09-14 15:42:431170 break;
[email protected]8ff00d72012-10-23 19:12:211171 case NAVIGATION_TYPE_AUTO_SUBFRAME:
Antonio Sartori78a749f2020-11-30 12:03:391172 if (!RendererDidNavigateAutoSubframe(
1173 rfh, params, details->is_same_document, navigation_request)) {
creisce0ef3572017-01-26 17:53:081174 // We don't send a notification about auto-subframe PageState during
1175 // UpdateStateForFrame, since it looks like nothing has changed. Send
1176 // it here at commit time instead.
1177 NotifyEntryChanged(GetLastCommittedEntry());
[email protected]e9ba4472008-09-14 15:42:431178 return false;
creis59d5a47cb2016-08-24 23:57:191179 }
[email protected]e9ba4472008-09-14 15:42:431180 break;
[email protected]8ff00d72012-10-23 19:12:211181 case NAVIGATION_TYPE_NAV_IGNORE:
[email protected]20d1c992011-04-12 21:17:491182 // If a pending navigation was in progress, this canceled it. We should
1183 // discard it and make sure it is removed from the URL bar. After that,
1184 // there is nothing we can do with this navigation, so we just return to
[email protected]e9ba4472008-09-14 15:42:431185 // the caller that nothing has happened.
arthursonzogni69a6a1b2019-09-17 09:23:001186 if (pending_entry_)
[email protected]20d1c992011-04-12 21:17:491187 DiscardNonCommittedEntries();
[email protected]e9ba4472008-09-14 15:42:431188 return false;
Aran Gilman37d11632019-10-08 23:07:151189 case NAVIGATION_TYPE_UNKNOWN:
[email protected]e9ba4472008-09-14 15:42:431190 NOTREACHED();
Aran Gilman37d11632019-10-08 23:07:151191 break;
[email protected]765b35502008-08-21 00:51:201192 }
1193
[email protected]688aa65c62012-09-28 04:32:221194 // At this point, we know that the navigation has just completed, so
1195 // record the time.
1196 //
1197 // TODO(akalin): Use "sane time" as described in
Adam Langley4463fb832018-01-28 22:42:261198 // https://www.chromium.org/developers/design-documents/sane-time .
[email protected]c5b88d82012-10-06 17:03:331199 base::Time timestamp =
1200 time_smoother_.GetSmoothedTime(get_timestamp_callback_.Run());
1201 DVLOG(1) << "Navigation finished at (smoothed) timestamp "
danakjf26536bf2020-09-10 00:46:131202 << timestamp.ToDeltaSinceWindowsEpoch().InMicroseconds();
[email protected]688aa65c62012-09-28 04:32:221203
Peter Boströmd7592132019-01-30 04:50:311204 // If we aren't keeping the pending entry, there shouldn't be one at this
1205 // point. Clear it again in case any error cases above forgot to do so.
1206 // TODO(pbos): Consider a CHECK here that verifies that the pending entry has
1207 // been cleared instead of protecting against it.
1208 if (!keep_pending_entry)
arthursonzogni69a6a1b2019-09-17 09:23:001209 DiscardNonCommittedEntries();
[email protected]f233e4232013-02-23 00:55:141210
[email protected]e9ba4472008-09-14 15:42:431211 // All committed entries should have nonempty content state so WebKit doesn't
1212 // get confused when we go back to them (see the function for details).
creis0cade2e2017-02-28 06:37:471213 DCHECK(params.page_state.IsValid()) << "Shouldn't see an empty PageState.";
creis3da03872015-02-20 21:12:321214 NavigationEntryImpl* active_entry = GetLastCommittedEntry();
[email protected]688aa65c62012-09-28 04:32:221215 active_entry->SetTimestamp(timestamp);
[email protected]f49737b32013-08-28 07:51:441216 active_entry->SetHttpStatusCode(params.http_status_code);
Alexander Timind2f2e4f22019-04-02 20:04:531217 // TODO(altimin, crbug.com/933147): Remove this logic after we are done with
1218 // implementing back-forward cache.
1219 if (!active_entry->back_forward_cache_metrics()) {
1220 active_entry->set_back_forward_cache_metrics(
1221 std::move(back_forward_cache_metrics));
1222 }
1223 active_entry->back_forward_cache_metrics()->DidCommitNavigation(
Hajime Hoshi446206e2019-10-18 18:36:251224 navigation_request,
1225 back_forward_cache_.IsAllowed(navigation_request->GetURL()));
naskoc7533512016-05-06 17:01:121226
Charles Reisc0507202017-09-21 00:40:021227 // Grab the corresponding FrameNavigationEntry for a few updates, but only if
1228 // the SiteInstance matches (to avoid updating the wrong entry by mistake).
1229 // A mismatch can occur if the renderer lies or due to a unique name collision
1230 // after a race with an OOPIF (see https://crbug.com/616820).
naskoc7533512016-05-06 17:01:121231 FrameNavigationEntry* frame_entry =
1232 active_entry->GetFrameEntry(rfh->frame_tree_node());
Charles Reisc0507202017-09-21 00:40:021233 if (frame_entry && frame_entry->site_instance() != rfh->GetSiteInstance())
1234 frame_entry = nullptr;
Charles Reisf44482022017-10-13 21:15:031235 // Make sure we've updated the PageState in one of the helper methods.
creisce0ef3572017-01-26 17:53:081236 // TODO(creis): Remove the "if" once https://crbug.com/522193 is fixed.
1237 if (frame_entry) {
Charles Reisf44482022017-10-13 21:15:031238 DCHECK(params.page_state == frame_entry->page_state());
Nasko Oskovbbcfc0002019-11-20 20:03:201239
1240 // Remember the bindings the renderer process has at this point, so that
1241 // we do not grant this entry additional bindings if we come back to it.
1242 frame_entry->SetBindings(rfh->GetEnabledBindings());
creis4e2ecb72015-06-20 00:46:301243 }
[email protected]132e281a2012-07-31 18:32:441244
[email protected]97d8f0d2013-10-29 16:49:211245 // Once it is committed, we no longer need to track several pieces of state on
1246 // the entry.
naskoc7533512016-05-06 17:01:121247 active_entry->ResetForCommit(frame_entry);
[email protected]60d6cca2013-04-30 08:47:131248
[email protected]49bd30e62011-03-22 20:12:591249 // The active entry's SiteInstance should match our SiteInstance.
[email protected]a1b99262013-12-27 21:56:221250 // TODO(creis): This check won't pass for subframes until we create entries
1251 // for subframe navigations.
avi39c1edd32015-06-04 20:06:001252 if (!rfh->GetParent())
creis77c9aa32015-09-25 19:59:421253 CHECK_EQ(active_entry->site_instance(), rfh->GetSiteInstance());
[email protected]49bd30e62011-03-22 20:12:591254
[email protected]e9ba4472008-09-14 15:42:431255 // Now prep the rest of the details for the notification and broadcast.
[email protected]0f38dc4552011-02-25 11:24:001256 details->entry = active_entry;
avi39c1edd32015-06-04 20:06:001257 details->is_main_frame = !rfh->GetParent();
[email protected]2e39d2e2009-02-19 18:41:311258 details->http_status_code = params.http_status_code;
estarka5635c42015-07-14 00:06:531259
Scott Violetc36f7462020-05-06 23:13:031260 // If the NavigationRequest was created without a NavigationEntry and
1261 // SetIsOverridingUserAgent() was called, it needs to be applied to the
1262 // NavigationEntry now.
1263 if (!navigation_request->nav_entry_id() &&
1264 navigation_request->was_set_overriding_user_agent_called()) {
1265 active_entry->SetIsOverridingUserAgent(
1266 navigation_request->entry_overrides_ua());
1267 }
1268
[email protected]93f230e02011-06-01 14:40:001269 NotifyNavigationEntryCommitted(details);
initial.commit09911bf2008-07-26 23:55:291270
John Abd-El-Malek380d3c5922017-09-08 00:20:311271 if (active_entry->GetURL().SchemeIs(url::kHttpsScheme) && !rfh->GetParent() &&
Mohamed Abdelhalim833de902019-09-16 17:41:451272 navigation_request->GetNetErrorCode() == net::OK) {
John Abd-El-Malek969cdd94e2017-07-10 22:18:161273 UMA_HISTOGRAM_BOOLEAN("Navigation.SecureSchemeHasSSLStatus",
1274 !!active_entry->GetSSL().certificate);
1275 }
1276
aelias100c9192017-01-13 00:01:431277 if (overriding_user_agent_changed)
1278 delegate_->UpdateOverridingUserAgent();
1279
creis03b48002015-11-04 00:54:561280 // Update the nav_entry_id for each RenderFrameHost in the tree, so that each
1281 // one knows the latest NavigationEntry it is showing (whether it has
1282 // committed anything in this navigation or not). This allows things like
1283 // state and title updates from RenderFrames to apply to the latest relevant
1284 // NavigationEntry.
dcheng57e39e22016-01-21 00:25:381285 int nav_entry_id = active_entry->GetUniqueID();
Carlos Caballero40b0efd2021-01-26 11:55:001286 for (FrameTreeNode* node : frame_tree_.Nodes())
dcheng57e39e22016-01-21 00:25:381287 node->current_frame_host()->set_nav_entry_id(nav_entry_id);
[email protected]e9ba4472008-09-14 15:42:431288 return true;
initial.commit09911bf2008-07-26 23:55:291289}
1290
[email protected]8ff00d72012-10-23 19:12:211291NavigationType NavigationControllerImpl::ClassifyNavigation(
creis3da03872015-02-20 21:12:321292 RenderFrameHostImpl* rfh,
Rakina Zata Amnif6950d552020-11-24 03:26:101293 const mojom::DidCommitProvisionalLoadParams& params,
1294 NavigationRequest* navigation_request) {
Piotr Tworekbad51282020-09-30 19:17:591295 TraceReturnReason<tracing_category::kNavigation> trace_return(
Nasko Oskovae49e292020-08-13 02:08:511296 "ClassifyNavigation");
1297
avi7c6f35e2015-05-08 17:52:381298 if (params.did_create_new_entry) {
Charlie Reisc0f17d2d2021-01-12 18:52:491299 // A new entry. We may or may not have a corresponding pending entry, and
avi7c6f35e2015-05-08 17:52:381300 // this may or may not be the main frame.
avi39c1edd32015-06-04 20:06:001301 if (!rfh->GetParent()) {
Charlie Reisc0f17d2d2021-01-12 18:52:491302 trace_return.set_return_reason("new entry, no parent, new entry");
1303 return NAVIGATION_TYPE_NEW_ENTRY;
avi7c6f35e2015-05-08 17:52:381304 }
1305
1306 // When this is a new subframe navigation, we should have a committed page
1307 // in which it's a subframe. This may not be the case when an iframe is
1308 // navigated on a popup navigated to about:blank (the iframe would be
1309 // written into the popup by script on the main page). For these cases,
1310 // there isn't any navigation stuff we can do, so just ignore it.
Nasko Oskovae49e292020-08-13 02:08:511311 if (!GetLastCommittedEntry()) {
1312 trace_return.set_return_reason("new entry, no last committed, ignore");
avi7c6f35e2015-05-08 17:52:381313 return NAVIGATION_TYPE_NAV_IGNORE;
Nasko Oskovae49e292020-08-13 02:08:511314 }
avi7c6f35e2015-05-08 17:52:381315
1316 // Valid subframe navigation.
Nasko Oskovae49e292020-08-13 02:08:511317 trace_return.set_return_reason("new entry, new subframe");
avi7c6f35e2015-05-08 17:52:381318 return NAVIGATION_TYPE_NEW_SUBFRAME;
1319 }
1320
Charlie Reisc0f17d2d2021-01-12 18:52:491321 // We only clear the session history in tests when navigating to a new entry.
avi7c6f35e2015-05-08 17:52:381322 DCHECK(!params.history_list_was_cleared);
1323
avi39c1edd32015-06-04 20:06:001324 if (rfh->GetParent()) {
avi7c6f35e2015-05-08 17:52:381325 // All manual subframes would be did_create_new_entry and handled above, so
1326 // we know this is auto.
Nasko Oskovae49e292020-08-13 02:08:511327 if (GetLastCommittedEntry()) {
1328 trace_return.set_return_reason("subframe, last commmited, auto subframe");
avi7c6f35e2015-05-08 17:52:381329 return NAVIGATION_TYPE_AUTO_SUBFRAME;
Nasko Oskovae49e292020-08-13 02:08:511330 }
Lei Zhang96031532019-10-10 19:05:471331
1332 // We ignore subframes created in non-committed pages; we'd appreciate if
1333 // people stopped doing that.
Nasko Oskovae49e292020-08-13 02:08:511334 trace_return.set_return_reason("subframe, no last commmited, ignore");
Lei Zhang96031532019-10-10 19:05:471335 return NAVIGATION_TYPE_NAV_IGNORE;
avi7c6f35e2015-05-08 17:52:381336 }
1337
Rakina Zata Amnif6950d552020-11-24 03:26:101338 const int nav_entry_id = navigation_request->commit_params().nav_entry_id;
1339 if (nav_entry_id == 0) {
avi7c6f35e2015-05-08 17:52:381340 // This is a renderer-initiated navigation (nav_entry_id == 0), but didn't
1341 // create a new page.
1342
1343 // Just like above in the did_create_new_entry case, it's possible to
1344 // scribble onto an uncommitted page. Again, there isn't any navigation
1345 // stuff that we can do, so ignore it here as well.
avi3a5b8f32015-05-28 17:50:231346 NavigationEntry* last_committed = GetLastCommittedEntry();
Nasko Oskovae49e292020-08-13 02:08:511347 if (!last_committed) {
1348 trace_return.set_return_reason("nav entry 0, no last committed, ignore");
avi7c6f35e2015-05-08 17:52:381349 return NAVIGATION_TYPE_NAV_IGNORE;
Nasko Oskovae49e292020-08-13 02:08:511350 }
avi7c6f35e2015-05-08 17:52:381351
Charles Reis1378111f2017-11-08 21:44:061352 // This is history.replaceState() or history.reload().
Nasko Oskov332593c2018-08-16 17:21:341353 // TODO(nasko): With error page isolation, reloading an existing session
1354 // history entry can result in change of SiteInstance. Check for such a case
Charlie Reisc0f17d2d2021-01-12 18:52:491355 // here and classify it as NEW_ENTRY, as such navigations should be treated
Nasko Oskov332593c2018-08-16 17:21:341356 // as new with replacement.
Nasko Oskovae49e292020-08-13 02:08:511357 trace_return.set_return_reason(
Charlie Reisc0f17d2d2021-01-12 18:52:491358 "nav entry 0, last committed, existing entry");
1359 return NAVIGATION_TYPE_EXISTING_ENTRY;
avi7c6f35e2015-05-08 17:52:381360 }
1361
Rakina Zata Amnif6950d552020-11-24 03:26:101362 if (pending_entry_ && pending_entry_->GetUniqueID() == nav_entry_id) {
Nasko Oskovaee2f862018-06-15 00:05:521363 // If the SiteInstance of the |pending_entry_| does not match the
1364 // SiteInstance that got committed, treat this as a new navigation with
1365 // replacement. This can happen if back/forward/reload encounters a server
1366 // redirect to a different site or an isolated error page gets successfully
1367 // reloaded into a different SiteInstance.
1368 if (pending_entry_->site_instance() &&
1369 pending_entry_->site_instance() != rfh->GetSiteInstance()) {
Charlie Reisc0f17d2d2021-01-12 18:52:491370 trace_return.set_return_reason("pending matching nav entry, new entry");
1371 return NAVIGATION_TYPE_NEW_ENTRY;
Nasko Oskovaee2f862018-06-15 00:05:521372 }
creis77c9aa32015-09-25 19:59:421373
Nasko Oskovaee2f862018-06-15 00:05:521374 if (pending_entry_index_ == -1) {
1375 // In this case, we have a pending entry for a load of a new URL but Blink
1376 // didn't do a new navigation (params.did_create_new_entry). First check
1377 // to make sure Blink didn't treat a new cross-process navigation as
1378 // inert, and thus set params.did_create_new_entry to false. In that case,
Charlie Reis7e2cb6d2021-01-26 01:27:161379 // we must treat it as NEW rather than the converted reload case below,
1380 // since the new SiteInstance doesn't match the last committed entry.
Nasko Oskovaee2f862018-06-15 00:05:521381 if (!GetLastCommittedEntry() ||
1382 GetLastCommittedEntry()->site_instance() != rfh->GetSiteInstance()) {
Charlie Reis7e2cb6d2021-01-26 01:27:161383 trace_return.set_return_reason("new pending, new entry");
Charlie Reisc0f17d2d2021-01-12 18:52:491384 return NAVIGATION_TYPE_NEW_ENTRY;
Nasko Oskovaee2f862018-06-15 00:05:521385 }
1386
1387 // Otherwise, this happens when you press enter in the URL bar to reload.
Charlie Reis7e2cb6d2021-01-26 01:27:161388 // We will create a pending entry, but NavigateWithoutEntry will convert
1389 // it to a reload since it's the same page and not create a new entry for
1390 // it. (The user doesn't want to have a new back/forward entry when they
1391 // do this.) Therefore we want to just ignore the pending entry and go
1392 // back to where we were (the "existing entry").
1393 trace_return.set_return_reason("new pending, existing (same) entry");
1394 return NAVIGATION_TYPE_EXISTING_ENTRY;
Nasko Oskovaee2f862018-06-15 00:05:521395 }
avi7c6f35e2015-05-08 17:52:381396 }
1397
creis26d22632017-04-21 20:23:561398 // Everything below here is assumed to be an existing entry, but if there is
1399 // no last committed entry, we must consider it a new navigation instead.
Nasko Oskovae49e292020-08-13 02:08:511400 if (!GetLastCommittedEntry()) {
Charlie Reisc0f17d2d2021-01-12 18:52:491401 trace_return.set_return_reason("no last committed, new entry");
1402 return NAVIGATION_TYPE_NEW_ENTRY;
Nasko Oskovae49e292020-08-13 02:08:511403 }
creis26d22632017-04-21 20:23:561404
avi7c6f35e2015-05-08 17:52:381405 if (params.intended_as_new_entry) {
1406 // This was intended to be a navigation to a new entry but the pending entry
Charlie Reisc0f17d2d2021-01-12 18:52:491407 // got cleared in the meanwhile. Classify as EXISTING_ENTRY because we may
1408 // or may not have a pending entry.
Charlie Reis7e2cb6d2021-01-26 01:27:161409 trace_return.set_return_reason("intended as new entry, existing entry");
Charlie Reisc0f17d2d2021-01-12 18:52:491410 return NAVIGATION_TYPE_EXISTING_ENTRY;
avi7c6f35e2015-05-08 17:52:381411 }
1412
1413 if (params.url_is_unreachable && failed_pending_entry_id_ != 0 &&
Rakina Zata Amnif6950d552020-11-24 03:26:101414 nav_entry_id == failed_pending_entry_id_) {
avi7c6f35e2015-05-08 17:52:381415 // If the renderer was going to a new pending entry that got cleared because
1416 // of an error, this is the case of the user trying to retry a failed load
Charlie Reisc0f17d2d2021-01-12 18:52:491417 // by pressing return. Classify as EXISTING_ENTRY because we probably don't
avi7c6f35e2015-05-08 17:52:381418 // have a pending entry.
Nasko Oskovae49e292020-08-13 02:08:511419 trace_return.set_return_reason(
Charlie Reisc0f17d2d2021-01-12 18:52:491420 "unreachable, matching pending, existing entry");
1421 return NAVIGATION_TYPE_EXISTING_ENTRY;
avi7c6f35e2015-05-08 17:52:381422 }
1423
Charlie Reisc0f17d2d2021-01-12 18:52:491424 // Now we know that the notification is for an existing entry; find it.
Rakina Zata Amnif6950d552020-11-24 03:26:101425 int existing_entry_index = GetEntryIndexWithUniqueID(nav_entry_id);
Nasko Oskovae49e292020-08-13 02:08:511426 trace_return.traced_value()->SetInteger("existing_entry_index",
1427 existing_entry_index);
avi7c6f35e2015-05-08 17:52:381428 if (existing_entry_index == -1) {
avi5cad4912015-06-19 05:25:441429 // The renderer has committed a navigation to an entry that no longer
1430 // exists. Because the renderer is showing that page, resurrect that entry.
Charlie Reisc0f17d2d2021-01-12 18:52:491431 trace_return.set_return_reason("existing entry -1, new entry");
1432 return NAVIGATION_TYPE_NEW_ENTRY;
avi7c6f35e2015-05-08 17:52:381433 }
1434
avi7c6f35e2015-05-08 17:52:381435 // Since we weeded out "new" navigations above, we know this is an existing
1436 // (back/forward) navigation.
Charlie Reisc0f17d2d2021-01-12 18:52:491437 trace_return.set_return_reason("default return, existing entry");
1438 return NAVIGATION_TYPE_EXISTING_ENTRY;
avi7c6f35e2015-05-08 17:52:381439}
1440
Charlie Reisc0f17d2d2021-01-12 18:52:491441void NavigationControllerImpl::RendererDidNavigateToNewEntry(
creis3da03872015-02-20 21:12:321442 RenderFrameHostImpl* rfh,
arthursonzogni73fe3212020-11-17 13:24:071443 const mojom::DidCommitProvisionalLoadParams& params,
eugenebut604866f2017-05-10 21:35:361444 bool is_same_document,
clamy3bf35e3c2016-11-10 15:59:441445 bool replace_entry,
Shivani Sharmaffb32b82019-04-09 16:58:471446 bool previous_document_was_activated,
Mohamed Abdelhalim833de902019-09-16 17:41:451447 NavigationRequest* request) {
dcheng9bfa5162016-04-09 01:00:571448 std::unique_ptr<NavigationEntryImpl> new_entry;
creisf49dfc92016-07-26 17:05:181449 bool update_virtual_url = false;
1450
Lukasz Anforowicz435bcb582019-07-12 20:50:061451 const base::Optional<url::Origin>& initiator_origin =
Mohamed Abdelhalim833de902019-09-16 17:41:451452 request->common_params().initiator_origin;
Lukasz Anforowicz435bcb582019-07-12 20:50:061453
creisf49dfc92016-07-26 17:05:181454 // First check if this is an in-page navigation. If so, clone the current
1455 // entry instead of looking at the pending entry, because the pending entry
1456 // does not have any subframe history items.
eugenebut604866f2017-05-10 21:35:361457 if (is_same_document && GetLastCommittedEntry()) {
Patrick Monette50e8bd82019-06-13 22:40:451458 auto frame_entry = base::MakeRefCounted<FrameNavigationEntry>(
Charles Reisd2a509f2017-09-27 23:47:481459 rfh->frame_tree_node()->unique_name(), params.item_sequence_number,
creisf49dfc92016-07-26 17:05:181460 params.document_sequence_number, rfh->GetSiteInstance(), nullptr,
Nasko Oskov03912102019-01-11 00:21:321461 params.url, (params.url_is_unreachable) ? nullptr : &params.origin,
arthursonzogni73fe3212020-11-17 13:24:071462 Referrer(*params.referrer), initiator_origin, params.redirects,
1463 params.page_state, params.method, params.post_id,
1464 nullptr /* blob_url_loader_factory */,
Antonio Sartori78a749f2020-11-30 12:03:391465 nullptr /* web_bundle_navigation_info */,
1466 // We will set the document policies later in this function.
1467 nullptr /* document_policies */);
Charles Reisf44482022017-10-13 21:15:031468
creisf49dfc92016-07-26 17:05:181469 new_entry = GetLastCommittedEntry()->CloneAndReplace(
Carlos Caballero40b0efd2021-01-26 11:55:001470 frame_entry, true, rfh->frame_tree_node(), frame_tree_.root());
jama78746e2017-02-22 17:21:571471 if (new_entry->GetURL().GetOrigin() != params.url.GetOrigin()) {
1472 // TODO(jam): we had one report of this with a URL that was redirecting to
1473 // only tildes. Until we understand that better, don't copy the cert in
1474 // this case.
1475 new_entry->GetSSL() = SSLStatus();
John Abd-El-Malek9cd697e2017-07-12 21:53:141476
John Abd-El-Malek380d3c5922017-09-08 00:20:311477 if (params.url.SchemeIs(url::kHttpsScheme) && !rfh->GetParent() &&
Mohamed Abdelhalim833de902019-09-16 17:41:451478 request->GetNetErrorCode() == net::OK) {
John Abd-El-Malek9cd697e2017-07-12 21:53:141479 UMA_HISTOGRAM_BOOLEAN(
1480 "Navigation.SecureSchemeHasSSLStatus.NewPageInPageOriginMismatch",
1481 !!new_entry->GetSSL().certificate);
1482 }
jama78746e2017-02-22 17:21:571483 }
creisf49dfc92016-07-26 17:05:181484
Patrick Monette50e8bd82019-06-13 22:40:451485 // It is expected that |frame_entry| is now owned by |new_entry|. This means
1486 // that |frame_entry| should now have a reference count of exactly 2: one
1487 // due to the local variable |frame_entry|, and another due to |new_entry|
1488 // also retaining one. This should never fail, because it's the main frame.
1489 CHECK(!frame_entry->HasOneRef() && frame_entry->HasAtLeastOneRef());
creisf49dfc92016-07-26 17:05:181490
1491 update_virtual_url = new_entry->update_virtual_url_with_url();
John Abd-El-Malek9cd697e2017-07-12 21:53:141492
John Abd-El-Malek380d3c5922017-09-08 00:20:311493 if (params.url.SchemeIs(url::kHttpsScheme) && !rfh->GetParent() &&
Mohamed Abdelhalim833de902019-09-16 17:41:451494 request->GetNetErrorCode() == net::OK) {
John Abd-El-Malek9cd697e2017-07-12 21:53:141495 UMA_HISTOGRAM_BOOLEAN("Navigation.SecureSchemeHasSSLStatus.NewPageInPage",
1496 !!new_entry->GetSSL().certificate);
1497 }
creisf49dfc92016-07-26 17:05:181498 }
1499
Charlie Reisc0f17d2d2021-01-12 18:52:491500 // Only make a copy of the pending entry if it is appropriate for the new
1501 // document that just loaded. Verify this by checking if the entry corresponds
Mohamed Abdelhalim833de902019-09-16 17:41:451502 // to the given NavigationRequest. Additionally, coarsely check that:
csharrison9a9142bc42016-03-01 17:24:041503 // 1. The SiteInstance hasn't been assigned to something else.
1504 // 2. The pending entry was intended as a new entry, rather than being a
1505 // history navigation that was interrupted by an unrelated,
1506 // renderer-initiated navigation.
1507 // TODO(csharrison): Investigate whether we can remove some of the coarser
1508 // checks.
Mohamed Abdelhalim833de902019-09-16 17:41:451509 if (!new_entry && PendingEntryMatchesRequest(request) &&
1510 pending_entry_index_ == -1 &&
[email protected]6dd86ab2013-02-27 00:30:341511 (!pending_entry_->site_instance() ||
[email protected]27dd82fd2014-03-03 22:11:431512 pending_entry_->site_instance() == rfh->GetSiteInstance())) {
creisef4a0cb2015-03-12 19:14:351513 new_entry = pending_entry_->Clone();
[email protected]e9ba4472008-09-14 15:42:431514
[email protected]f1eb87a2011-05-06 17:49:411515 update_virtual_url = new_entry->update_virtual_url_with_url();
Camille Lamy62b826012019-02-26 09:15:471516 new_entry->GetSSL() =
Mohamed Abdelhalim833de902019-09-16 17:41:451517 SSLStatus(request->GetSSLInfo().value_or(net::SSLInfo()));
John Abd-El-Malek9cd697e2017-07-12 21:53:141518
John Abd-El-Malek380d3c5922017-09-08 00:20:311519 if (params.url.SchemeIs(url::kHttpsScheme) && !rfh->GetParent() &&
Mohamed Abdelhalim833de902019-09-16 17:41:451520 request->GetNetErrorCode() == net::OK) {
John Abd-El-Malek9cd697e2017-07-12 21:53:141521 UMA_HISTOGRAM_BOOLEAN(
1522 "Navigation.SecureSchemeHasSSLStatus.NewPagePendingEntryMatches",
1523 !!new_entry->GetSSL().certificate);
1524 }
creisf49dfc92016-07-26 17:05:181525 }
1526
Charlie Reisc0f17d2d2021-01-12 18:52:491527 // For cross-document commits with no matching pending entry, create a new
1528 // entry.
creisf49dfc92016-07-26 17:05:181529 if (!new_entry) {
Lukasz Anforowicz435bcb582019-07-12 20:50:061530 new_entry = std::make_unique<NavigationEntryImpl>(
arthursonzogni73fe3212020-11-17 13:24:071531 rfh->GetSiteInstance(), params.url, Referrer(*params.referrer),
1532 initiator_origin,
Lukasz Anforowicz435bcb582019-07-12 20:50:061533 base::string16(), // title
Mohamed Abdelhalim833de902019-09-16 17:41:451534 params.transition, request->IsRendererInitiated(),
Lukasz Anforowicz435bcb582019-07-12 20:50:061535 nullptr); // blob_url_loader_factory
[email protected]f8f93eb2012-09-25 03:06:241536
1537 // Find out whether the new entry needs to update its virtual URL on URL
1538 // change and set up the entry accordingly. This is needed to correctly
1539 // update the virtual URL when replaceState is called after a pushState.
1540 GURL url = params.url;
1541 bool needs_update = false;
[email protected]47752982014-07-29 08:01:431542 BrowserURLHandlerImpl::GetInstance()->RewriteURLIfNecessary(
1543 &url, browser_context_, &needs_update);
[email protected]f8f93eb2012-09-25 03:06:241544 new_entry->set_update_virtual_url_with_url(needs_update);
1545
Charlie Reisc0f17d2d2021-01-12 18:52:491546 // When navigating to a new entry, give the browser URL handler a chance to
[email protected]f1eb87a2011-05-06 17:49:411547 // update the virtual URL based on the new URL. For example, this is needed
1548 // to show chrome://bookmarks/#1 when the bookmarks webui extension changes
1549 // the URL.
[email protected]f8f93eb2012-09-25 03:06:241550 update_virtual_url = needs_update;
Camille Lamy62b826012019-02-26 09:15:471551 new_entry->GetSSL() =
Mohamed Abdelhalim833de902019-09-16 17:41:451552 SSLStatus(request->GetSSLInfo().value_or(net::SSLInfo()));
John Abd-El-Malek9cd697e2017-07-12 21:53:141553
John Abd-El-Malek380d3c5922017-09-08 00:20:311554 if (params.url.SchemeIs(url::kHttpsScheme) && !rfh->GetParent() &&
Mohamed Abdelhalim833de902019-09-16 17:41:451555 request->GetNetErrorCode() == net::OK) {
John Abd-El-Malek9cd697e2017-07-12 21:53:141556 UMA_HISTOGRAM_BOOLEAN(
1557 "Navigation.SecureSchemeHasSSLStatus.NewPageNoMatchingEntry",
1558 !!new_entry->GetSSL().certificate);
1559 }
[email protected]e9ba4472008-09-14 15:42:431560 }
1561
wjmaclean7431bb22015-02-19 14:53:431562 // Don't use the page type from the pending entry. Some interstitial page
1563 // may have set the type to interstitial. Once we commit, however, the page
1564 // type must always be normal or error.
1565 new_entry->set_page_type(params.url_is_unreachable ? PAGE_TYPE_ERROR
1566 : PAGE_TYPE_NORMAL);
[email protected]ad23a092011-12-28 07:02:041567 new_entry->SetURL(params.url);
[email protected]f1eb87a2011-05-06 17:49:411568 if (update_virtual_url)
avi25764702015-06-23 15:43:371569 UpdateVirtualURLToURL(new_entry.get(), params.url);
arthursonzogni73fe3212020-11-17 13:24:071570 new_entry->SetReferrer(Referrer(*params.referrer));
[email protected]022af742011-12-28 18:37:251571 new_entry->SetTransitionType(params.transition);
[email protected]b6583592012-01-25 19:52:331572 new_entry->set_site_instance(
[email protected]27dd82fd2014-03-03 22:11:431573 static_cast<SiteInstanceImpl*>(rfh->GetSiteInstance()));
[email protected]7c16976c2012-08-04 02:38:231574 new_entry->SetOriginalRequestURL(params.original_request_url);
Rakina Zata Amnib597d632020-12-01 00:56:001575
1576 if (!is_same_document) {
1577 DCHECK_EQ(request->IsOverridingUserAgent() && !rfh->GetParent(),
1578 params.is_overriding_user_agent);
1579 } else {
1580 DCHECK_EQ(rfh->is_overriding_user_agent(), params.is_overriding_user_agent);
1581 }
[email protected]bf70edce2012-06-20 22:32:221582 new_entry->SetIsOverridingUserAgent(params.is_overriding_user_agent);
[email protected]e9ba4472008-09-14 15:42:431583
creis8b5cd4c2015-06-19 00:11:081584 // Update the FrameNavigationEntry for new main frame commits.
1585 FrameNavigationEntry* frame_entry =
1586 new_entry->GetFrameEntry(rfh->frame_tree_node());
Charles Reisd2a509f2017-09-27 23:47:481587 frame_entry->set_frame_unique_name(rfh->frame_tree_node()->unique_name());
creis8b5cd4c2015-06-19 00:11:081588 frame_entry->set_item_sequence_number(params.item_sequence_number);
1589 frame_entry->set_document_sequence_number(params.document_sequence_number);
Charles Reisf44482022017-10-13 21:15:031590 frame_entry->set_redirect_chain(params.redirects);
1591 frame_entry->SetPageState(params.page_state);
clamy432acb22016-04-15 19:41:431592 frame_entry->set_method(params.method);
1593 frame_entry->set_post_id(params.post_id);
Antonio Sartori78a749f2020-11-30 12:03:391594 frame_entry->set_document_policies(
1595 ComputeDocumentPoliciesForFrameEntry(rfh, is_same_document, request));
1596
Nasko Oskov03912102019-01-11 00:21:321597 if (!params.url_is_unreachable)
1598 frame_entry->set_committed_origin(params.origin);
Tsuyoshi Horob7b033e2020-03-09 15:23:311599 if (request->web_bundle_navigation_info()) {
1600 frame_entry->set_web_bundle_navigation_info(
1601 request->web_bundle_navigation_info()->Clone());
1602 }
creis8b5cd4c2015-06-19 00:11:081603
eugenebut604866f2017-05-10 21:35:361604 // history.pushState() is classified as a navigation to a new page, but sets
1605 // is_same_document to true. In this case, we already have the title and
creisf49dfc92016-07-26 17:05:181606 // favicon available, so set them immediately.
eugenebut604866f2017-05-10 21:35:361607 if (is_same_document && GetLastCommittedEntry()) {
[email protected]ff64b3e2014-05-31 04:07:331608 new_entry->SetTitle(GetLastCommittedEntry()->GetTitle());
[email protected]3a868f212014-08-09 10:41:191609 new_entry->GetFavicon() = GetLastCommittedEntry()->GetFavicon();
1610 }
[email protected]ff64b3e2014-05-31 04:07:331611
[email protected]60d6cca2013-04-30 08:47:131612 DCHECK(!params.history_list_was_cleared || !replace_entry);
1613 // The browser requested to clear the session history when it initiated the
1614 // navigation. Now we know that the renderer has updated its state accordingly
1615 // and it is safe to also clear the browser side history.
1616 if (params.history_list_was_cleared) {
arthursonzogni69a6a1b2019-09-17 09:23:001617 DiscardNonCommittedEntries();
[email protected]60d6cca2013-04-30 08:47:131618 entries_.clear();
1619 last_committed_entry_index_ = -1;
1620 }
1621
Nasko Oskovaee2f862018-06-15 00:05:521622 // If this is a new navigation with replacement and there is a
1623 // pending_entry_ which matches the navigation reported by the renderer
1624 // process, then it should be the one replaced, so update the
1625 // last_committed_entry_index_ to use it.
1626 if (replace_entry && pending_entry_index_ != -1 &&
Rakina Zata Amnif6950d552020-11-24 03:26:101627 pending_entry_->GetUniqueID() == request->commit_params().nav_entry_id) {
Nasko Oskovaee2f862018-06-15 00:05:521628 last_committed_entry_index_ = pending_entry_index_;
1629 }
1630
Alexander Timine3ec4192020-04-20 16:39:401631 SetShouldSkipOnBackForwardUIIfNeeded(
shivanigithube92c33da2020-09-14 13:01:411632 replace_entry, previous_document_was_activated,
Alexander Timine3ec4192020-04-20 16:39:401633 request->IsRendererInitiated(), request->GetPreviousPageUkmSourceId());
shivanisha41f04c52018-12-12 15:52:051634
Carlos IL42b416592019-10-07 23:10:361635 InsertOrReplaceEntry(std::move(new_entry), replace_entry,
1636 !request->post_commit_error_page_html().empty());
[email protected]e9ba4472008-09-14 15:42:431637}
1638
Charlie Reisc0f17d2d2021-01-12 18:52:491639void NavigationControllerImpl::RendererDidNavigateToExistingEntry(
creis3da03872015-02-20 21:12:321640 RenderFrameHostImpl* rfh,
arthursonzogni73fe3212020-11-17 13:24:071641 const mojom::DidCommitProvisionalLoadParams& params,
eugenebut604866f2017-05-10 21:35:361642 bool is_same_document,
jam48cea9082017-02-15 06:13:291643 bool was_restored,
Mohamed Abdelhalim833de902019-09-16 17:41:451644 NavigationRequest* request,
Peter Boströmd7592132019-01-30 04:50:311645 bool keep_pending_entry) {
creis26d22632017-04-21 20:23:561646 DCHECK(GetLastCommittedEntry()) << "ClassifyNavigation should guarantee "
1647 << "that a last committed entry exists.";
1648
[email protected]e9ba4472008-09-14 15:42:431649 // We should only get here for main frame navigations.
avi39c1edd32015-06-04 20:06:001650 DCHECK(!rfh->GetParent());
[email protected]e9ba4472008-09-14 15:42:431651
Charlie Reis7e2cb6d2021-01-26 01:27:161652 NavigationEntryImpl* entry = nullptr;
avicbdc4c12015-07-01 16:07:111653 if (params.intended_as_new_entry) {
Charlie Reis7e2cb6d2021-01-26 01:27:161654 // We're guaranteed to have a last committed entry if intended_as_new_entry
1655 // is true.
avicbdc4c12015-07-01 16:07:111656 entry = GetLastCommittedEntry();
Charlie Reis7e2cb6d2021-01-26 01:27:161657 DCHECK(entry);
1658
1659 // If the NavigationRequest matches a new pending entry and is classified as
1660 // EXISTING_ENTRY, then it is a navigation to the same URL that was
1661 // converted to a reload, such as a user pressing enter in the omnibox.
1662 if (pending_entry_ && pending_entry_index_ == -1 &&
1663 pending_entry_->GetUniqueID() ==
1664 request->commit_params().nav_entry_id) {
1665 // Note: The pending entry will usually have a real ReloadType here, but
1666 // it can still be ReloadType::NONE in cases that
1667 // ShouldTreatNavigationAsReload returns false (e.g., POST, view-source).
1668
1669 // If we classified this correctly, the SiteInstance should not have
1670 // changed.
1671 CHECK_EQ(entry->site_instance(), rfh->GetSiteInstance());
1672
1673 // For converted reloads, we assign the entry's unique ID to be that of
1674 // the new one. Since this is always the result of a user action, we want
1675 // to dismiss infobars, etc. like a regular user-initiated navigation.
1676 entry->set_unique_id(pending_entry_->GetUniqueID());
1677
1678 // The extra headers may have changed due to reloading with different
1679 // headers.
1680 entry->set_extra_headers(pending_entry_->extra_headers());
1681 }
1682 // Otherwise, this was intended as a new entry but the pending entry was
1683 // lost in the meantime and no new entry was created. We are stuck at the
1684 // last committed entry.
1685
1686 // Even if this is a converted reload from pressing enter in the omnibox,
1687 // the server could redirect, requiring an update to the SSL status. If this
1688 // is a same document navigation, though, there's no SSLStatus in the
Mohamed Abdelhalim833de902019-09-16 17:41:451689 // NavigationRequest so don't overwrite the existing entry's SSLStatus.
Charlie Reis7e2cb6d2021-01-26 01:27:161690 if (!is_same_document) {
Camille Lamy62b826012019-02-26 09:15:471691 entry->GetSSL() =
Mohamed Abdelhalim833de902019-09-16 17:41:451692 SSLStatus(request->GetSSLInfo().value_or(net::SSLInfo()));
Charlie Reis7e2cb6d2021-01-26 01:27:161693 }
John Abd-El-Malek9cd697e2017-07-12 21:53:141694
Charlie Reis7e2cb6d2021-01-26 01:27:161695 if (params.url.SchemeIs(url::kHttpsScheme) &&
Mohamed Abdelhalim833de902019-09-16 17:41:451696 request->GetNetErrorCode() == net::OK) {
John Abd-El-Malek9cd697e2017-07-12 21:53:141697 bool has_cert = !!entry->GetSSL().certificate;
1698 if (is_same_document) {
1699 UMA_HISTOGRAM_BOOLEAN(
1700 "Navigation.SecureSchemeHasSSLStatus."
1701 "ExistingPageSameDocumentIntendedAsNew",
1702 has_cert);
1703 } else {
1704 UMA_HISTOGRAM_BOOLEAN(
1705 "Navigation.SecureSchemeHasSSLStatus."
1706 "ExistingPageDifferentDocumentIntendedAsNew",
1707 has_cert);
1708 }
1709 }
Rakina Zata Amnif6950d552020-11-24 03:26:101710 } else if (const int nav_entry_id = request->commit_params().nav_entry_id) {
avicbdc4c12015-07-01 16:07:111711 // This is a browser-initiated navigation (back/forward/reload).
Rakina Zata Amnif6950d552020-11-24 03:26:101712 entry = GetEntryWithUniqueID(nav_entry_id);
jamd208b90ce2016-09-01 16:58:161713
eugenebut604866f2017-05-10 21:35:361714 if (is_same_document) {
Mohamed Abdelhalim833de902019-09-16 17:41:451715 // There's no SSLStatus in the NavigationRequest for same document
eugenebut604866f2017-05-10 21:35:361716 // navigations, so normally we leave |entry|'s SSLStatus as is. However if
1717 // this was a restored same document navigation entry, then it won't have
1718 // an SSLStatus. So we need to copy over the SSLStatus from the entry that
1719 // navigated it.
jam48cea9082017-02-15 06:13:291720 NavigationEntryImpl* last_entry = GetLastCommittedEntry();
1721 if (entry->GetURL().GetOrigin() == last_entry->GetURL().GetOrigin() &&
1722 last_entry->GetSSL().initialized && !entry->GetSSL().initialized &&
1723 was_restored) {
1724 entry->GetSSL() = last_entry->GetSSL();
1725 }
1726 } else {
Mohamed Abdelhalim833de902019-09-16 17:41:451727 // In rapid back/forward navigations |request| sometimes won't have a cert
1728 // (http://crbug.com/727892). So we use the request's cert if it exists,
John Abd-El-Malek3f247082017-12-07 19:02:191729 // otherwise we only reuse the existing cert if the origins match.
Mohamed Abdelhalim833de902019-09-16 17:41:451730 if (request->GetSSLInfo().has_value() &&
1731 request->GetSSLInfo()->is_valid()) {
1732 entry->GetSSL() = SSLStatus(*(request->GetSSLInfo()));
1733 } else if (entry->GetURL().GetOrigin() != request->GetURL().GetOrigin()) {
John Abd-El-Malek3f247082017-12-07 19:02:191734 entry->GetSSL() = SSLStatus();
1735 }
jam48cea9082017-02-15 06:13:291736 }
John Abd-El-Malek9cd697e2017-07-12 21:53:141737
John Abd-El-Malek380d3c5922017-09-08 00:20:311738 if (params.url.SchemeIs(url::kHttpsScheme) && !rfh->GetParent() &&
Mohamed Abdelhalim833de902019-09-16 17:41:451739 request->GetNetErrorCode() == net::OK) {
John Abd-El-Malek9cd697e2017-07-12 21:53:141740 bool has_cert = !!entry->GetSSL().certificate;
1741 if (is_same_document && was_restored) {
1742 UMA_HISTOGRAM_BOOLEAN(
1743 "Navigation.SecureSchemeHasSSLStatus."
1744 "ExistingPageSameDocumentRestoredBrowserInitiated",
1745 has_cert);
1746 } else if (is_same_document && !was_restored) {
1747 UMA_HISTOGRAM_BOOLEAN(
1748 "Navigation.SecureSchemeHasSSLStatus."
1749 "ExistingPageSameDocumentBrowserInitiated",
1750 has_cert);
1751 } else if (!is_same_document && was_restored) {
1752 UMA_HISTOGRAM_BOOLEAN(
1753 "Navigation.SecureSchemeHasSSLStatus."
1754 "ExistingPageRestoredBrowserInitiated",
1755 has_cert);
1756 } else {
1757 UMA_HISTOGRAM_BOOLEAN(
1758 "Navigation.SecureSchemeHasSSLStatus.ExistingPageBrowserInitiated",
1759 has_cert);
1760 }
1761 }
avicbdc4c12015-07-01 16:07:111762 } else {
1763 // This is renderer-initiated. The only kinds of renderer-initated
Charlie Reisc0f17d2d2021-01-12 18:52:491764 // navigations that are EXISTING_ENTRY are reloads and history.replaceState,
avicbdc4c12015-07-01 16:07:111765 // which land us at the last committed entry.
1766 entry = GetLastCommittedEntry();
jam0576b132016-09-07 05:13:101767
Mikel Astizba9cf2fd2017-12-17 10:38:101768 // TODO(crbug.com/751023): Set page transition type to PAGE_TRANSITION_LINK
1769 // to avoid misleading interpretations (e.g. URLs paired with
1770 // PAGE_TRANSITION_TYPED that haven't actually been typed) as well as to fix
1771 // the inconsistency with what we report to observers (PAGE_TRANSITION_LINK
1772 // | PAGE_TRANSITION_CLIENT_REDIRECT).
1773
Lucas Furukawa Gadani5553a1582019-01-08 18:55:571774 CopyReplacedNavigationEntryDataIfPreviouslyEmpty(entry, entry);
Mikel Astizba9cf2fd2017-12-17 10:38:101775
eugenebut604866f2017-05-10 21:35:361776 // If this is a same document navigation, then there's no SSLStatus in the
Mohamed Abdelhalim833de902019-09-16 17:41:451777 // NavigationRequest so don't overwrite the existing entry's SSLStatus.
eugenebut604866f2017-05-10 21:35:361778 if (!is_same_document)
Camille Lamy62b826012019-02-26 09:15:471779 entry->GetSSL() =
Mohamed Abdelhalim833de902019-09-16 17:41:451780 SSLStatus(request->GetSSLInfo().value_or(net::SSLInfo()));
John Abd-El-Malek9cd697e2017-07-12 21:53:141781
John Abd-El-Malek380d3c5922017-09-08 00:20:311782 if (params.url.SchemeIs(url::kHttpsScheme) && !rfh->GetParent() &&
Mohamed Abdelhalim833de902019-09-16 17:41:451783 request->GetNetErrorCode() == net::OK) {
John Abd-El-Malek9cd697e2017-07-12 21:53:141784 bool has_cert = !!entry->GetSSL().certificate;
1785 if (is_same_document) {
1786 UMA_HISTOGRAM_BOOLEAN(
1787 "Navigation.SecureSchemeHasSSLStatus."
1788 "ExistingPageSameDocumentRendererInitiated",
1789 has_cert);
1790 } else {
1791 UMA_HISTOGRAM_BOOLEAN(
1792 "Navigation.SecureSchemeHasSSLStatus."
1793 "ExistingPageDifferentDocumentRendererInitiated",
1794 has_cert);
1795 }
1796 }
avicbdc4c12015-07-01 16:07:111797 }
1798 DCHECK(entry);
[email protected]e9ba4472008-09-14 15:42:431799
[email protected]5ccd4dc2012-10-24 02:28:141800 // The URL may have changed due to redirects.
wjmaclean7431bb22015-02-19 14:53:431801 entry->set_page_type(params.url_is_unreachable ? PAGE_TYPE_ERROR
1802 : PAGE_TYPE_NORMAL);
[email protected]ad23a092011-12-28 07:02:041803 entry->SetURL(params.url);
arthursonzogni73fe3212020-11-17 13:24:071804 entry->SetReferrer(Referrer(*params.referrer));
[email protected]38178a42009-12-17 18:58:321805 if (entry->update_virtual_url_with_url())
1806 UpdateVirtualURLToURL(entry, params.url);
[email protected]5ccd4dc2012-10-24 02:28:141807
jam015ba062017-01-06 21:17:001808 // The site instance will normally be the same except
1809 // 1) session restore, when no site instance will be assigned or
1810 // 2) redirect, when the site instance is reset.
Lei Zhang96031532019-10-10 19:05:471811 DCHECK(!entry->site_instance() || !entry->GetRedirectChain().empty() ||
naskoaf182192016-08-11 02:12:011812 entry->site_instance() == rfh->GetSiteInstance());
clamy432acb22016-04-15 19:41:431813
naskoaf182192016-08-11 02:12:011814 // Update the existing FrameNavigationEntry to ensure all of its members
1815 // reflect the parameters coming from the renderer process.
Lukasz Anforowicz435bcb582019-07-12 20:50:061816 const base::Optional<url::Origin>& initiator_origin =
Mohamed Abdelhalim833de902019-09-16 17:41:451817 request->common_params().initiator_origin;
naskoaf182192016-08-11 02:12:011818 entry->AddOrUpdateFrameEntry(
1819 rfh->frame_tree_node(), params.item_sequence_number,
1820 params.document_sequence_number, rfh->GetSiteInstance(), nullptr,
arthursonzogni73fe3212020-11-17 13:24:071821 params.url, GetCommittedOriginForFrameEntry(params),
1822 Referrer(*params.referrer), initiator_origin, params.redirects,
1823 params.page_state, params.method, params.post_id,
1824 nullptr /* blob_url_loader_factory */,
Tsuyoshi Horo0c605782020-05-27 00:21:031825 request->web_bundle_navigation_info()
1826 ? request->web_bundle_navigation_info()->Clone()
Antonio Sartori78a749f2020-11-30 12:03:391827 : nullptr,
1828 ComputeDocumentPoliciesForFrameEntry(rfh, is_same_document, request));
creis22a7b4c2016-04-28 07:20:301829
[email protected]5ccd4dc2012-10-24 02:28:141830 // The redirected to page should not inherit the favicon from the previous
1831 // page.
eugenebut604866f2017-05-10 21:35:361832 if (ui::PageTransitionIsRedirect(params.transition) && !is_same_document)
[email protected]91a4ff82012-10-29 20:29:481833 entry->GetFavicon() = FaviconStatus();
[email protected]5ccd4dc2012-10-24 02:28:141834
Peter Boströmd7592132019-01-30 04:50:311835 // We should also usually discard the pending entry if it corresponds to a
1836 // different navigation, since that one is now likely canceled. In rare
1837 // cases, we leave the pending entry for another navigation in place when we
1838 // know it is still ongoing, to avoid a flicker in the omnibox (see
1839 // https://crbug.com/900036).
[email protected]e9ba4472008-09-14 15:42:431840 //
1841 // Note that we need to use the "internal" version since we don't want to
1842 // actually change any other state, just kill the pointer.
Peter Boströmd7592132019-01-30 04:50:311843 if (!keep_pending_entry)
arthursonzogni69a6a1b2019-09-17 09:23:001844 DiscardNonCommittedEntries();
[email protected]40bcc302009-03-02 20:50:391845
Carlos IL4dea8902020-05-26 15:14:291846 // Update the last committed index to reflect the committed entry.
avicbdc4c12015-07-01 16:07:111847 last_committed_entry_index_ = GetIndexOfEntry(entry);
[email protected]e9ba4472008-09-14 15:42:431848}
1849
[email protected]d202a7c2012-01-04 07:53:471850void NavigationControllerImpl::RendererDidNavigateNewSubframe(
creis3da03872015-02-20 21:12:321851 RenderFrameHostImpl* rfh,
arthursonzogni73fe3212020-11-17 13:24:071852 const mojom::DidCommitProvisionalLoadParams& params,
eugenebut604866f2017-05-10 21:35:361853 bool is_same_document,
Shivani Sharmaffb32b82019-04-09 16:58:471854 bool replace_entry,
1855 bool previous_document_was_activated,
Mohamed Abdelhalim833de902019-09-16 17:41:451856 NavigationRequest* request) {
avi25f5f9e2015-07-17 20:08:261857 DCHECK(ui::PageTransitionCoreTypeIs(params.transition,
1858 ui::PAGE_TRANSITION_MANUAL_SUBFRAME));
[email protected]09b8f82f2009-06-16 20:22:111859
[email protected]e9ba4472008-09-14 15:42:431860 // Manual subframe navigations just get the current entry cloned so the user
1861 // can go back or forward to it. The actual subframe information will be
1862 // stored in the page state for each of those entries. This happens out of
1863 // band with the actual navigations.
[email protected]4c27ba82008-09-24 16:49:091864 DCHECK(GetLastCommittedEntry()) << "ClassifyNavigation should guarantee "
1865 << "that a last committed entry exists.";
creis96fc55082015-06-13 06:42:381866
Mikel Astizba9cf2fd2017-12-17 10:38:101867 // The DCHECK below documents the fact that we don't know of any situation
1868 // where |replace_entry| is true for subframe navigations. This simplifies
1869 // reasoning about the replacement struct for subframes (see
1870 // CopyReplacedNavigationEntryDataIfPreviouslyEmpty()).
1871 DCHECK(!replace_entry);
1872
Patrick Monette50e8bd82019-06-13 22:40:451873 // This FrameNavigationEntry might not end up being used in the
1874 // CloneAndReplace() call below, if a spot can't be found for it in the tree.
Lukasz Anforowicz435bcb582019-07-12 20:50:061875 const base::Optional<url::Origin>& initiator_origin =
Mohamed Abdelhalim833de902019-09-16 17:41:451876 request->common_params().initiator_origin;
Patrick Monette50e8bd82019-06-13 22:40:451877 auto frame_entry = base::MakeRefCounted<FrameNavigationEntry>(
Charles Reisd2a509f2017-09-27 23:47:481878 rfh->frame_tree_node()->unique_name(), params.item_sequence_number,
creisce0ef3572017-01-26 17:53:081879 params.document_sequence_number, rfh->GetSiteInstance(), nullptr,
Nasko Oskov03912102019-01-11 00:21:321880 params.url, (params.url_is_unreachable) ? nullptr : &params.origin,
arthursonzogni73fe3212020-11-17 13:24:071881 Referrer(*params.referrer), initiator_origin, params.redirects,
1882 params.page_state, params.method, params.post_id,
1883 nullptr /* blob_url_loader_factory */,
Tsuyoshi Horo0c605782020-05-27 00:21:031884 request->web_bundle_navigation_info()
1885 ? request->web_bundle_navigation_info()->Clone()
Antonio Sartori78a749f2020-11-30 12:03:391886 : nullptr,
1887 ComputeDocumentPoliciesForFrameEntry(rfh, is_same_document, request));
Charles Reisf44482022017-10-13 21:15:031888
creisce0ef3572017-01-26 17:53:081889 std::unique_ptr<NavigationEntryImpl> new_entry =
1890 GetLastCommittedEntry()->CloneAndReplace(
Patrick Monette50e8bd82019-06-13 22:40:451891 std::move(frame_entry), is_same_document, rfh->frame_tree_node(),
Carlos Caballero40b0efd2021-01-26 11:55:001892 frame_tree_.root());
creise062d542015-08-25 02:01:551893
Alexander Timine3ec4192020-04-20 16:39:401894 SetShouldSkipOnBackForwardUIIfNeeded(
shivanigithube92c33da2020-09-14 13:01:411895 replace_entry, previous_document_was_activated,
Alexander Timine3ec4192020-04-20 16:39:401896 request->IsRendererInitiated(), request->GetPreviousPageUkmSourceId());
Shivani Sharmaffb32b82019-04-09 16:58:471897
creisce0ef3572017-01-26 17:53:081898 // TODO(creis): Update this to add the frame_entry if we can't find the one
Patrick Monette50e8bd82019-06-13 22:40:451899 // to replace, which can happen due to a unique name change. See
1900 // https://crbug.com/607205. For now, the call to CloneAndReplace() will
1901 // delete the |frame_entry| when the function exits if it doesn't get used.
creis96fc55082015-06-13 06:42:381902
Carlos IL42b416592019-10-07 23:10:361903 InsertOrReplaceEntry(std::move(new_entry), replace_entry, false);
[email protected]e9ba4472008-09-14 15:42:431904}
1905
[email protected]d202a7c2012-01-04 07:53:471906bool NavigationControllerImpl::RendererDidNavigateAutoSubframe(
creis3da03872015-02-20 21:12:321907 RenderFrameHostImpl* rfh,
arthursonzogni73fe3212020-11-17 13:24:071908 const mojom::DidCommitProvisionalLoadParams& params,
Antonio Sartori78a749f2020-11-30 12:03:391909 bool is_same_document,
Mohamed Abdelhalim833de902019-09-16 17:41:451910 NavigationRequest* request) {
avi9f07a0c2015-02-18 22:51:291911 DCHECK(ui::PageTransitionCoreTypeIs(params.transition,
1912 ui::PAGE_TRANSITION_AUTO_SUBFRAME));
1913
[email protected]e9ba4472008-09-14 15:42:431914 // We're guaranteed to have a previously committed entry, and we now need to
1915 // handle navigation inside of a subframe in it without creating a new entry.
1916 DCHECK(GetLastCommittedEntry());
1917
creis913c63ce2016-07-16 19:52:521918 // For newly created subframes, we don't need to send a commit notification.
1919 // This is only necessary for history navigations in subframes.
1920 bool send_commit_notification = false;
1921
Rakina Zata Amnif6950d552020-11-24 03:26:101922 // If |nav_entry_id| is non-zero and matches an existing entry, this
1923 // is a history navigation. Update the last committed index accordingly. If
1924 // we don't recognize the |nav_entry_id|, it might be a recently
1925 // pruned entry. We'll handle it below.
1926 if (const int nav_entry_id = request->commit_params().nav_entry_id) {
1927 int entry_index = GetEntryIndexWithUniqueID(nav_entry_id);
creis3cdc3b02015-05-29 23:00:471928 if (entry_index != -1 && entry_index != last_committed_entry_index_) {
avi98405c22015-05-21 20:47:061929 // Make sure that a subframe commit isn't changing the main frame's
1930 // origin. Otherwise the renderer process may be confused, leading to a
1931 // URL spoof. We can't check the path since that may change
1932 // (https://crbug.com/373041).
creis37988b92016-06-10 18:03:571933 // TODO(creis): For now, restrict this check to HTTP(S) origins, because
1934 // about:blank, file, and unique origins are more subtle to get right.
Eugene But9fb98d12018-05-22 18:28:331935 // We'll abstract out the relevant checks from IsURLSameDocumentNavigation
1936 // and share them here. See https://crbug.com/618104.
creis37988b92016-06-10 18:03:571937 const GURL& dest_top_url = GetEntryAtIndex(entry_index)->GetURL();
1938 const GURL& current_top_url = GetLastCommittedEntry()->GetURL();
1939 if (current_top_url.SchemeIsHTTPOrHTTPS() &&
1940 dest_top_url.SchemeIsHTTPOrHTTPS() &&
1941 current_top_url.GetOrigin() != dest_top_url.GetOrigin()) {
creisfb6eeb62016-05-10 19:01:511942 bad_message::ReceivedBadMessage(rfh->GetProcess(),
1943 bad_message::NC_AUTO_SUBFRAME);
avi98405c22015-05-21 20:47:061944 }
creis3cdc3b02015-05-29 23:00:471945
creis913c63ce2016-07-16 19:52:521946 // We only need to discard the pending entry in this history navigation
1947 // case. For newly created subframes, there was no pending entry.
avi98405c22015-05-21 20:47:061948 last_committed_entry_index_ = entry_index;
arthursonzogni69a6a1b2019-09-17 09:23:001949 DiscardNonCommittedEntries();
creis913c63ce2016-07-16 19:52:521950
1951 // History navigations should send a commit notification.
1952 send_commit_notification = true;
avi98405c22015-05-21 20:47:061953 }
[email protected]e9ba4472008-09-14 15:42:431954 }
[email protected]f233e4232013-02-23 00:55:141955
creisce0ef3572017-01-26 17:53:081956 // This may be a "new auto" case where we add a new FrameNavigationEntry, or
1957 // it may be a "history auto" case where we update an existing one.
1958 NavigationEntryImpl* last_committed = GetLastCommittedEntry();
Lukasz Anforowicz435bcb582019-07-12 20:50:061959 const base::Optional<url::Origin>& initiator_origin =
Mohamed Abdelhalim833de902019-09-16 17:41:451960 request->common_params().initiator_origin;
creisce0ef3572017-01-26 17:53:081961 last_committed->AddOrUpdateFrameEntry(
1962 rfh->frame_tree_node(), params.item_sequence_number,
1963 params.document_sequence_number, rfh->GetSiteInstance(), nullptr,
arthursonzogni73fe3212020-11-17 13:24:071964 params.url, GetCommittedOriginForFrameEntry(params),
1965 Referrer(*params.referrer), initiator_origin, params.redirects,
1966 params.page_state, params.method, params.post_id,
1967 nullptr /* blob_url_loader_factory */,
Tsuyoshi Horo0c605782020-05-27 00:21:031968 request->web_bundle_navigation_info()
1969 ? request->web_bundle_navigation_info()->Clone()
Antonio Sartori78a749f2020-11-30 12:03:391970 : nullptr,
1971 ComputeDocumentPoliciesForFrameEntry(rfh, is_same_document, request));
creis625a0c7d2015-03-24 23:17:121972
creis913c63ce2016-07-16 19:52:521973 return send_commit_notification;
[email protected]e9ba4472008-09-14 15:42:431974}
1975
[email protected]d202a7c2012-01-04 07:53:471976int NavigationControllerImpl::GetIndexOfEntry(
[email protected]10f417c52011-12-28 21:04:231977 const NavigationEntryImpl* entry) const {
avif16f85a72015-11-13 18:25:031978 for (size_t i = 0; i < entries_.size(); ++i) {
1979 if (entries_[i].get() == entry)
1980 return i;
1981 }
1982 return -1;
[email protected]765b35502008-08-21 00:51:201983}
1984
Eugene But7cc259d2017-10-09 23:52:491985// There are two general cases where a navigation is "same-document":
avidb7d1d22015-06-08 21:21:501986// 1. A fragment navigation, in which the url is kept the same except for the
1987// reference fragment.
1988// 2. A history API navigation (pushState and replaceState). This case is
Eugene But7cc259d2017-10-09 23:52:491989// always same-document, but the urls are not guaranteed to match excluding
1990// the fragment. The relevant spec allows pushState/replaceState to any URL
1991// on the same origin.
avidb7d1d22015-06-08 21:21:501992// However, due to reloads, even identical urls are *not* guaranteed to be
Eugene But7cc259d2017-10-09 23:52:491993// same-document navigations, we have to trust the renderer almost entirely.
avidb7d1d22015-06-08 21:21:501994// The one thing we do know is that cross-origin navigations will *never* be
Eugene But7cc259d2017-10-09 23:52:491995// same-document. Therefore, trust the renderer if the URLs are on the same
1996// origin, and assume the renderer is malicious if a cross-origin navigation
1997// claims to be same-document.
creisf164daa2016-06-07 00:17:051998//
1999// TODO(creis): Clean up and simplify the about:blank and origin checks below,
2000// which are likely redundant with each other. Be careful about data URLs vs
2001// about:blank, both of which are unique origins and thus not considered equal.
Eugene But7cc259d2017-10-09 23:52:492002bool NavigationControllerImpl::IsURLSameDocumentNavigation(
[email protected]b9d4dfdc2013-08-08 00:25:122003 const GURL& url,
creisf164daa2016-06-07 00:17:052004 const url::Origin& origin,
Eugene But7cc259d2017-10-09 23:52:492005 bool renderer_says_same_document,
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572006 RenderFrameHost* rfh) {
creis225a7432016-06-03 22:56:272007 RenderFrameHostImpl* rfhi = static_cast<RenderFrameHostImpl*>(rfh);
avidb7d1d22015-06-08 21:21:502008 GURL last_committed_url;
2009 if (rfh->GetParent()) {
creis225a7432016-06-03 22:56:272010 // Use the FrameTreeNode's current_url and not rfh->GetLastCommittedURL(),
2011 // which might be empty in a new RenderFrameHost after a process swap.
2012 // Here, we care about the last committed URL in the FrameTreeNode,
2013 // regardless of which process it is in.
2014 last_committed_url = rfhi->frame_tree_node()->current_url();
avidb7d1d22015-06-08 21:21:502015 } else {
2016 NavigationEntry* last_committed = GetLastCommittedEntry();
2017 // There must be a last-committed entry to compare URLs to. TODO(avi): When
2018 // might Blink say that a navigation is in-page yet there be no last-
2019 // committed entry?
2020 if (!last_committed)
2021 return false;
2022 last_committed_url = last_committed->GetURL();
2023 }
2024
Gyuyoung Kim1ac4ca782020-09-11 03:32:512025 auto prefs = rfhi->GetOrCreateWebPreferences();
creis225a7432016-06-03 22:56:272026 const url::Origin& committed_origin =
2027 rfhi->frame_tree_node()->current_origin();
avidb7d1d22015-06-08 21:21:502028 bool is_same_origin = last_committed_url.is_empty() ||
2029 // TODO(japhet): We should only permit navigations
2030 // originating from about:blank to be in-page if the
2031 // about:blank is the first document that frame loaded.
2032 // We don't have sufficient information to identify
2033 // that case at the moment, so always allow about:blank
2034 // for now.
csharrisona3bd0b32016-10-19 18:40:482035 last_committed_url == url::kAboutBlankURL ||
avidb7d1d22015-06-08 21:21:502036 last_committed_url.GetOrigin() == url.GetOrigin() ||
creisf164daa2016-06-07 00:17:052037 committed_origin == origin ||
avidb7d1d22015-06-08 21:21:502038 !prefs.web_security_enabled ||
2039 (prefs.allow_universal_access_from_file_urls &&
creisdc004e02015-11-20 21:28:472040 committed_origin.scheme() == url::kFileScheme);
Eugene But7cc259d2017-10-09 23:52:492041 if (!is_same_origin && renderer_says_same_document) {
avidb7d1d22015-06-08 21:21:502042 bad_message::ReceivedBadMessage(rfh->GetProcess(),
2043 bad_message::NC_IN_PAGE_NAVIGATION);
2044 }
Eugene But7cc259d2017-10-09 23:52:492045 return is_same_origin && renderer_says_same_document;
[email protected]e9ba4472008-09-14 15:42:432046}
2047
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572048void NavigationControllerImpl::CopyStateFrom(NavigationController* temp,
Francois Dorayeaace782017-06-21 16:37:242049 bool needs_reload) {
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572050 NavigationControllerImpl* source =
2051 static_cast<NavigationControllerImpl*>(temp);
[email protected]ce3fa3c2009-04-20 19:55:572052 // Verify that we look new.
Lei Zhang96031532019-10-10 19:05:472053 DCHECK_EQ(0, GetEntryCount());
2054 DCHECK(!GetPendingEntry());
[email protected]ce3fa3c2009-04-20 19:55:572055
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572056 if (source->GetEntryCount() == 0)
[email protected]ce3fa3c2009-04-20 19:55:572057 return; // Nothing new to do.
2058
Francois Dorayeaace782017-06-21 16:37:242059 needs_reload_ = needs_reload;
Bo Liucdfa4b12018-11-06 00:21:442060 needs_reload_type_ = NeedsReloadType::kCopyStateFrom;
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572061 InsertEntriesFrom(source, source->GetEntryCount());
[email protected]ce3fa3c2009-04-20 19:55:572062
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572063 for (auto it = source->session_storage_namespace_map_.begin();
2064 it != source->session_storage_namespace_map_.end(); ++it) {
[email protected]fdac6ade2013-07-20 01:06:302065 SessionStorageNamespaceImpl* source_namespace =
2066 static_cast<SessionStorageNamespaceImpl*>(it->second.get());
2067 session_storage_namespace_map_[it->first] = source_namespace->Clone();
2068 }
[email protected]4e6419c2010-01-15 04:50:342069
Lukasz Anforowicz0de0f452020-12-02 19:57:152070 FinishRestore(source->last_committed_entry_index_, RestoreType::kRestored);
[email protected]ce3fa3c2009-04-20 19:55:572071}
2072
Aran Gilman37d11632019-10-08 23:07:152073void NavigationControllerImpl::CopyStateFromAndPrune(NavigationController* temp,
2074 bool replace_entry) {
[email protected]474f8512013-05-31 22:31:162075 // It is up to callers to check the invariants before calling this.
[email protected]79368982013-11-13 01:11:012076 CHECK(CanPruneAllButLastCommitted());
[email protected]474f8512013-05-31 22:31:162077
[email protected]d202a7c2012-01-04 07:53:472078 NavigationControllerImpl* source =
2079 static_cast<NavigationControllerImpl*>(temp);
[email protected]e1cd5452010-08-26 18:03:252080
avi2b177592014-12-10 02:08:022081 // Remove all the entries leaving the last committed entry.
[email protected]79368982013-11-13 01:11:012082 PruneAllButLastCommittedInternal();
[email protected]e1cd5452010-08-26 18:03:252083
[email protected]474f8512013-05-31 22:31:162084 // We now have one entry, possibly with a new pending entry. Ensure that
2085 // adding the entries from source won't put us over the limit.
2086 DCHECK_EQ(1, GetEntryCount());
[email protected]e78a6852013-12-13 08:08:572087 if (!replace_entry)
Shivani Sharmad8c8d652019-02-13 17:27:572088 source->PruneOldestSkippableEntryIfFull();
[email protected]944822b2012-03-02 20:57:252089
Carlos IL4dea8902020-05-26 15:14:292090 // Insert the entries from source. Ignore any pending entry, since it has not
2091 // committed in source.
[email protected]474f8512013-05-31 22:31:162092 int max_source_index = source->last_committed_entry_index_;
[email protected]e1cd5452010-08-26 18:03:252093 if (max_source_index == -1)
[email protected]a26023822011-12-29 00:23:552094 max_source_index = source->GetEntryCount();
[email protected]e1cd5452010-08-26 18:03:252095 else
2096 max_source_index++;
[email protected]e78a6852013-12-13 08:08:572097
2098 // Ignore the source's current entry if merging with replacement.
2099 // TODO(davidben): This should preserve entries forward of the current
2100 // too. http://crbug.com/317872
2101 if (replace_entry && max_source_index > 0)
2102 max_source_index--;
2103
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572104 InsertEntriesFrom(source, max_source_index);
[email protected]e1cd5452010-08-26 18:03:252105
2106 // Adjust indices such that the last entry and pending are at the end now.
[email protected]a26023822011-12-29 00:23:552107 last_committed_entry_index_ = GetEntryCount() - 1;
[email protected]796931a92011-08-10 01:32:142108
Carlos Caballeroede6f8c2021-01-28 11:01:502109 SetHistoryOffsetAndLength(last_committed_entry_index_, GetEntryCount());
[email protected]e1cd5452010-08-26 18:03:252110}
2111
[email protected]79368982013-11-13 01:11:012112bool NavigationControllerImpl::CanPruneAllButLastCommitted() {
[email protected]474f8512013-05-31 22:31:162113 // If there is no last committed entry, we cannot prune. Even if there is a
2114 // pending entry, it may not commit, leaving this WebContents blank, despite
2115 // possibly giving it new entries via CopyStateFromAndPrune.
2116 if (last_committed_entry_index_ == -1)
2117 return false;
[email protected]9350602e2013-02-26 23:27:442118
[email protected]474f8512013-05-31 22:31:162119 // We cannot prune if there is a pending entry at an existing entry index.
2120 // It may not commit, so we have to keep the last committed entry, and thus
2121 // there is no sensible place to keep the pending entry. It is ok to have
2122 // a new pending entry, which can optionally commit as a new navigation.
2123 if (pending_entry_index_ != -1)
2124 return false;
2125
[email protected]474f8512013-05-31 22:31:162126 return true;
2127}
2128
[email protected]79368982013-11-13 01:11:012129void NavigationControllerImpl::PruneAllButLastCommitted() {
2130 PruneAllButLastCommittedInternal();
[email protected]474f8512013-05-31 22:31:162131
avi2b177592014-12-10 02:08:022132 DCHECK_EQ(0, last_committed_entry_index_);
2133 DCHECK_EQ(1, GetEntryCount());
[email protected]9350602e2013-02-26 23:27:442134
Carlos Caballeroede6f8c2021-01-28 11:01:502135 SetHistoryOffsetAndLength(last_committed_entry_index_, GetEntryCount());
[email protected]9350602e2013-02-26 23:27:442136}
2137
[email protected]79368982013-11-13 01:11:012138void NavigationControllerImpl::PruneAllButLastCommittedInternal() {
[email protected]474f8512013-05-31 22:31:162139 // It is up to callers to check the invariants before calling this.
[email protected]79368982013-11-13 01:11:012140 CHECK(CanPruneAllButLastCommitted());
[email protected]97b6c4f2010-09-27 19:31:262141
[email protected]474f8512013-05-31 22:31:162142 // Erase all entries but the last committed entry. There may still be a
2143 // new pending entry after this.
2144 entries_.erase(entries_.begin(),
2145 entries_.begin() + last_committed_entry_index_);
2146 entries_.erase(entries_.begin() + 1, entries_.end());
2147 last_committed_entry_index_ = 0;
[email protected]97b6c4f2010-09-27 19:31:262148}
2149
Christian Dullweber1af31e62018-02-22 11:49:482150void NavigationControllerImpl::DeleteNavigationEntries(
2151 const DeletionPredicate& deletionPredicate) {
2152 // It is up to callers to check the invariants before calling this.
2153 CHECK(CanPruneAllButLastCommitted());
2154 std::vector<int> delete_indices;
2155 for (size_t i = 0; i < entries_.size(); i++) {
2156 if (i != static_cast<size_t>(last_committed_entry_index_) &&
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572157 deletionPredicate.Run(entries_[i].get())) {
Christian Dullweber1af31e62018-02-22 11:49:482158 delete_indices.push_back(i);
2159 }
2160 }
2161 if (delete_indices.empty())
2162 return;
2163
2164 if (delete_indices.size() == GetEntryCount() - 1U) {
2165 PruneAllButLastCommitted();
2166 } else {
2167 // Do the deletion in reverse to preserve indices.
2168 for (auto it = delete_indices.rbegin(); it != delete_indices.rend(); ++it) {
2169 RemoveEntryAtIndex(*it);
2170 }
Carlos Caballeroede6f8c2021-01-28 11:01:502171 SetHistoryOffsetAndLength(last_committed_entry_index_, GetEntryCount());
Christian Dullweber1af31e62018-02-22 11:49:482172 }
2173 delegate()->NotifyNavigationEntriesDeleted();
2174}
2175
Shivani Sharma883f5f32019-02-12 18:20:012176bool NavigationControllerImpl::IsEntryMarkedToBeSkipped(int index) {
2177 auto* entry = GetEntryAtIndex(index);
2178 return entry && entry->should_skip_on_back_forward_ui();
2179}
2180
Carlos Caballero35ce710c2019-09-19 10:59:452181BackForwardCacheImpl& NavigationControllerImpl::GetBackForwardCache() {
2182 return back_forward_cache_;
2183}
2184
clamy987a3752018-05-03 17:36:262185void NavigationControllerImpl::DiscardPendingEntry(bool was_failure) {
2186 // It is not safe to call DiscardPendingEntry while NavigateToEntry is in
2187 // progress, since this will cause a use-after-free. (We only allow this
2188 // when the tab is being destroyed for shutdown, since it won't return to
2189 // NavigateToEntry in that case.) http://crbug.com/347742.
2190 CHECK(!in_navigate_to_pending_entry_ || delegate_->IsBeingDestroyed());
2191
2192 if (was_failure && pending_entry_) {
2193 failed_pending_entry_id_ = pending_entry_->GetUniqueID();
2194 } else {
2195 failed_pending_entry_id_ = 0;
2196 }
2197
2198 if (pending_entry_) {
2199 if (pending_entry_index_ == -1)
2200 delete pending_entry_;
2201 pending_entry_index_ = -1;
2202 pending_entry_ = nullptr;
2203 }
arthursonzogni66f711c2019-10-08 14:40:362204
2205 // Ensure any refs to the current pending entry are ignored if they get
2206 // deleted, by clearing the set of known refs. All future pending entries will
2207 // only be affected by new refs.
2208 pending_entry_refs_.clear();
clamy987a3752018-05-03 17:36:262209}
2210
2211void NavigationControllerImpl::SetPendingNavigationSSLError(bool error) {
2212 if (pending_entry_)
2213 pending_entry_->set_ssl_error(error);
2214}
2215
Camille Lamy5193caa2018-10-12 11:59:422216#if defined(OS_ANDROID)
2217// static
2218bool NavigationControllerImpl::ValidateDataURLAsString(
2219 const scoped_refptr<const base::RefCountedString>& data_url_as_string) {
2220 if (!data_url_as_string)
2221 return false;
2222
2223 if (data_url_as_string->size() > kMaxLengthOfDataURLString)
2224 return false;
2225
2226 // The number of characters that is enough for validating a data: URI.
2227 // From the GURL's POV, the only important part here is scheme, it doesn't
2228 // check the actual content. Thus we can take only the prefix of the url, to
2229 // avoid unneeded copying of a potentially long string.
2230 const size_t kDataUriPrefixMaxLen = 64;
2231 GURL data_url(
2232 std::string(data_url_as_string->front_as<char>(),
2233 std::min(data_url_as_string->size(), kDataUriPrefixMaxLen)));
2234 if (!data_url.is_valid() || !data_url.SchemeIs(url::kDataScheme))
2235 return false;
2236
2237 return true;
2238}
2239#endif
2240
Shivani Sharma194877032019-03-07 17:52:472241void NavigationControllerImpl::NotifyUserActivation() {
2242 // When a user activation occurs, ensure that all adjacent entries for the
2243 // same document clear their skippable bit, so that the history manipulation
2244 // intervention does not apply to them.
Shivani Sharmaffb32b82019-04-09 16:58:472245 // TODO(crbug.com/949279) in case it becomes necessary for resetting based on
2246 // which frame created an entry and which frame has the user gesture.
Shivani Sharma194877032019-03-07 17:52:472247 auto* last_committed_entry = GetLastCommittedEntry();
2248 if (!last_committed_entry)
2249 return;
Shivani Sharma194877032019-03-07 17:52:472250
Shivani Sharmac4cc8922019-04-18 03:11:172251 SetSkippableForSameDocumentEntries(GetLastCommittedEntryIndex(), false);
Shivani Sharma194877032019-03-07 17:52:472252}
2253
clamy987a3752018-05-03 17:36:262254bool NavigationControllerImpl::StartHistoryNavigationInNewSubframe(
2255 RenderFrameHostImpl* render_frame_host,
Julie Jeongeun Kimed2e5ba72019-09-12 10:14:172256 mojo::PendingAssociatedRemote<mojom::NavigationClient>* navigation_client) {
clamy987a3752018-05-03 17:36:262257 NavigationEntryImpl* entry =
2258 GetEntryWithUniqueID(render_frame_host->nav_entry_id());
2259 if (!entry)
2260 return false;
2261
2262 FrameNavigationEntry* frame_entry =
2263 entry->GetFrameEntry(render_frame_host->frame_tree_node());
2264 if (!frame_entry)
2265 return false;
2266
Camille Lamy5193caa2018-10-12 11:59:422267 std::unique_ptr<NavigationRequest> request = CreateNavigationRequestFromEntry(
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572268 render_frame_host->frame_tree_node(), entry, frame_entry,
clamyea99ea12018-05-28 13:54:232269 ReloadType::NONE, false /* is_same_document_history_load */,
Camille Lamy5193caa2018-10-12 11:59:422270 true /* is_history_navigation_in_new_child */);
clamyea99ea12018-05-28 13:54:232271
2272 if (!request)
2273 return false;
2274
arthursonzognif046d4a2019-12-12 19:08:102275 request->SetNavigationClient(std::move(*navigation_client));
Arthur Hemery06173ce2019-05-29 12:11:412276
Lukasz Anforowicz9ee83c272020-12-01 20:14:052277 render_frame_host->frame_tree_node()->navigator().Navigate(std::move(request),
2278 ReloadType::NONE);
clamyea99ea12018-05-28 13:54:232279
2280 return true;
clamy987a3752018-05-03 17:36:262281}
2282
Tsuyoshi Horo52fd08e2020-07-07 07:03:452283bool NavigationControllerImpl::ReloadFrame(FrameTreeNode* frame_tree_node) {
2284 NavigationEntryImpl* entry = GetEntryAtIndex(GetCurrentEntryIndex());
2285 if (!entry)
2286 return false;
2287 FrameNavigationEntry* frame_entry = entry->GetFrameEntry(frame_tree_node);
2288 if (!frame_entry)
2289 return false;
John Abd-El-Malek5b669132020-07-14 01:04:142290 ReloadType reload_type = ReloadType::NORMAL;
2291 entry->set_reload_type(reload_type);
Tsuyoshi Horo52fd08e2020-07-07 07:03:452292 std::unique_ptr<NavigationRequest> request = CreateNavigationRequestFromEntry(
John Abd-El-Malek5b669132020-07-14 01:04:142293 frame_tree_node, entry, frame_entry, reload_type,
Tsuyoshi Horo52fd08e2020-07-07 07:03:452294 false /* is_same_document_history_load */,
2295 false /* is_history_navigation_in_new_child */);
2296 if (!request)
2297 return false;
Lukasz Anforowicz9ee83c272020-12-01 20:14:052298 frame_tree_node->navigator().Navigate(std::move(request), reload_type);
Tsuyoshi Horo52fd08e2020-07-07 07:03:452299 return true;
2300}
2301
Dave Tapuska8bfd84c2019-03-26 20:47:162302void NavigationControllerImpl::GoToOffsetInSandboxedFrame(
2303 int offset,
2304 int sandbox_frame_tree_node_id) {
2305 if (!CanGoToOffset(offset))
2306 return;
2307 GoToIndex(GetIndexForOffset(offset), sandbox_frame_tree_node_id);
2308}
2309
clamy987a3752018-05-03 17:36:262310void NavigationControllerImpl::NavigateFromFrameProxy(
2311 RenderFrameHostImpl* render_frame_host,
2312 const GURL& url,
Antonio Sartori9a82f6f32020-12-14 09:22:452313 const base::UnguessableToken* initiator_frame_token,
2314 int initiator_process_id,
Lukasz Anforowicz63f3b9432019-05-30 05:42:582315 const base::Optional<url::Origin>& initiator_origin,
clamy987a3752018-05-03 17:36:262316 bool is_renderer_initiated,
2317 SiteInstance* source_site_instance,
2318 const Referrer& referrer,
2319 ui::PageTransition page_transition,
2320 bool should_replace_current_entry,
Charlie Harrison8c113a32019-01-07 16:08:292321 NavigationDownloadPolicy download_policy,
clamy987a3752018-05-03 17:36:262322 const std::string& method,
2323 scoped_refptr<network::ResourceRequestBody> post_body,
Marijn Kruisselbrink7a0d5e182018-05-24 22:55:092324 const std::string& extra_headers,
John Delaney50425f82020-04-07 16:26:212325 scoped_refptr<network::SharedURLLoaderFactory> blob_url_loader_factory,
Gyuyoung Kim38e63632021-01-14 13:11:392326 const base::Optional<blink::Impression>& impression) {
Lukasz Anforowicz63f3b9432019-05-30 05:42:582327 if (is_renderer_initiated)
2328 DCHECK(initiator_origin.has_value());
2329
clamy987a3752018-05-03 17:36:262330 FrameTreeNode* node = render_frame_host->frame_tree_node();
Nasko Oskov18006bc2018-12-06 02:53:582331
Rakina Zata Amni66992a82020-06-24 03:57:522332 // Don't allow an entry replacement if there is no entry to replace.
2333 // http://crbug.com/457149
2334 if (GetEntryCount() == 0)
2335 should_replace_current_entry = false;
2336
clamy987a3752018-05-03 17:36:262337 // Create a NavigationEntry for the transfer, without making it the pending
2338 // entry. Subframe transfers should have a clone of the last committed entry
2339 // with a FrameNavigationEntry for the target frame. Main frame transfers
2340 // should have a new NavigationEntry.
2341 // TODO(creis): Make this unnecessary by creating (and validating) the params
2342 // directly, passing them to the destination RenderFrameHost. See
2343 // https://crbug.com/536906.
2344 std::unique_ptr<NavigationEntryImpl> entry;
2345 if (!node->IsMainFrame()) {
2346 // Subframe case: create FrameNavigationEntry.
2347 if (GetLastCommittedEntry()) {
2348 entry = GetLastCommittedEntry()->Clone();
2349 entry->set_extra_headers(extra_headers);
2350 // TODO(arthursonzogni): What about |is_renderer_initiated|?
2351 // Renderer-initiated navigation that target a remote frame are currently
2352 // classified as browser-initiated when this one has already navigated.
2353 // See https://crbug.com/722251.
2354 } else {
2355 // If there's no last committed entry, create an entry for about:blank
2356 // with a subframe entry for our destination.
2357 // TODO(creis): Ensure this case can't exist in https://crbug.com/524208.
2358 entry = NavigationEntryImpl::FromNavigationEntry(CreateNavigationEntry(
Lukasz Anforowicz435bcb582019-07-12 20:50:062359 GURL(url::kAboutBlankURL), referrer, initiator_origin,
Lukasz Anforowicz641234d52019-11-07 21:07:102360 source_site_instance, page_transition, is_renderer_initiated,
2361 extra_headers, browser_context_,
Scott Violet5ae6c42e2020-10-28 02:47:372362 nullptr /* blob_url_loader_factory */, should_replace_current_entry,
2363 GetWebContents()));
2364 // CreateNavigationEntry() may have changed the transition type.
2365 page_transition = entry->GetTransitionType();
clamy987a3752018-05-03 17:36:262366 }
Antonio Sartori78a749f2020-11-30 12:03:392367 std::unique_ptr<PolicyContainerHost::DocumentPolicies> document_policies;
2368 if (GetLastCommittedEntry()) {
2369 FrameNavigationEntry* previous_frame_entry =
2370 GetLastCommittedEntry()->GetFrameEntry(node);
2371 if (previous_frame_entry && previous_frame_entry->document_policies()) {
2372 document_policies =
2373 std::make_unique<PolicyContainerHost::DocumentPolicies>(
2374 *previous_frame_entry->document_policies());
2375 }
2376 }
clamy987a3752018-05-03 17:36:262377 entry->AddOrUpdateFrameEntry(
2378 node, -1, -1, nullptr,
Nasko Oskov18006bc2018-12-06 02:53:582379 static_cast<SiteInstanceImpl*>(source_site_instance), url,
Lukasz Anforowicz435bcb582019-07-12 20:50:062380 base::nullopt /* commit_origin */, referrer, initiator_origin,
Miyoung Shin5d77f72072020-10-09 15:14:202381 std::vector<GURL>(), blink::PageState(), method, -1,
Antonio Sartori78a749f2020-11-30 12:03:392382 blob_url_loader_factory, nullptr /* web_bundle_navigation_info */,
2383 std::move(document_policies));
clamy987a3752018-05-03 17:36:262384 } else {
2385 // Main frame case.
2386 entry = NavigationEntryImpl::FromNavigationEntry(CreateNavigationEntry(
Lukasz Anforowicz641234d52019-11-07 21:07:102387 url, referrer, initiator_origin, source_site_instance, page_transition,
2388 is_renderer_initiated, extra_headers, browser_context_,
Scott Violet5ae6c42e2020-10-28 02:47:372389 blob_url_loader_factory, should_replace_current_entry,
2390 GetWebContents()));
2391 // CreateNavigationEntry() may have changed the transition type.
2392 page_transition = entry->GetTransitionType();
clamy987a3752018-05-03 17:36:262393 entry->root_node()->frame_entry->set_source_site_instance(
2394 static_cast<SiteInstanceImpl*>(source_site_instance));
2395 entry->root_node()->frame_entry->set_method(method);
2396 }
clamy987a3752018-05-03 17:36:262397
Camille Lamy5193caa2018-10-12 11:59:422398 bool override_user_agent = false;
clamy987a3752018-05-03 17:36:262399 if (GetLastCommittedEntry() &&
2400 GetLastCommittedEntry()->GetIsOverridingUserAgent()) {
2401 entry->SetIsOverridingUserAgent(true);
Camille Lamy5193caa2018-10-12 11:59:422402 override_user_agent = true;
clamy987a3752018-05-03 17:36:262403 }
2404 // TODO(creis): Set user gesture and intent received timestamp on Android.
2405
2406 // We may not have successfully added the FrameNavigationEntry to |entry|
2407 // above (per https://crbug.com/608402), in which case we create it from
2408 // scratch. This works because we do not depend on |frame_entry| being inside
2409 // |entry| during NavigateToEntry. This will go away when we shortcut this
2410 // further in https://crbug.com/536906.
2411 scoped_refptr<FrameNavigationEntry> frame_entry(entry->GetFrameEntry(node));
2412 if (!frame_entry) {
Patrick Monette50e8bd82019-06-13 22:40:452413 frame_entry = base::MakeRefCounted<FrameNavigationEntry>(
clamy987a3752018-05-03 17:36:262414 node->unique_name(), -1, -1, nullptr,
Nasko Oskov18006bc2018-12-06 02:53:582415 static_cast<SiteInstanceImpl*>(source_site_instance), url,
Lukasz Anforowicz435bcb582019-07-12 20:50:062416 nullptr /* origin */, referrer, initiator_origin, std::vector<GURL>(),
Miyoung Shin5d77f72072020-10-09 15:14:202417 blink::PageState(), method, -1, blob_url_loader_factory,
Antonio Sartori78a749f2020-11-30 12:03:392418 nullptr /* web_bundle_navigation_info */,
2419 nullptr /* document_policies */);
clamy987a3752018-05-03 17:36:262420 }
2421
Camille Lamy5193caa2018-10-12 11:59:422422 LoadURLParams params(url);
Antonio Sartori9a82f6f32020-12-14 09:22:452423 params.initiator_frame_token =
2424 initiator_frame_token ? base::make_optional(*initiator_frame_token)
2425 : base::nullopt;
2426 params.initiator_process_id = initiator_process_id;
Nasko Oskov93e7c55c2018-12-19 01:59:292427 params.initiator_origin = initiator_origin;
Camille Lamy5193caa2018-10-12 11:59:422428 params.source_site_instance = source_site_instance;
2429 params.load_type = method == "POST" ? LOAD_TYPE_HTTP_POST : LOAD_TYPE_DEFAULT;
2430 params.transition_type = page_transition;
Dominic Farolino226226af2019-06-25 00:58:032431 params.frame_tree_node_id = node->frame_tree_node_id();
Camille Lamy5193caa2018-10-12 11:59:422432 params.referrer = referrer;
2433 /* params.redirect_chain: skip */
2434 params.extra_headers = extra_headers;
2435 params.is_renderer_initiated = is_renderer_initiated;
2436 params.override_user_agent = UA_OVERRIDE_INHERIT;
2437 /* params.base_url_for_data_url: skip */
2438 /* params.virtual_url_for_data_url: skip */
2439 /* params.data_url_as_string: skip */
2440 params.post_data = post_body;
2441 params.can_load_local_resources = false;
Kevin McNeee60e76b2019-11-27 20:01:582442 /* params.should_replace_current_entry: skip */
Camille Lamy5193caa2018-10-12 11:59:422443 /* params.frame_name: skip */
2444 // TODO(clamy): See if user gesture should be propagated to this function.
2445 params.has_user_gesture = false;
2446 params.should_clear_history_list = false;
2447 params.started_from_context_menu = false;
2448 /* params.navigation_ui_data: skip */
2449 /* params.input_start: skip */
Lucas Furukawa Gadania9c45682019-07-31 22:05:142450 params.was_activated = mojom::WasActivatedOption::kUnknown;
Robert Ogden011a8082019-01-23 19:04:542451 /* params.reload_type: skip */
John Delaney50425f82020-04-07 16:26:212452 params.impression = impression;
Camille Lamy5193caa2018-10-12 11:59:422453
2454 std::unique_ptr<NavigationRequest> request =
2455 CreateNavigationRequestFromLoadParams(
Dominic Farolino226226af2019-06-25 00:58:032456 node, params, override_user_agent, should_replace_current_entry,
2457 false /* has_user_gesture */, download_policy, ReloadType::NONE,
Scott Violet5ae6c42e2020-10-28 02:47:372458 entry.get(), frame_entry.get(), params.transition_type);
clamyea99ea12018-05-28 13:54:232459
2460 if (!request)
2461 return;
2462
Arthur Hemery948742762019-09-18 10:06:242463 // At this stage we are proceeding with this navigation. If this was renderer
2464 // initiated with user gesture, we need to make sure we clear up potential
2465 // remains of a cancelled browser initiated navigation to avoid URL spoofs.
2466 DiscardNonCommittedEntries();
2467
Lukasz Anforowicz9ee83c272020-12-01 20:14:052468 node->navigator().Navigate(std::move(request), ReloadType::NONE);
clamy987a3752018-05-03 17:36:262469}
2470
[email protected]d1198fd2012-08-13 22:50:192471void NavigationControllerImpl::SetSessionStorageNamespace(
[email protected]fdac6ade2013-07-20 01:06:302472 const std::string& partition_id,
[email protected]8ff00d72012-10-23 19:12:212473 SessionStorageNamespace* session_storage_namespace) {
[email protected]d1198fd2012-08-13 22:50:192474 if (!session_storage_namespace)
2475 return;
2476
2477 // We can't overwrite an existing SessionStorage without violating spec.
2478 // Attempts to do so may give a tab access to another tab's session storage
2479 // so die hard on an error.
Aran Gilman37d11632019-10-08 23:07:152480 bool successful_insert =
2481 session_storage_namespace_map_
2482 .insert(
2483 make_pair(partition_id, static_cast<SessionStorageNamespaceImpl*>(
2484 session_storage_namespace)))
[email protected]fdac6ade2013-07-20 01:06:302485 .second;
2486 CHECK(successful_insert) << "Cannot replace existing SessionStorageNamespace";
[email protected]d1198fd2012-08-13 22:50:192487}
2488
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572489bool NavigationControllerImpl::IsUnmodifiedBlankTab() {
Aran Gilman37d11632019-10-08 23:07:152490 return IsInitialNavigation() && !GetLastCommittedEntry() &&
Carlos Caballeroede6f8c2021-01-28 11:01:502491 !frame_tree_.has_accessed_initial_main_document();
[email protected]aa62afd2014-04-22 19:22:462492}
2493
Aran Gilman37d11632019-10-08 23:07:152494SessionStorageNamespace* NavigationControllerImpl::GetSessionStorageNamespace(
2495 SiteInstance* instance) {
[email protected]fdac6ade2013-07-20 01:06:302496 std::string partition_id;
2497 if (instance) {
2498 // TODO(ajwong): When GetDefaultSessionStorageNamespace() goes away, remove
danakjf26536bf2020-09-10 00:46:132499 // this if statement so |instance| must not be null.
Aran Gilman37d11632019-10-08 23:07:152500 partition_id = GetContentClient()->browser()->GetStoragePartitionIdForSite(
2501 browser_context_, instance->GetSiteURL());
[email protected]fdac6ade2013-07-20 01:06:302502 }
[email protected]d1198fd2012-08-13 22:50:192503
[email protected]fdac6ade2013-07-20 01:06:302504 // TODO(ajwong): Should this use the |partition_id| directly rather than
2505 // re-lookup via |instance|? http://crbug.com/142685
2506 StoragePartition* partition =
michaelnbacbcbd2016-02-09 00:32:032507 BrowserContext::GetStoragePartition(browser_context_, instance);
2508 DOMStorageContextWrapper* context_wrapper =
2509 static_cast<DOMStorageContextWrapper*>(partition->GetDOMStorageContext());
2510
2511 SessionStorageNamespaceMap::const_iterator it =
2512 session_storage_namespace_map_.find(partition_id);
2513 if (it != session_storage_namespace_map_.end()) {
2514 // Ensure that this namespace actually belongs to this partition.
Aran Gilman37d11632019-10-08 23:07:152515 DCHECK(static_cast<SessionStorageNamespaceImpl*>(it->second.get())
2516 ->IsFromContext(context_wrapper));
michaelnbacbcbd2016-02-09 00:32:032517 return it->second.get();
2518 }
2519
2520 // Create one if no one has accessed session storage for this partition yet.
Daniel Murphy31bbb8b12018-02-07 21:44:102521 scoped_refptr<SessionStorageNamespaceImpl> session_storage_namespace =
2522 SessionStorageNamespaceImpl::Create(context_wrapper);
2523 SessionStorageNamespaceImpl* session_storage_namespace_ptr =
2524 session_storage_namespace.get();
2525 session_storage_namespace_map_[partition_id] =
2526 std::move(session_storage_namespace);
[email protected]fdac6ade2013-07-20 01:06:302527
Daniel Murphy31bbb8b12018-02-07 21:44:102528 return session_storage_namespace_ptr;
[email protected]fdac6ade2013-07-20 01:06:302529}
2530
2531SessionStorageNamespace*
2532NavigationControllerImpl::GetDefaultSessionStorageNamespace() {
2533 // TODO(ajwong): Remove if statement in GetSessionStorageNamespace().
Ivan Kotenkov2c0d2bb32017-11-01 15:41:282534 return GetSessionStorageNamespace(nullptr);
[email protected]fdac6ade2013-07-20 01:06:302535}
2536
2537const SessionStorageNamespaceMap&
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572538NavigationControllerImpl::GetSessionStorageNamespaceMap() {
[email protected]fdac6ade2013-07-20 01:06:302539 return session_storage_namespace_map_;
[email protected]a26023822011-12-29 00:23:552540}
[email protected]d202a7c2012-01-04 07:53:472541
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572542bool NavigationControllerImpl::NeedsReload() {
[email protected]71fde352011-12-29 03:29:562543 return needs_reload_;
2544}
[email protected]a26023822011-12-29 00:23:552545
[email protected]46bb5e9c2013-10-03 22:16:472546void NavigationControllerImpl::SetNeedsReload() {
Alex Moshchuk7b4f0652019-05-30 18:54:412547 SetNeedsReload(NeedsReloadType::kRequestedByClient);
2548}
2549
2550void NavigationControllerImpl::SetNeedsReload(NeedsReloadType type) {
[email protected]46bb5e9c2013-10-03 22:16:472551 needs_reload_ = true;
Alex Moshchuk7b4f0652019-05-30 18:54:412552 needs_reload_type_ = type;
jaekyunc8cefa82015-01-09 20:14:542553
2554 if (last_committed_entry_index_ != -1) {
2555 entries_[last_committed_entry_index_]->SetTransitionType(
2556 ui::PAGE_TRANSITION_RELOAD);
2557 }
[email protected]46bb5e9c2013-10-03 22:16:472558}
2559
[email protected]d202a7c2012-01-04 07:53:472560void NavigationControllerImpl::RemoveEntryAtIndexInternal(int index) {
Kevin McNee05164772019-09-03 17:24:572561 DCHECK_LT(index, GetEntryCount());
2562 DCHECK_NE(index, last_committed_entry_index_);
[email protected]43032342011-03-21 14:10:312563 DiscardNonCommittedEntries();
2564
2565 entries_.erase(entries_.begin() + index);
[email protected]6a13a6c2011-12-20 21:47:122566 if (last_committed_entry_index_ > index)
[email protected]43032342011-03-21 14:10:312567 last_committed_entry_index_--;
2568}
2569
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572570NavigationEntryImpl* NavigationControllerImpl::GetPendingEntry() {
arthursonzogni5c4c202d2017-04-25 23:41:272571 // If there is no pending_entry_, there should be no pending_entry_index_.
2572 DCHECK(pending_entry_ || pending_entry_index_ == -1);
2573
2574 // If there is a pending_entry_index_, then pending_entry_ must be the entry
Carlos IL42b416592019-10-07 23:10:362575 // at that index. An exception is while a reload of a post commit error page
2576 // is ongoing; in that case pending entry will point to the entry replaced
2577 // by the error.
arthursonzogni5c4c202d2017-04-25 23:41:272578 DCHECK(pending_entry_index_ == -1 ||
Carlos IL42b416592019-10-07 23:10:362579 pending_entry_ == GetEntryAtIndex(pending_entry_index_) ||
2580 pending_entry_ == entry_replaced_by_post_commit_error_.get());
arthursonzogni5c4c202d2017-04-25 23:41:272581
[email protected]022af742011-12-28 18:37:252582 return pending_entry_;
2583}
2584
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572585int NavigationControllerImpl::GetPendingEntryIndex() {
arthursonzogni5c4c202d2017-04-25 23:41:272586 // The pending entry index must always be less than the number of entries.
2587 // If there are no entries, it must be exactly -1.
2588 DCHECK_LT(pending_entry_index_, GetEntryCount());
2589 DCHECK(GetEntryCount() != 0 || pending_entry_index_ == -1);
[email protected]a26023822011-12-29 00:23:552590 return pending_entry_index_;
2591}
2592
avi25764702015-06-23 15:43:372593void NavigationControllerImpl::InsertOrReplaceEntry(
dcheng9bfa5162016-04-09 01:00:572594 std::unique_ptr<NavigationEntryImpl> entry,
Carlos IL42b416592019-10-07 23:10:362595 bool replace,
2596 bool was_post_commit_error) {
mastiz7eddb5f72016-06-23 09:52:452597 DCHECK(!ui::PageTransitionCoreTypeIs(entry->GetTransitionType(),
2598 ui::PAGE_TRANSITION_AUTO_SUBFRAME));
[email protected]765b35502008-08-21 00:51:202599
avi5cad4912015-06-19 05:25:442600 // If the pending_entry_index_ is -1, the navigation was to a new page, and we
2601 // need to keep continuity with the pending entry, so copy the pending entry's
2602 // unique ID to the committed entry. If the pending_entry_index_ isn't -1,
2603 // then the renderer navigated on its own, independent of the pending entry,
2604 // so don't copy anything.
2605 if (pending_entry_ && pending_entry_index_ == -1)
2606 entry->set_unique_id(pending_entry_->GetUniqueID());
[email protected]765b35502008-08-21 00:51:202607
arthursonzogni69a6a1b2019-09-17 09:23:002608 DiscardNonCommittedEntries();
[email protected]765b35502008-08-21 00:51:202609
creisee17e932015-07-17 17:56:222610 // When replacing, don't prune the forward history.
Carlos IL42b416592019-10-07 23:10:362611 if ((replace || was_post_commit_error) && entries_.size() > 0) {
Mikel Astizba9cf2fd2017-12-17 10:38:102612 CopyReplacedNavigationEntryDataIfPreviouslyEmpty(
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572613 entries_[last_committed_entry_index_].get(), entry.get());
Carlos IL42b416592019-10-07 23:10:362614 // If the new entry is a post-commit error page, we store the current last
2615 // committed entry to the side so that we can put it back when navigating
2616 // away from the error.
2617 if (was_post_commit_error) {
2618 DCHECK(!entry_replaced_by_post_commit_error_);
2619 entry_replaced_by_post_commit_error_ =
2620 std::move(entries_[last_committed_entry_index_]);
2621 }
dcheng36b6aec92015-12-26 06:16:362622 entries_[last_committed_entry_index_] = std::move(entry);
creisee17e932015-07-17 17:56:222623 return;
2624 }
[email protected]765b35502008-08-21 00:51:202625
creis37979a62015-08-04 19:48:182626 // We shouldn't see replace == true when there's no committed entries.
2627 DCHECK(!replace);
2628
Michael Thiessen9b14d512019-09-23 21:19:472629 PruneForwardEntries();
[email protected]765b35502008-08-21 00:51:202630
Shivani Sharmad8c8d652019-02-13 17:27:572631 PruneOldestSkippableEntryIfFull();
[email protected]765b35502008-08-21 00:51:202632
dcheng36b6aec92015-12-26 06:16:362633 entries_.push_back(std::move(entry));
[email protected]765b35502008-08-21 00:51:202634 last_committed_entry_index_ = static_cast<int>(entries_.size()) - 1;
initial.commit09911bf2008-07-26 23:55:292635}
2636
Shivani Sharmad8c8d652019-02-13 17:27:572637void NavigationControllerImpl::PruneOldestSkippableEntryIfFull() {
Shivani Sharma2d5b4b6b2019-01-08 16:07:162638 if (entries_.size() < max_entry_count())
2639 return;
2640
2641 DCHECK_EQ(max_entry_count(), entries_.size());
2642 DCHECK_GT(last_committed_entry_index_, 0);
Shivani Sharmad8c8d652019-02-13 17:27:572643 CHECK_EQ(pending_entry_index_, -1);
2644
2645 int index = 0;
2646 if (base::FeatureList::IsEnabled(
2647 features::kHistoryManipulationIntervention)) {
2648 // Retrieve the oldest skippable entry.
2649 for (; index < GetEntryCount(); index++) {
2650 if (GetEntryAtIndex(index)->should_skip_on_back_forward_ui())
2651 break;
2652 }
2653 }
2654
2655 // If there is no skippable entry or if it is the last committed entry then
2656 // fall back to pruning the oldest entry. It is not safe to prune the last
2657 // committed entry.
2658 if (index == GetEntryCount() || index == last_committed_entry_index_)
2659 index = 0;
2660
2661 bool should_succeed = RemoveEntryAtIndex(index);
2662 DCHECK_EQ(true, should_succeed);
2663
2664 NotifyPrunedEntries(this, index, 1);
[email protected]944822b2012-03-02 20:57:252665}
2666
clamy3cb9bea92018-07-10 12:42:022667void NavigationControllerImpl::NavigateToExistingPendingEntry(
Dave Tapuska8bfd84c2019-03-26 20:47:162668 ReloadType reload_type,
2669 int sandboxed_source_frame_tree_node_id) {
Alexander Timin3a92df72019-09-20 11:59:502670 TRACE_EVENT0("navigation",
2671 "NavigationControllerImpl::NavigateToExistingPendingEntry");
arthursonzogni5c4c202d2017-04-25 23:41:272672 DCHECK(pending_entry_);
clamy3cb9bea92018-07-10 12:42:022673 DCHECK(IsInitialNavigation() || pending_entry_index_ != -1);
Carlos IL42b416592019-10-07 23:10:362674 if (pending_entry_index_ != -1) {
2675 // The pending entry may not be in entries_ if a post-commit error page is
2676 // showing.
2677 DCHECK(pending_entry_ == entries_[pending_entry_index_].get() ||
2678 pending_entry_ == entry_replaced_by_post_commit_error_.get());
2679 }
clamy3cb9bea92018-07-10 12:42:022680 DCHECK(!IsRendererDebugURL(pending_entry_->GetURL()));
Alex Moshchuk3a4e77a2020-05-29 21:32:572681 bool is_forced_reload = needs_reload_;
[email protected]72097fd02010-01-21 23:36:012682 needs_reload_ = false;
Carlos Caballero40b0efd2021-01-26 11:55:002683 FrameTreeNode* root = frame_tree_.root();
Arthur Sonzogni620cec62018-12-13 13:08:572684 int nav_entry_id = pending_entry_->GetUniqueID();
2685
[email protected]83c2e232011-10-07 21:36:462686 // If we were navigating to a slow-to-commit page, and the user performs
2687 // a session history navigation to the last committed page, RenderViewHost
2688 // will force the throbber to start, but WebKit will essentially ignore the
2689 // navigation, and won't send a message to stop the throbber. To prevent this
2690 // from happening, we drop the navigation here and stop the slow-to-commit
2691 // page from loading (which would normally happen during the navigation).
clamy3cb9bea92018-07-10 12:42:022692 if (pending_entry_index_ == last_committed_entry_index_ &&
Lukasz Anforowicz6b75c0d2020-12-01 22:56:082693 !pending_entry_->IsRestored() &&
arthursonzogni5c4c202d2017-04-25 23:41:272694 pending_entry_->GetTransitionType() & ui::PAGE_TRANSITION_FORWARD_BACK) {
[email protected]ec6c05f2013-10-23 18:41:572695 delegate_->Stop();
[email protected]6a13a6c2011-12-20 21:47:122696
[email protected]83c2e232011-10-07 21:36:462697 DiscardNonCommittedEntries();
2698 return;
2699 }
2700
creisce0ef3572017-01-26 17:53:082701 // Compare FrameNavigationEntries to see which frames in the tree need to be
2702 // navigated.
clamy3cb9bea92018-07-10 12:42:022703 std::vector<std::unique_ptr<NavigationRequest>> same_document_loads;
2704 std::vector<std::unique_ptr<NavigationRequest>> different_document_loads;
Alex Moshchuk3a4e77a2020-05-29 21:32:572705 FindFramesToNavigate(root, reload_type, &same_document_loads,
2706 &different_document_loads);
creis4e2ecb72015-06-20 00:46:302707
2708 if (same_document_loads.empty() && different_document_loads.empty()) {
Alex Moshchuk3a4e77a2020-05-29 21:32:572709 // We were unable to match any frames to navigate. This can happen if a
2710 // history navigation targets a subframe that no longer exists
2711 // (https://crbug.com/705550). In this case, we need to update the current
2712 // history entry to the pending one but keep the main document loaded. We
2713 // also need to ensure that observers are informed about the updated
2714 // current history entry (e.g., for greying out back/forward buttons), and
2715 // that renderer processes update their history offsets. The easiest way
2716 // to do all that is to schedule a "redundant" same-document navigation in
2717 // the main frame.
2718 //
2719 // Note that we don't want to remove this history entry, as it might still
2720 // be valid later, since a frame that it's targeting may be recreated.
2721 //
2722 // TODO(alexmos, creis): This behavior isn't ideal, as the user would
2723 // need to repeat history navigations until finding the one that works.
2724 // Consider changing this behavior to keep looking for the first valid
2725 // history entry that finds frames to navigate.
clamy3cb9bea92018-07-10 12:42:022726 std::unique_ptr<NavigationRequest> navigation_request =
Camille Lamy5193caa2018-10-12 11:59:422727 CreateNavigationRequestFromEntry(
Lucas Furukawa Gadani5553a1582019-01-08 18:55:572728 root, pending_entry_, pending_entry_->GetFrameEntry(root),
Alex Moshchuk3a4e77a2020-05-29 21:32:572729 ReloadType::NONE /* reload_type */,
2730 true /* is_same_document_history_load */,
Camille Lamy5193caa2018-10-12 11:59:422731 false /* is_history_navigation_in_new_child */);
clamy3cb9bea92018-07-10 12:42:022732 if (!navigation_request) {
Alex Moshchuk3a4e77a2020-05-29 21:32:572733 // If this navigation cannot start, delete the pending NavigationEntry.
clamy3cb9bea92018-07-10 12:42:022734 DiscardPendingEntry(false);
2735 return;
2736 }
Alex Moshchuk3a4e77a2020-05-29 21:32:572737 same_document_loads.push_back(std::move(navigation_request));
2738
2739 // Sanity check that we never take this branch for any kinds of reloads,
2740 // as those should've queued a different-document load in the main frame.
2741 DCHECK(!is_forced_reload);
2742 DCHECK_EQ(reload_type, ReloadType::NONE);
creis4e2ecb72015-06-20 00:46:302743 }
2744
Dave Tapuska8bfd84c2019-03-26 20:47:162745 // If |sandboxed_source_frame_node_id| is valid, then track whether this
2746 // navigation affects any frame outside the frame's subtree.
2747 if (sandboxed_source_frame_tree_node_id !=
2748 FrameTreeNode::kFrameTreeNodeInvalidId) {
2749 bool navigates_inside_tree =
2750 DoesSandboxNavigationStayWithinSubtree(
2751 sandboxed_source_frame_tree_node_id, same_document_loads) &&
2752 DoesSandboxNavigationStayWithinSubtree(
2753 sandboxed_source_frame_tree_node_id, different_document_loads);
Dave Tapuska716ed3af2019-09-23 18:45:502754 // Count the navigations as web use counters so we can determine
Dave Tapuska8bfd84c2019-03-26 20:47:162755 // the number of pages that trigger this.
2756 FrameTreeNode* sandbox_source_frame_tree_node =
2757 FrameTreeNode::GloballyFindByID(sandboxed_source_frame_tree_node_id);
2758 if (sandbox_source_frame_tree_node) {
2759 GetContentClient()->browser()->LogWebFeatureForCurrentPage(
2760 sandbox_source_frame_tree_node->current_frame_host(),
2761 navigates_inside_tree
2762 ? blink::mojom::WebFeature::kSandboxBackForwardStaysWithinSubtree
2763 : blink::mojom::WebFeature::
2764 kSandboxBackForwardAffectsFramesOutsideSubtree);
2765 }
Dave Tapuska855c1e12019-08-23 20:45:522766
2767 // If the navigation occurred outside the tree discard it because
2768 // the sandboxed frame didn't have permission to navigate outside
2769 // its tree. If it is possible that the navigation is both inside and
2770 // outside the frame tree and we discard it entirely because we don't
2771 // want to end up in a history state that didn't exist before.
2772 if (base::FeatureList::IsEnabled(
2773 features::kHistoryPreventSandboxedNavigation) &&
2774 !navigates_inside_tree) {
2775 DiscardPendingEntry(false);
2776 return;
2777 }
Dave Tapuska8bfd84c2019-03-26 20:47:162778 }
2779
Carlos Caballero539a421c2020-07-06 10:25:572780 // BackForwardCache:
2781 // Navigate immediately if the document is in the BackForwardCache.
2782 if (back_forward_cache_.GetEntry(nav_entry_id)) {
2783 TRACE_EVENT0("navigation", "BackForwardCache_CreateNavigationRequest");
2784 DCHECK_EQ(reload_type, ReloadType::NONE);
2785 auto navigation_request = CreateNavigationRequestFromEntry(
2786 root, pending_entry_, pending_entry_->GetFrameEntry(root),
2787 ReloadType::NONE, false /* is_same_document_history_load */,
2788 false /* is_history_navigation_in_new_child */);
Lukasz Anforowicz9ee83c272020-12-01 20:14:052789 root->navigator().Navigate(std::move(navigation_request), ReloadType::NONE);
Carlos Caballero539a421c2020-07-06 10:25:572790
2791 return;
2792 }
2793
2794 // History navigation might try to reuse a specific BrowsingInstance, already
2795 // used by a page in the cache. To avoid having two different main frames that
2796 // live in the same BrowsingInstance, evict the all pages with this
2797 // BrowsingInstance from the cache.
2798 //
2799 // For example, take the following scenario:
2800 //
2801 // A1 = Some page on a.com
2802 // A2 = Some other page on a.com
2803 // B3 = An uncacheable page on b.com
2804 //
2805 // Then the following navigations occur:
2806 // A1->A2->B3->A1
2807 // On the navigation from B3 to A1, A2 will remain in the cache (B3 doesn't
2808 // take its place) and A1 will be created in the same BrowsingInstance (and
2809 // SiteInstance), as A2.
2810 //
2811 // If we didn't do anything, both A1 and A2 would remain alive in the same
2812 // BrowsingInstance/SiteInstance, which is unsupported by
2813 // RenderFrameHostManager::CommitPending(). To avoid this conundrum, we evict
2814 // A2 from the cache.
2815 if (pending_entry_->site_instance()) {
2816 back_forward_cache_.EvictFramesInRelatedSiteInstances(
2817 pending_entry_->site_instance());
2818 }
2819
clamy3cb9bea92018-07-10 12:42:022820 // This call does not support re-entrancy. See http://crbug.com/347742.
2821 CHECK(!in_navigate_to_pending_entry_);
2822 in_navigate_to_pending_entry_ = true;
creis4e2ecb72015-06-20 00:46:302823
arthursonzogni66f711c2019-10-08 14:40:362824 // It is not possible to delete the pending NavigationEntry while navigating
2825 // to it. Grab a reference to delay potential deletion until the end of this
2826 // function.
2827 std::unique_ptr<PendingEntryRef> pending_entry_ref = ReferencePendingEntry();
2828
creis4e2ecb72015-06-20 00:46:302829 // Send all the same document frame loads before the different document loads.
clamy3cb9bea92018-07-10 12:42:022830 for (auto& item : same_document_loads) {
2831 FrameTreeNode* frame = item->frame_tree_node();
Lukasz Anforowicz9ee83c272020-12-01 20:14:052832 frame->navigator().Navigate(std::move(item), reload_type);
creis4e2ecb72015-06-20 00:46:302833 }
clamy3cb9bea92018-07-10 12:42:022834 for (auto& item : different_document_loads) {
2835 FrameTreeNode* frame = item->frame_tree_node();
Lukasz Anforowicz9ee83c272020-12-01 20:14:052836 frame->navigator().Navigate(std::move(item), reload_type);
creis4e2ecb72015-06-20 00:46:302837 }
clamy3cb9bea92018-07-10 12:42:022838
2839 in_navigate_to_pending_entry_ = false;
creis4e2ecb72015-06-20 00:46:302840}
2841
Alex Moshchuk3a4e77a2020-05-29 21:32:572842NavigationControllerImpl::HistoryNavigationAction
2843NavigationControllerImpl::DetermineActionForHistoryNavigation(
creis4e2ecb72015-06-20 00:46:302844 FrameTreeNode* frame,
Alex Moshchuk3a4e77a2020-05-29 21:32:572845 ReloadType reload_type) {
Sreeja Kamishetty0be2ac52020-05-28 01:47:462846 // Only active frames can navigate:
2847 // - If the frame is in pending deletion, the browser already committed to
2848 // destroying this RenderFrameHost. See https://crbug.com/930278.
2849 // - If the frame is in back-forward cache, it's not allowed to navigate as it
2850 // should remain frozen. Ignore the request and evict the document from
2851 // back-forward cache.
Alex Moshchuke65c39272020-06-03 17:55:372852 //
2853 // If the frame is inactive, there's no need to recurse into subframes, which
2854 // should all be inactive as well.
Sreeja Kamishetty0be2ac52020-05-28 01:47:462855 if (frame->current_frame_host()->IsInactiveAndDisallowReactivation())
Alex Moshchuke65c39272020-06-03 17:55:372856 return HistoryNavigationAction::kStopLooking;
arthursonzogni03f76152019-02-12 10:35:202857
Alex Moshchuk3a4e77a2020-05-29 21:32:572858 // If there's no last committed entry, there is no previous history entry to
2859 // compare against, so fall back to a different-document load. Note that we
2860 // should only reach this case for the root frame and not descend further
2861 // into subframes.
2862 if (!GetLastCommittedEntry()) {
2863 DCHECK(frame->IsMainFrame());
2864 return HistoryNavigationAction::kDifferentDocument;
2865 }
2866
2867 // Reloads should result in a different-document load. Note that reloads may
2868 // also happen via the |needs_reload_| mechanism where the reload_type is
2869 // NONE, so detect this by comparing whether we're going to the same
2870 // entry that we're currently on. Similarly to above, only main frames
2871 // should reach this. Note that subframes support reloads, but that's done
2872 // via a different path that doesn't involve FindFramesToNavigate (see
2873 // RenderFrameHost::Reload()).
2874 if (reload_type != ReloadType::NONE ||
2875 pending_entry_index_ == last_committed_entry_index_) {
2876 DCHECK(frame->IsMainFrame());
2877 return HistoryNavigationAction::kDifferentDocument;
2878 }
2879
Alex Moshchuk47d1a4bd2020-06-01 22:15:342880 // If there is no new FrameNavigationEntry for the frame, ignore the
2881 // load. For example, this may happen when going back to an entry before a
2882 // frame was created. Suppose we commit a same-document navigation that also
2883 // results in adding a new subframe somewhere in the tree. If we go back,
2884 // the new subframe will be missing a FrameNavigationEntry in the previous
2885 // NavigationEntry, but we shouldn't delete or change what's loaded in
2886 // it.
2887 //
Alex Moshchuke65c39272020-06-03 17:55:372888 // Note that in this case, there is no need to keep looking for navigations
2889 // in subframes, which would be missing FrameNavigationEntries as well.
2890 //
Alex Moshchuk47d1a4bd2020-06-01 22:15:342891 // It's important to check this before checking |old_item| below, since both
2892 // might be null, and in that case we still shouldn't change what's loaded in
2893 // this frame. Note that scheduling any loads assumes that |new_item| is
2894 // non-null. See https://crbug.com/1088354.
2895 FrameNavigationEntry* new_item = pending_entry_->GetFrameEntry(frame);
2896 if (!new_item)
Alex Moshchuke65c39272020-06-03 17:55:372897 return HistoryNavigationAction::kStopLooking;
Alex Moshchuk47d1a4bd2020-06-01 22:15:342898
Alex Moshchuk3a4e77a2020-05-29 21:32:572899 // If there is no old FrameNavigationEntry, schedule a different-document
2900 // load.
2901 //
creis225a7432016-06-03 22:56:272902 // TODO(creis): Store the last committed FrameNavigationEntry to use here,
2903 // rather than assuming the NavigationEntry has up to date info on subframes.
Alex Moshchuk3a4e77a2020-05-29 21:32:572904 // Note that this may require sharing FrameNavigationEntries between
2905 // NavigationEntries (https://crbug.com/373041) as a prerequisite, since
2906 // otherwise the stored FrameNavigationEntry might get stale (e.g., after
2907 // subframe navigations, or in the case where we don't find any frames to
2908 // navigate and ignore a back/forward navigation while moving to a different
2909 // NavigationEntry, as in https://crbug.com/705550).
creis4e2ecb72015-06-20 00:46:302910 FrameNavigationEntry* old_item =
2911 GetLastCommittedEntry()->GetFrameEntry(frame);
Alex Moshchuk3a4e77a2020-05-29 21:32:572912 if (!old_item)
2913 return HistoryNavigationAction::kDifferentDocument;
2914
Alex Moshchuk3a4e77a2020-05-29 21:32:572915 // If the new item is not in the same SiteInstance, schedule a
2916 // different-document load. Newly restored items may not have a SiteInstance
2917 // yet, in which case it will be assigned on first commit.
2918 if (new_item->site_instance() &&
2919 new_item->site_instance() != old_item->site_instance())
2920 return HistoryNavigationAction::kDifferentDocument;
2921
2922 // Schedule a different-document load if the current RenderFrameHost is not
2923 // live. This case can happen for Ctrl+Back or after
2924 // a renderer crash.
2925 if (!frame->current_frame_host()->IsRenderFrameLive())
2926 return HistoryNavigationAction::kDifferentDocument;
2927
2928 if (new_item->item_sequence_number() != old_item->item_sequence_number()) {
creis54131692016-08-12 18:32:252929 // Same document loads happen if the previous item has the same document
danakjb952ef12021-01-14 19:58:492930 // sequence number but different item sequence number.
2931 if (new_item->document_sequence_number() ==
2932 old_item->document_sequence_number()) {
Alex Moshchuk3a4e77a2020-05-29 21:32:572933 return HistoryNavigationAction::kSameDocument;
danakjb952ef12021-01-14 19:58:492934 }
avib48cb312016-05-05 21:35:002935
Alex Moshchuk3a4e77a2020-05-29 21:32:572936 // Otherwise, if both item and document sequence numbers differ, this
2937 // should be a different document load.
2938 return HistoryNavigationAction::kDifferentDocument;
2939 }
2940
2941 // If the item sequence numbers match, there is no need to navigate this
Alex Moshchuke65c39272020-06-03 17:55:372942 // frame. Keep looking for navigations in this frame's children.
Alex Moshchuk3a4e77a2020-05-29 21:32:572943 DCHECK_EQ(new_item->document_sequence_number(),
2944 old_item->document_sequence_number());
Alex Moshchuke65c39272020-06-03 17:55:372945 return HistoryNavigationAction::kKeepLooking;
Alex Moshchuk3a4e77a2020-05-29 21:32:572946}
2947
2948void NavigationControllerImpl::FindFramesToNavigate(
2949 FrameTreeNode* frame,
2950 ReloadType reload_type,
2951 std::vector<std::unique_ptr<NavigationRequest>>* same_document_loads,
2952 std::vector<std::unique_ptr<NavigationRequest>>* different_document_loads) {
2953 DCHECK(pending_entry_);
2954 FrameNavigationEntry* new_item = pending_entry_->GetFrameEntry(frame);
2955
2956 auto action = DetermineActionForHistoryNavigation(frame, reload_type);
2957
2958 if (action == HistoryNavigationAction::kSameDocument) {
2959 std::unique_ptr<NavigationRequest> navigation_request =
2960 CreateNavigationRequestFromEntry(
2961 frame, pending_entry_, new_item, reload_type,
2962 true /* is_same_document_history_load */,
2963 false /* is_history_navigation_in_new_child */);
2964 if (navigation_request) {
2965 // Only add the request if was properly created. It's possible for the
2966 // creation to fail in certain cases, e.g. when the URL is invalid.
2967 same_document_loads->push_back(std::move(navigation_request));
creis4e2ecb72015-06-20 00:46:302968 }
Lei Zhang96031532019-10-10 19:05:472969
Alex Moshchuk3a4e77a2020-05-29 21:32:572970 // TODO(avi, creis): This is a bug; we should not return here. Rather, we
2971 // should continue on and navigate all child frames which have also
2972 // changed. This bug is the cause of <https://crbug.com/542299>, which is
2973 // a NC_IN_PAGE_NAVIGATION renderer kill.
2974 //
2975 // However, this bug is a bandaid over a deeper and worse problem. Doing a
2976 // pushState immediately after loading a subframe is a race, one that no
2977 // web page author expects. If we fix this bug, many large websites break.
2978 // For example, see <https://crbug.com/598043> and the spec discussion at
2979 // <https://github.com/whatwg/html/issues/1191>.
2980 //
2981 // For now, we accept this bug, and hope to resolve the race in a
2982 // different way that will one day allow us to fix this.
2983 return;
2984 } else if (action == HistoryNavigationAction::kDifferentDocument) {
Lei Zhang96031532019-10-10 19:05:472985 std::unique_ptr<NavigationRequest> navigation_request =
2986 CreateNavigationRequestFromEntry(
2987 frame, pending_entry_, new_item, reload_type,
2988 false /* is_same_document_history_load */,
2989 false /* is_history_navigation_in_new_child */);
2990 if (navigation_request) {
2991 // Only add the request if was properly created. It's possible for the
2992 // creation to fail in certain cases, e.g. when the URL is invalid.
2993 different_document_loads->push_back(std::move(navigation_request));
2994 }
2995 // For a different document, the subframes will be destroyed, so there's
2996 // no need to consider them.
2997 return;
Alex Moshchuke65c39272020-06-03 17:55:372998 } else if (action == HistoryNavigationAction::kStopLooking) {
2999 return;
creis4e2ecb72015-06-20 00:46:303000 }
3001
3002 for (size_t i = 0; i < frame->child_count(); i++) {
clamy3cb9bea92018-07-10 12:42:023003 FindFramesToNavigate(frame->child_at(i), reload_type, same_document_loads,
creis4e2ecb72015-06-20 00:46:303004 different_document_loads);
3005 }
3006}
3007
clamy21718cc22018-06-13 13:34:243008void NavigationControllerImpl::NavigateWithoutEntry(
3009 const LoadURLParams& params) {
3010 // Find the appropriate FrameTreeNode.
3011 FrameTreeNode* node = nullptr;
3012 if (params.frame_tree_node_id != RenderFrameHost::kNoFrameTreeNodeId ||
3013 !params.frame_name.empty()) {
3014 node = params.frame_tree_node_id != RenderFrameHost::kNoFrameTreeNodeId
Carlos Caballero40b0efd2021-01-26 11:55:003015 ? frame_tree_.FindByID(params.frame_tree_node_id)
3016 : frame_tree_.FindByName(params.frame_name);
clamy21718cc22018-06-13 13:34:243017 }
3018
3019 // If no FrameTreeNode was specified, navigate the main frame.
3020 if (!node)
Carlos Caballero40b0efd2021-01-26 11:55:003021 node = frame_tree_.root();
clamy21718cc22018-06-13 13:34:243022
Camille Lamy5193caa2018-10-12 11:59:423023 // Compute overrides to the LoadURLParams for |override_user_agent|,
3024 // |should_replace_current_entry| and |has_user_gesture| that will be used
3025 // both in the creation of the NavigationEntry and the NavigationRequest.
3026 // Ideally, the LoadURLParams themselves would be updated, but since they are
3027 // passed as a const reference, this is not possible.
3028 // TODO(clamy): When we only create a NavigationRequest, move this to
3029 // CreateNavigationRequestFromLoadURLParams.
3030 bool override_user_agent = ShouldOverrideUserAgent(params.override_user_agent,
3031 GetLastCommittedEntry());
3032
3033 // Don't allow an entry replacement if there is no entry to replace.
3034 // http://crbug.com/457149
3035 bool should_replace_current_entry =
3036 params.should_replace_current_entry && entries_.size();
3037
Scott Violet5ae6c42e2020-10-28 02:47:373038 ui::PageTransition transition_type = params.transition_type;
3039
clamy21718cc22018-06-13 13:34:243040 // Javascript URLs should not create NavigationEntries. All other navigations
3041 // do, including navigations to chrome renderer debug URLs.
clamy21718cc22018-06-13 13:34:243042 if (!params.url.SchemeIs(url::kJavaScriptScheme)) {
Scott Violet5ae6c42e2020-10-28 02:47:373043 std::unique_ptr<NavigationEntryImpl> entry =
3044 CreateNavigationEntryFromLoadParams(node, params, override_user_agent,
3045 should_replace_current_entry,
3046 params.has_user_gesture);
3047 // CreateNavigationEntryFromLoadParams() may modify the transition type.
3048 transition_type = entry->GetTransitionType();
clamy21718cc22018-06-13 13:34:243049 DiscardPendingEntry(false);
3050 SetPendingEntry(std::move(entry));
3051 }
3052
3053 // Renderer-debug URLs are sent to the renderer process immediately for
3054 // processing and don't need to create a NavigationRequest.
3055 // Note: this includes navigations to JavaScript URLs, which are considered
3056 // renderer-debug URLs.
3057 // Note: we intentionally leave the pending entry in place for renderer debug
3058 // URLs, unlike the cases below where we clear it if the navigation doesn't
3059 // proceed.
3060 if (IsRendererDebugURL(params.url)) {
Oleg Davydov2cc0167b2019-02-05 14:32:483061 // Renderer-debug URLs won't go through NavigationThrottlers so we have to
3062 // check them explicitly. See bug 913334.
Aaron Colwelle1908d982020-06-26 22:08:153063 if (GetContentClient()->browser()->ShouldBlockRendererDebugURL(
Oleg Davydov2cc0167b2019-02-05 14:32:483064 params.url, browser_context_)) {
3065 DiscardPendingEntry(false);
3066 return;
3067 }
3068
clamy21718cc22018-06-13 13:34:243069 HandleRendererDebugURL(node, params.url);
3070 return;
3071 }
3072
Antonio Sartori78a749f2020-11-30 12:03:393073 DCHECK(pending_entry_);
3074
clamy21718cc22018-06-13 13:34:243075 // Convert navigations to the current URL to a reload.
3076 // TODO(clamy): We should be using FrameTreeNode::IsMainFrame here instead of
3077 // relying on the frame tree node id from LoadURLParams. Unfortunately,
3078 // DevTools sometimes issues navigations to main frames that they do not
3079 // expect to see treated as reload, and it only works because they pass a
3080 // FrameTreeNode id in their LoadURLParams. Change this once they no longer do
3081 // that. See https://crbug.com/850926.
Robert Ogden011a8082019-01-23 19:04:543082 ReloadType reload_type = params.reload_type;
3083 if (reload_type == ReloadType::NONE &&
3084 ShouldTreatNavigationAsReload(
Fergal Daly766177d2020-07-07 07:54:043085 node, params.url, pending_entry_->GetVirtualURL(),
clamy21718cc22018-06-13 13:34:243086 params.base_url_for_data_url, params.transition_type,
clamy21718cc22018-06-13 13:34:243087 params.load_type ==
3088 NavigationController::LOAD_TYPE_HTTP_POST /* is_post */,
3089 false /* is_reload */, false /* is_navigation_to_existing_entry */,
clamy21718cc22018-06-13 13:34:243090 GetLastCommittedEntry())) {
3091 reload_type = ReloadType::NORMAL;
Alexander Timinb70f67382020-12-10 00:03:473092 pending_entry_->set_reload_type(reload_type);
Antonio Sartori78a749f2020-11-30 12:03:393093
3094 // If this is a reload of an existing FrameNavigationEntry and we had a
3095 // policy container for it, then we should copy it into the pending entry,
3096 // so that it is copied to the navigation request in
3097 // CreateNavigationRequestFromLoadParams later.
3098 if (GetLastCommittedEntry()) {
3099 FrameNavigationEntry* previous_frame_entry =
3100 GetLastCommittedEntry()->GetFrameEntry(node);
3101 if (previous_frame_entry && previous_frame_entry->document_policies()) {
3102 pending_entry_->GetFrameEntry(node)->set_document_policies(
3103 std::make_unique<PolicyContainerHost::DocumentPolicies>(
3104 *previous_frame_entry->document_policies()));
3105 }
3106 }
3107 }
3108
3109 // If this navigation is an "Enter-in-omnibox" with the initial about:blank
3110 // document (so no last commit), then we should copy the document polices from
3111 // RenderFrameHost's PolicyContainerHost. The NavigationRequest will create a
3112 // new PolicyContainerHost with the document policies from the
3113 // |pending_entry_|, and that PolicyContainerHost will be put in the final
3114 // RenderFrameHost for the navigation. This way, we ensure that we keep
3115 // enforcing the right policies on the initial empty document after the
3116 // reload.
3117 if (!GetLastCommittedEntry() && params.url.IsAboutBlank()) {
3118 if (node->current_frame_host() &&
3119 node->current_frame_host()->policy_container_host()) {
3120 pending_entry_->GetFrameEntry(node)->set_document_policies(
3121 std::make_unique<PolicyContainerHost::DocumentPolicies>(
3122 node->current_frame_host()
3123 ->policy_container_host()
3124 ->document_policies()));
3125 }
clamy21718cc22018-06-13 13:34:243126 }
3127
3128 // navigation_ui_data should only be present for main frame navigations.
3129 DCHECK(node->IsMainFrame() || !params.navigation_ui_data);
3130
Camille Lamy5193caa2018-10-12 11:59:423131 std::unique_ptr<NavigationRequest> request =
3132 CreateNavigationRequestFromLoadParams(
3133 node, params, override_user_agent, should_replace_current_entry,
John Abd-El-Malekd95f34382020-10-06 04:56:463134 params.has_user_gesture, NavigationDownloadPolicy(), reload_type,
Scott Violet5ae6c42e2020-10-28 02:47:373135 pending_entry_, pending_entry_->GetFrameEntry(node), transition_type);
clamy21718cc22018-06-13 13:34:243136
3137 // If the navigation couldn't start, return immediately and discard the
3138 // pending NavigationEntry.
3139 if (!request) {
3140 DiscardPendingEntry(false);
3141 return;
3142 }
3143
Camille Lamy5193caa2018-10-12 11:59:423144#if DCHECK_IS_ON()
3145 // Safety check that NavigationRequest and NavigationEntry match.
3146 ValidateRequestMatchesEntry(request.get(), pending_entry_);
3147#endif
3148
clamy21718cc22018-06-13 13:34:243149 // This call does not support re-entrancy. See http://crbug.com/347742.
3150 CHECK(!in_navigate_to_pending_entry_);
3151 in_navigate_to_pending_entry_ = true;
3152
arthursonzogni66f711c2019-10-08 14:40:363153 // It is not possible to delete the pending NavigationEntry while navigating
3154 // to it. Grab a reference to delay potential deletion until the end of this
3155 // function.
3156 std::unique_ptr<PendingEntryRef> pending_entry_ref = ReferencePendingEntry();
3157
Lukasz Anforowicz9ee83c272020-12-01 20:14:053158 node->navigator().Navigate(std::move(request), reload_type);
clamy21718cc22018-06-13 13:34:243159
3160 in_navigate_to_pending_entry_ = false;
3161}
3162
clamyea99ea12018-05-28 13:54:233163void NavigationControllerImpl::HandleRendererDebugURL(
3164 FrameTreeNode* frame_tree_node,
3165 const GURL& url) {
3166 if (!frame_tree_node->current_frame_host()->IsRenderFrameLive()) {
clamy21718cc22018-06-13 13:34:243167 // Any renderer-side debug URLs or javascript: URLs should be ignored if
3168 // the renderer process is not live, unless it is the initial navigation
3169 // of the tab.
clamyea99ea12018-05-28 13:54:233170 if (!IsInitialNavigation()) {
3171 DiscardNonCommittedEntries();
3172 return;
3173 }
Fergal Dalyecd3b0202020-06-25 01:57:373174 // The current frame is always a main frame. If IsInitialNavigation() is
3175 // true then there have been no navigations and any frames of this tab must
3176 // be in the same renderer process. If that has crashed then the only frame
3177 // that can be revived is the main frame.
3178 frame_tree_node->render_manager()
3179 ->InitializeMainRenderFrameForImmediateUse();
clamyea99ea12018-05-28 13:54:233180 }
3181 frame_tree_node->current_frame_host()->HandleRendererDebugURL(url);
3182}
3183
clamy21718cc22018-06-13 13:34:243184std::unique_ptr<NavigationEntryImpl>
3185NavigationControllerImpl::CreateNavigationEntryFromLoadParams(
3186 FrameTreeNode* node,
Camille Lamy5193caa2018-10-12 11:59:423187 const LoadURLParams& params,
3188 bool override_user_agent,
3189 bool should_replace_current_entry,
3190 bool has_user_gesture) {
Marijn Kruisselbrink0c87e6e2018-06-22 22:57:393191 // Browser initiated navigations might not have a blob_url_loader_factory set
3192 // in params even if the navigation is to a blob URL. If that happens, lookup
3193 // the correct url loader factory to use here.
3194 auto blob_url_loader_factory = params.blob_url_loader_factory;
Kinuko Yasuda7d925ea22019-08-01 10:08:483195 if (!blob_url_loader_factory && params.url.SchemeIsBlob()) {
Marijn Kruisselbrink8ffda442020-09-03 18:29:473196 // Resolve the blob URL in the storage partition associated with the target
3197 // frame. This is the storage partition the URL will be loaded in, and only
3198 // URLs that can be resolved by it should be able to access its data.
Marijn Kruisselbrink0c87e6e2018-06-22 22:57:393199 blob_url_loader_factory = ChromeBlobStorageContext::URLLoaderFactoryForUrl(
Marijn Kruisselbrink8ffda442020-09-03 18:29:473200 node->current_frame_host()->GetStoragePartition(), params.url);
Marijn Kruisselbrink0c87e6e2018-06-22 22:57:393201 }
3202
clamy21718cc22018-06-13 13:34:243203 std::unique_ptr<NavigationEntryImpl> entry;
Tommy C. Li03eee77a2019-02-05 02:07:443204 // extra_headers in params are \n separated; navigation entries want \r\n.
3205 std::string extra_headers_crlf;
3206 base::ReplaceChars(params.extra_headers, "\n", "\r\n", &extra_headers_crlf);
clamy21718cc22018-06-13 13:34:243207
3208 // For subframes, create a pending entry with a corresponding frame entry.
3209 if (!node->IsMainFrame()) {
Tommy C. Li03eee77a2019-02-05 02:07:443210 if (GetLastCommittedEntry()) {
3211 // Create an identical NavigationEntry with a new FrameNavigationEntry for
3212 // the target subframe.
3213 entry = GetLastCommittedEntry()->Clone();
3214 } else {
3215 // If there's no last committed entry, create an entry for about:blank
3216 // with a subframe entry for our destination.
3217 // TODO(creis): Ensure this case can't exist in https://crbug.com/524208.
3218 entry = NavigationEntryImpl::FromNavigationEntry(CreateNavigationEntry(
Lukasz Anforowicz435bcb582019-07-12 20:50:063219 GURL(url::kAboutBlankURL), params.referrer, params.initiator_origin,
Lukasz Anforowicz641234d52019-11-07 21:07:103220 params.source_site_instance.get(), params.transition_type,
3221 params.is_renderer_initiated, extra_headers_crlf, browser_context_,
Scott Violet5ae6c42e2020-10-28 02:47:373222 blob_url_loader_factory, should_replace_current_entry,
3223 GetWebContents()));
Tommy C. Li03eee77a2019-02-05 02:07:443224 }
Nasko Oskov18006bc2018-12-06 02:53:583225
clamy21718cc22018-06-13 13:34:243226 entry->AddOrUpdateFrameEntry(
3227 node, -1, -1, nullptr,
3228 static_cast<SiteInstanceImpl*>(params.source_site_instance.get()),
Lukasz Anforowicz435bcb582019-07-12 20:50:063229 params.url, base::nullopt, params.referrer, params.initiator_origin,
Miyoung Shin5d77f72072020-10-09 15:14:203230 params.redirect_chain, blink::PageState(), "GET", -1,
Antonio Sartori78a749f2020-11-30 12:03:393231 blob_url_loader_factory, nullptr /* web_bundle_navigation_info */,
3232 // If in NavigateWithoutEntry we later determine that this navigation is
Charlie Reis7e2cb6d2021-01-26 01:27:163233 // a conversion of a new navigation into a reload, we will set the right
3234 // document policies there.
Antonio Sartori78a749f2020-11-30 12:03:393235 nullptr /* document_policies */);
clamy21718cc22018-06-13 13:34:243236 } else {
3237 // Otherwise, create a pending entry for the main frame.
clamy21718cc22018-06-13 13:34:243238 entry = NavigationEntryImpl::FromNavigationEntry(CreateNavigationEntry(
Lukasz Anforowicz435bcb582019-07-12 20:50:063239 params.url, params.referrer, params.initiator_origin,
Lukasz Anforowicz641234d52019-11-07 21:07:103240 params.source_site_instance.get(), params.transition_type,
3241 params.is_renderer_initiated, extra_headers_crlf, browser_context_,
Scott Violet5ae6c42e2020-10-28 02:47:373242 blob_url_loader_factory, should_replace_current_entry,
3243 GetWebContents()));
clamy21718cc22018-06-13 13:34:243244 entry->set_source_site_instance(
3245 static_cast<SiteInstanceImpl*>(params.source_site_instance.get()));
3246 entry->SetRedirectChain(params.redirect_chain);
3247 }
3248
3249 // Set the FTN ID (only used in non-site-per-process, for tests).
3250 entry->set_frame_tree_node_id(node->frame_tree_node_id());
clamy21718cc22018-06-13 13:34:243251 entry->set_should_clear_history_list(params.should_clear_history_list);
Camille Lamy5193caa2018-10-12 11:59:423252 entry->SetIsOverridingUserAgent(override_user_agent);
3253 entry->set_has_user_gesture(has_user_gesture);
Robert Ogden011a8082019-01-23 19:04:543254 entry->set_reload_type(params.reload_type);
clamy21718cc22018-06-13 13:34:243255
clamy21718cc22018-06-13 13:34:243256 switch (params.load_type) {
3257 case LOAD_TYPE_DEFAULT:
3258 break;
3259 case LOAD_TYPE_HTTP_POST:
3260 entry->SetHasPostData(true);
3261 entry->SetPostData(params.post_data);
3262 break;
3263 case LOAD_TYPE_DATA:
3264 entry->SetBaseURLForDataURL(params.base_url_for_data_url);
3265 entry->SetVirtualURL(params.virtual_url_for_data_url);
3266#if defined(OS_ANDROID)
3267 entry->SetDataURLAsString(params.data_url_as_string);
3268#endif
3269 entry->SetCanLoadLocalResources(params.can_load_local_resources);
3270 break;
clamy21718cc22018-06-13 13:34:243271 }
3272
3273 // TODO(clamy): NavigationEntry is meant for information that will be kept
3274 // after the navigation ended and therefore is not appropriate for
3275 // started_from_context_menu. Move started_from_context_menu to
3276 // NavigationUIData.
3277 entry->set_started_from_context_menu(params.started_from_context_menu);
3278
3279 return entry;
3280}
3281
clamyea99ea12018-05-28 13:54:233282std::unique_ptr<NavigationRequest>
Camille Lamy5193caa2018-10-12 11:59:423283NavigationControllerImpl::CreateNavigationRequestFromLoadParams(
3284 FrameTreeNode* node,
3285 const LoadURLParams& params,
3286 bool override_user_agent,
3287 bool should_replace_current_entry,
3288 bool has_user_gesture,
Charlie Harrison8c113a32019-01-07 16:08:293289 NavigationDownloadPolicy download_policy,
Camille Lamy5193caa2018-10-12 11:59:423290 ReloadType reload_type,
Lucas Furukawa Gadani5553a1582019-01-08 18:55:573291 NavigationEntryImpl* entry,
Scott Violet5ae6c42e2020-10-28 02:47:373292 FrameNavigationEntry* frame_entry,
3293 ui::PageTransition transition_type) {
Lucas Furukawa Gadani5553a1582019-01-08 18:55:573294 DCHECK_EQ(-1, GetIndexOfEntry(entry));
Camille Lamyb9ed3c52018-11-19 15:34:283295 DCHECK(frame_entry);
Nasko Oskov3c2f9e252019-01-10 17:45:533296 // All renderer-initiated navigations must have an initiator_origin.
3297 DCHECK(!params.is_renderer_initiated || params.initiator_origin.has_value());
Camille Lamyff7c4822018-11-07 15:42:513298
Camille Lamy5193caa2018-10-12 11:59:423299 GURL url_to_load;
3300 GURL virtual_url;
Nasko Oskov03912102019-01-11 00:21:323301 base::Optional<url::Origin> origin_to_commit =
3302 frame_entry ? frame_entry->committed_origin() : base::nullopt;
3303
Camille Lamy2baa8022018-10-19 16:43:173304 // For main frames, rewrite the URL if necessary and compute the virtual URL
3305 // that should be shown in the address bar.
3306 if (node->IsMainFrame()) {
Lukasz Anforowiczb2eb19b12020-01-25 00:40:423307 bool ignored_reverse_on_redirect = false;
Camille Lamy2baa8022018-10-19 16:43:173308 RewriteUrlForNavigation(params.url, browser_context_, &url_to_load,
Lukasz Anforowiczb2eb19b12020-01-25 00:40:423309 &virtual_url, &ignored_reverse_on_redirect);
Camille Lamy5193caa2018-10-12 11:59:423310
Camille Lamy2baa8022018-10-19 16:43:173311 // For DATA loads, override the virtual URL.
3312 if (params.load_type == LOAD_TYPE_DATA)
3313 virtual_url = params.virtual_url_for_data_url;
Camille Lamy5193caa2018-10-12 11:59:423314
Camille Lamy2baa8022018-10-19 16:43:173315 if (virtual_url.is_empty())
3316 virtual_url = url_to_load;
3317
Lucas Furukawa Gadani5553a1582019-01-08 18:55:573318 CHECK(virtual_url == entry->GetVirtualURL());
Camille Lamyb9ed3c52018-11-19 15:34:283319
Aran Gilman249eb122019-12-02 23:32:463320 // This is a LOG and not a CHECK/DCHECK as URL rewrite has non-deterministic
3321 // behavior: it is possible for two calls to RewriteUrlForNavigation to
3322 // return different results, leading to a different URL in the
3323 // NavigationRequest and FrameEntry. This will be fixed once we remove the
3324 // pending NavigationEntry, as we'll only make one call to
3325 // RewriteUrlForNavigation.
3326 VLOG_IF(1, (url_to_load != frame_entry->url()))
3327 << "NavigationRequest and FrameEntry have different URLs: "
3328 << url_to_load << " vs " << frame_entry->url();
Camille Lamyb9ed3c52018-11-19 15:34:283329
Camille Lamy2baa8022018-10-19 16:43:173330 // TODO(clamy): In order to remove the pending NavigationEntry,
Lukasz Anforowiczb2eb19b12020-01-25 00:40:423331 // |virtual_url| and |ignored_reverse_on_redirect| should be stored in the
Camille Lamy2baa8022018-10-19 16:43:173332 // NavigationRequest.
3333 } else {
3334 url_to_load = params.url;
3335 virtual_url = params.url;
Camille Lamyf664f7622019-01-07 19:28:243336 CHECK(!frame_entry || url_to_load == frame_entry->url());
Camille Lamy2baa8022018-10-19 16:43:173337 }
Camille Lamy5193caa2018-10-12 11:59:423338
Ehsan Karamad44fc72112019-02-26 18:15:473339 if (node->render_manager()->is_attaching_inner_delegate()) {
3340 // Avoid starting any new navigations since this node is now preparing for
3341 // attaching an inner delegate.
3342 return nullptr;
Ehsan Karamaddd9a4142018-12-04 20:38:203343 }
Camille Lamy5193caa2018-10-12 11:59:423344
Camille Lamy5193caa2018-10-12 11:59:423345 if (!IsValidURLForNavigation(node->IsMainFrame(), virtual_url, url_to_load))
3346 return nullptr;
3347
Nasko Oskov03912102019-01-11 00:21:323348 if (!DoesURLMatchOriginForNavigation(url_to_load, origin_to_commit)) {
3349 DCHECK(false) << " url:" << url_to_load
3350 << " origin:" << origin_to_commit.value();
3351 return nullptr;
3352 }
3353
Camille Lamy5193caa2018-10-12 11:59:423354 // Determine if Previews should be used for the navigation.
Hiroki Nakagawa41366152020-07-27 18:31:403355 blink::PreviewsState previews_state =
3356 blink::PreviewsTypes::PREVIEWS_UNSPECIFIED;
Camille Lamy5193caa2018-10-12 11:59:423357 if (!node->IsMainFrame()) {
3358 // For subframes, use the state of the top-level frame.
3359 previews_state = node->frame_tree()
3360 ->root()
3361 ->current_frame_host()
3362 ->last_navigation_previews_state();
3363 }
3364
Camille Lamy5193caa2018-10-12 11:59:423365 // This will be used to set the Navigation Timing API navigationStart
3366 // parameter for browser navigations in new tabs (intents, tabs opened through
3367 // "Open link in new tab"). If the navigation must wait on the current
3368 // RenderFrameHost to execute its BeforeUnload event, the navigation start
3369 // will be updated when the BeforeUnload ack is received.
3370 base::TimeTicks navigation_start = base::TimeTicks::Now();
3371
danakjd83d706d2020-11-25 22:11:123372 // Look for a pending commit that is to another document in this
3373 // FrameTreeNode. If one exists, then the last committed URL will not be the
3374 // current URL by the time this navigation commits.
3375 bool has_pending_cross_document_commit =
3376 node->render_manager()->HasPendingCommitForCrossDocumentNavigation();
danakjb952ef12021-01-14 19:58:493377 bool is_currently_error_page = node->current_frame_host()->is_error_page();
danakjd83d706d2020-11-25 22:11:123378
danakjb952ef12021-01-14 19:58:493379 mojom::NavigationType navigation_type = GetNavigationType(
3380 /*old_url=*/node->current_url(),
3381 /*new_url=*/url_to_load, reload_type, entry, *frame_entry,
3382 has_pending_cross_document_commit, is_currently_error_page,
3383 /*is_same_document_history_load=*/false);
Camille Lamy5193caa2018-10-12 11:59:423384
3385 // Create the NavigationParams based on |params|.
3386
3387 bool is_view_source_mode = virtual_url.SchemeIs(kViewSourceScheme);
Charlie Harrison8c113a32019-01-07 16:08:293388
3389 // Update |download_policy| if the virtual URL is view-source. Why do this
3390 // now? Possibly the URL could be rewritten to a view-source via some URL
3391 // handler.
3392 if (is_view_source_mode)
Yao Xiaoaf79ca9b2019-03-12 19:54:183393 download_policy.SetDisallowed(NavigationDownloadType::kViewSource);
Charlie Harrison8c113a32019-01-07 16:08:293394
Camille Lamy5193caa2018-10-12 11:59:423395 const GURL& history_url_for_data_url =
3396 params.base_url_for_data_url.is_empty() ? GURL() : virtual_url;
Scott Violet5ae6c42e2020-10-28 02:47:373397 // Don't use |params.transition_type| as calling code may supply a different
3398 // value.
Lucas Furukawa Gadanief8290a2019-07-29 20:27:513399 mojom::CommonNavigationParamsPtr common_params =
3400 mojom::CommonNavigationParams::New(
3401 url_to_load, params.initiator_origin,
3402 blink::mojom::Referrer::New(params.referrer.url,
3403 params.referrer.policy),
Scott Violet5ae6c42e2020-10-28 02:47:373404 transition_type, navigation_type, download_policy,
Lucas Furukawa Gadanief8290a2019-07-29 20:27:513405 should_replace_current_entry, params.base_url_for_data_url,
3406 history_url_for_data_url, previews_state, navigation_start,
3407 params.load_type == LOAD_TYPE_HTTP_POST ? "POST" : "GET",
arthursonzogniaf7c62c52020-02-12 10:49:413408 params.post_data, network::mojom::SourceLocation::New(),
3409 params.started_from_context_menu, has_user_gesture,
David Bokan71e81512020-08-18 17:19:463410 false /* has_text_fragment_token */, CreateInitiatorCSPInfo(),
3411 std::vector<int>(), params.href_translate,
Lucas Furukawa Gadanief8290a2019-07-29 20:27:513412 false /* is_history_navigation_in_new_child_frame */,
Charlie Hu5ffc0152019-12-06 15:59:533413 params.input_start);
Camille Lamy5193caa2018-10-12 11:59:423414
Lucas Furukawa Gadania9c45682019-07-31 22:05:143415 mojom::CommitNavigationParamsPtr commit_params =
3416 mojom::CommitNavigationParams::New(
Arthur Sonzogni367718c2021-01-25 20:55:393417 frame_entry->committed_origin(), override_user_agent,
3418 params.redirect_chain,
Lucas Furukawa Gadani81e294b2019-08-29 16:26:323419 std::vector<network::mojom::URLResponseHeadPtr>(),
Lucas Furukawa Gadania9c45682019-07-31 22:05:143420 std::vector<net::RedirectInfo>(),
3421 std::string() /* post_content_type */, common_params->url,
3422 common_params->method, params.can_load_local_resources,
3423 frame_entry->page_state(), entry->GetUniqueID(),
3424 entry->GetSubframeUniqueNames(node), true /* intended_as_new_entry */,
3425 -1 /* pending_history_list_offset */,
3426 params.should_clear_history_list ? -1 : GetLastCommittedEntryIndex(),
3427 params.should_clear_history_list ? 0 : GetEntryCount(),
3428 false /* was_discarded */, is_view_source_mode,
3429 params.should_clear_history_list, mojom::NavigationTiming::New(),
3430 base::nullopt /* appcache_host_id */,
3431 mojom::WasActivatedOption::kUnknown,
3432 base::UnguessableToken::Create() /* navigation_token */,
Lucas Furukawa Gadani97ea6382019-08-07 19:14:513433 std::vector<mojom::PrefetchedSignedExchangeInfoPtr>(),
Lucas Furukawa Gadania9c45682019-07-31 22:05:143434#if defined(OS_ANDROID)
3435 std::string(), /* data_url_as_string */
3436#endif
arthursonzogni14379782020-05-15 09:09:273437 !params.is_renderer_initiated, /* is_browser_initiated */
Takashi Toyoshimae87b7be2021-01-22 11:51:083438 node->parent() ? node->parent()->IsPrerendering()
3439 : params.is_prerendering,
Tsuyoshi Horoe86d7702019-11-29 01:52:473440 GURL() /* web_bundle_physical_url */,
Charlie Hu5ffc0152019-12-06 15:59:533441 GURL() /* base_url_override_for_web_bundle */,
Yue Ru Sun128804932020-09-30 22:19:173442 ukm::kInvalidSourceId /* document_ukm_source_id */,
Jiewei Qian0406fc02020-03-09 06:02:073443 node->pending_frame_policy(),
Domenic Denicola4778c35392020-06-25 21:25:163444 std::vector<std::string>() /* force_enabled_origin_trials */,
Domenic Denicola55701ee2021-01-14 00:18:333445 false /* origin_agent_cluster */,
Maks Orlovichc66745a2020-06-30 17:40:023446 std::vector<
Shuran Huanga055ce72020-07-23 14:13:213447 network::mojom::WebClientHintsType>() /* enabled_client_hints */,
Antonio Sartori1e09fd7b2020-08-10 14:16:173448 false /* is_cross_browsing_instance */,
Rakina Zata Amni60858132020-08-19 10:33:483449 std::vector<std::string>() /* forced_content_security_policies */,
Rakina Zata Amniba3eecb2020-11-02 10:12:283450 nullptr /* old_page_info */, -1 /* http_response_code */);
Camille Lamy5193caa2018-10-12 11:59:423451#if defined(OS_ANDROID)
3452 if (ValidateDataURLAsString(params.data_url_as_string)) {
Lucas Furukawa Gadania9c45682019-07-31 22:05:143453 commit_params->data_url_as_string = params.data_url_as_string->data();
Camille Lamy5193caa2018-10-12 11:59:423454 }
3455#endif
3456
Lucas Furukawa Gadania9c45682019-07-31 22:05:143457 commit_params->was_activated = params.was_activated;
Camille Lamy5193caa2018-10-12 11:59:423458
3459 // A form submission may happen here if the navigation is a renderer-initiated
3460 // form submission that took the OpenURL path.
3461 scoped_refptr<network::ResourceRequestBody> request_body = params.post_data;
3462
3463 // extra_headers in params are \n separated; NavigationRequests want \r\n.
3464 std::string extra_headers_crlf;
3465 base::ReplaceChars(params.extra_headers, "\n", "\r\n", &extra_headers_crlf);
Yao Xiaodc5ed102019-06-04 19:19:093466
3467 auto navigation_request = NavigationRequest::CreateBrowserInitiated(
Lucas Furukawa Gadania9c45682019-07-31 22:05:143468 node, std::move(common_params), std::move(commit_params),
Takashi Toyoshimae87b7be2021-01-22 11:51:083469 !params.is_renderer_initiated, params.was_opener_suppressed,
Antonio Sartori9a82f6f32020-12-14 09:22:453470 params.initiator_frame_token.has_value()
3471 ? &(params.initiator_frame_token.value())
3472 : nullptr,
3473 params.initiator_process_id, extra_headers_crlf, frame_entry, entry,
3474 request_body,
John Delaney50425f82020-04-07 16:26:213475 params.navigation_ui_data ? params.navigation_ui_data->Clone() : nullptr,
3476 params.impression);
Yao Xiaodc5ed102019-06-04 19:19:093477 navigation_request->set_from_download_cross_origin_redirect(
3478 params.from_download_cross_origin_redirect);
3479 return navigation_request;
Camille Lamy5193caa2018-10-12 11:59:423480}
3481
3482std::unique_ptr<NavigationRequest>
3483NavigationControllerImpl::CreateNavigationRequestFromEntry(
clamyea99ea12018-05-28 13:54:233484 FrameTreeNode* frame_tree_node,
Lucas Furukawa Gadani5553a1582019-01-08 18:55:573485 NavigationEntryImpl* entry,
clamyea99ea12018-05-28 13:54:233486 FrameNavigationEntry* frame_entry,
3487 ReloadType reload_type,
3488 bool is_same_document_history_load,
Arthur Hemerybee4a752019-05-29 10:50:553489 bool is_history_navigation_in_new_child_frame) {
Alex Moshchuk47d1a4bd2020-06-01 22:15:343490 DCHECK(frame_entry);
clamyea99ea12018-05-28 13:54:233491 GURL dest_url = frame_entry->url();
Nasko Oskov03912102019-01-11 00:21:323492 base::Optional<url::Origin> origin_to_commit =
3493 frame_entry->committed_origin();
3494
clamyea99ea12018-05-28 13:54:233495 Referrer dest_referrer = frame_entry->referrer();
Ryan Sturmc4da1992018-07-17 16:59:013496 if (reload_type == ReloadType::ORIGINAL_REQUEST_URL &&
Lucas Furukawa Gadani5553a1582019-01-08 18:55:573497 entry->GetOriginalRequestURL().is_valid() && !entry->GetHasPostData()) {
clamyea99ea12018-05-28 13:54:233498 // We may have been redirected when navigating to the current URL.
3499 // Use the URL the user originally intended to visit as signaled by the
3500 // ReloadType, if it's valid and if a POST wasn't involved; the latter
Ryan Sturmc4da1992018-07-17 16:59:013501 // case avoids issues with sending data to the wrong page.
Lucas Furukawa Gadani5553a1582019-01-08 18:55:573502 dest_url = entry->GetOriginalRequestURL();
clamyea99ea12018-05-28 13:54:233503 dest_referrer = Referrer();
Nasko Oskov03912102019-01-11 00:21:323504 origin_to_commit.reset();
clamyea99ea12018-05-28 13:54:233505 }
3506
Ehsan Karamad44fc72112019-02-26 18:15:473507 if (frame_tree_node->render_manager()->is_attaching_inner_delegate()) {
3508 // Avoid starting any new navigations since this node is now preparing for
3509 // attaching an inner delegate.
3510 return nullptr;
Ehsan Karamaddd9a4142018-12-04 20:38:203511 }
3512
Camille Lamy5193caa2018-10-12 11:59:423513 if (!IsValidURLForNavigation(frame_tree_node->IsMainFrame(),
Lucas Furukawa Gadani5553a1582019-01-08 18:55:573514 entry->GetVirtualURL(), dest_url)) {
clamyea99ea12018-05-28 13:54:233515 return nullptr;
3516 }
3517
Nasko Oskov03912102019-01-11 00:21:323518 if (!DoesURLMatchOriginForNavigation(dest_url, origin_to_commit)) {
3519 DCHECK(false) << " url:" << dest_url
3520 << " origin:" << origin_to_commit.value();
3521 return nullptr;
3522 }
3523
clamyea99ea12018-05-28 13:54:233524 // Determine if Previews should be used for the navigation.
Hiroki Nakagawa41366152020-07-27 18:31:403525 blink::PreviewsState previews_state =
3526 blink::PreviewsTypes::PREVIEWS_UNSPECIFIED;
clamyea99ea12018-05-28 13:54:233527 if (!frame_tree_node->IsMainFrame()) {
3528 // For subframes, use the state of the top-level frame.
3529 previews_state = frame_tree_node->frame_tree()
3530 ->root()
3531 ->current_frame_host()
3532 ->last_navigation_previews_state();
clamyea99ea12018-05-28 13:54:233533 }
3534
clamyea99ea12018-05-28 13:54:233535 // This will be used to set the Navigation Timing API navigationStart
3536 // parameter for browser navigations in new tabs (intents, tabs opened through
3537 // "Open link in new tab"). If the navigation must wait on the current
3538 // RenderFrameHost to execute its BeforeUnload event, the navigation start
3539 // will be updated when the BeforeUnload ack is received.
3540 base::TimeTicks navigation_start = base::TimeTicks::Now();
clamyea99ea12018-05-28 13:54:233541
danakjd83d706d2020-11-25 22:11:123542 // Look for a pending commit that is to another document in this
3543 // FrameTreeNode. If one exists, then the last committed URL will not be the
3544 // current URL by the time this navigation commits.
3545 bool has_pending_cross_document_commit =
3546 frame_tree_node->render_manager()
3547 ->HasPendingCommitForCrossDocumentNavigation();
danakjb952ef12021-01-14 19:58:493548 bool is_currently_error_page =
3549 frame_tree_node->current_frame_host()->is_error_page();
danakjd83d706d2020-11-25 22:11:123550
Lucas Furukawa Gadanief8290a2019-07-29 20:27:513551 mojom::NavigationType navigation_type = GetNavigationType(
danakjd83d706d2020-11-25 22:11:123552 /*old_url=*/frame_tree_node->current_url(),
3553 /*new_url=*/dest_url, reload_type, entry, *frame_entry,
danakjb952ef12021-01-14 19:58:493554 has_pending_cross_document_commit, is_currently_error_page,
3555 is_same_document_history_load);
Camille Lamy5193caa2018-10-12 11:59:423556
3557 // A form submission may happen here if the navigation is a
3558 // back/forward/reload navigation that does a form resubmission.
3559 scoped_refptr<network::ResourceRequestBody> request_body;
3560 std::string post_content_type;
3561 if (frame_entry->method() == "POST") {
3562 request_body = frame_entry->GetPostData(&post_content_type);
3563 // Might have a LF at end.
3564 post_content_type =
3565 base::TrimWhitespaceASCII(post_content_type, base::TRIM_ALL)
3566 .as_string();
3567 }
3568
3569 // Create the NavigationParams based on |entry| and |frame_entry|.
Lucas Furukawa Gadanief8290a2019-07-29 20:27:513570 mojom::CommonNavigationParamsPtr common_params =
3571 entry->ConstructCommonNavigationParams(
3572 *frame_entry, request_body, dest_url,
3573 blink::mojom::Referrer::New(dest_referrer.url, dest_referrer.policy),
3574 navigation_type, previews_state, navigation_start,
Charlie Hu5ffc0152019-12-06 15:59:533575 base::TimeTicks() /* input_start */);
Lucas Furukawa Gadanief8290a2019-07-29 20:27:513576 common_params->is_history_navigation_in_new_child_frame =
Arthur Hemerybee4a752019-05-29 10:50:553577 is_history_navigation_in_new_child_frame;
Camille Lamy5193caa2018-10-12 11:59:423578
3579 // TODO(clamy): |intended_as_new_entry| below should always be false once
3580 // Reload no longer leads to this being called for a pending NavigationEntry
3581 // of index -1.
Lucas Furukawa Gadania9c45682019-07-31 22:05:143582 mojom::CommitNavigationParamsPtr commit_params =
3583 entry->ConstructCommitNavigationParams(
3584 *frame_entry, common_params->url, origin_to_commit,
3585 common_params->method, entry->GetSubframeUniqueNames(frame_tree_node),
3586 GetPendingEntryIndex() == -1 /* intended_as_new_entry */,
Charlie Hu5ffc0152019-12-06 15:59:533587 GetIndexOfEntry(entry), GetLastCommittedEntryIndex(), GetEntryCount(),
3588 frame_tree_node->pending_frame_policy());
Lucas Furukawa Gadania9c45682019-07-31 22:05:143589 commit_params->post_content_type = post_content_type;
Camille Lamy5193caa2018-10-12 11:59:423590
clamyea99ea12018-05-28 13:54:233591 return NavigationRequest::CreateBrowserInitiated(
Lucas Furukawa Gadania9c45682019-07-31 22:05:143592 frame_tree_node, std::move(common_params), std::move(commit_params),
Takashi Toyoshimae87b7be2021-01-22 11:51:083593 !entry->is_renderer_initiated(), false /* was_opener_suppressed */,
3594 nullptr /* initiator_frame_token */,
Antonio Sartori9a82f6f32020-12-14 09:22:453595 ChildProcessHost::kInvalidUniqueID /* initiator_process_id */,
3596 entry->extra_headers(), frame_entry, entry, request_body,
3597 nullptr /* navigation_ui_data */, base::nullopt /* impression */);
clamyea99ea12018-05-28 13:54:233598}
3599
[email protected]d202a7c2012-01-04 07:53:473600void NavigationControllerImpl::NotifyNavigationEntryCommitted(
[email protected]8ff00d72012-10-23 19:12:213601 LoadCommittedDetails* details) {
[email protected]6286a3792013-10-09 04:03:273602 details->entry = GetLastCommittedEntry();
[email protected]df1af242009-05-01 00:11:403603
[email protected]2db9bd72012-04-13 20:20:563604 // We need to notify the ssl_manager_ before the web_contents_ so the
[email protected]df1af242009-05-01 00:11:403605 // location bar will have up-to-date information about the security style
3606 // when it wants to draw. See http://crbug.com/11157
[email protected]b0f724c2013-09-05 04:21:133607 ssl_manager_.DidCommitProvisionalLoad(*details);
[email protected]df1af242009-05-01 00:11:403608
[email protected]7f924832014-08-09 05:57:223609 delegate_->NotifyNavigationStateChanged(INVALIDATE_TYPE_ALL);
[email protected]ec6c05f2013-10-23 18:41:573610 delegate_->NotifyNavigationEntryCommitted(*details);
[email protected]cbb1ef592013-06-05 19:49:463611
[email protected]b0f724c2013-09-05 04:21:133612 // TODO(avi): Remove. http://crbug.com/170921
3613 NotificationDetails notification_details =
3614 Details<LoadCommittedDetails>(details);
Aran Gilman37d11632019-10-08 23:07:153615 NotificationService::current()->Notify(NOTIFICATION_NAV_ENTRY_COMMITTED,
3616 Source<NavigationController>(this),
3617 notification_details);
initial.commit09911bf2008-07-26 23:55:293618}
3619
initial.commit09911bf2008-07-26 23:55:293620// static
[email protected]d202a7c2012-01-04 07:53:473621size_t NavigationControllerImpl::max_entry_count() {
[email protected]9b51970d2011-12-09 23:10:233622 if (max_entry_count_for_testing_ != kMaxEntryCountForTestingNotSet)
Aran Gilman37d11632019-10-08 23:07:153623 return max_entry_count_for_testing_;
[email protected]8ff00d72012-10-23 19:12:213624 return kMaxSessionHistoryEntries;
[email protected]9b51970d2011-12-09 23:10:233625}
3626
[email protected]d202a7c2012-01-04 07:53:473627void NavigationControllerImpl::SetActive(bool is_active) {
[email protected]ee613922009-09-02 20:38:223628 if (is_active && needs_reload_)
3629 LoadIfNecessary();
initial.commit09911bf2008-07-26 23:55:293630}
3631
[email protected]d202a7c2012-01-04 07:53:473632void NavigationControllerImpl::LoadIfNecessary() {
initial.commit09911bf2008-07-26 23:55:293633 if (!needs_reload_)
3634 return;
3635
Bo Liucdfa4b12018-11-06 00:21:443636 UMA_HISTOGRAM_ENUMERATION("Navigation.LoadIfNecessaryType",
3637 needs_reload_type_);
3638
initial.commit09911bf2008-07-26 23:55:293639 // Calling Reload() results in ignoring state, and not loading.
3640 // Explicitly use NavigateToPendingEntry so that the renderer uses the
3641 // cached state.
avicc872d7242015-08-19 21:26:343642 if (pending_entry_) {
Dave Tapuska8bfd84c2019-03-26 20:47:163643 NavigateToExistingPendingEntry(ReloadType::NONE,
3644 FrameTreeNode::kFrameTreeNodeInvalidId);
avicc872d7242015-08-19 21:26:343645 } else if (last_committed_entry_index_ != -1) {
arthursonzogni5c4c202d2017-04-25 23:41:273646 pending_entry_ = entries_[last_committed_entry_index_].get();
avicc872d7242015-08-19 21:26:343647 pending_entry_index_ = last_committed_entry_index_;
Dave Tapuska8bfd84c2019-03-26 20:47:163648 NavigateToExistingPendingEntry(ReloadType::NONE,
3649 FrameTreeNode::kFrameTreeNodeInvalidId);
avicc872d7242015-08-19 21:26:343650 } else {
3651 // If there is something to reload, the successful reload will clear the
3652 // |needs_reload_| flag. Otherwise, just do it here.
3653 needs_reload_ = false;
3654 }
initial.commit09911bf2008-07-26 23:55:293655}
3656
Carlos IL42b416592019-10-07 23:10:363657void NavigationControllerImpl::LoadPostCommitErrorPage(
3658 RenderFrameHost* render_frame_host,
3659 const GURL& url,
3660 const std::string& error_page_html,
3661 net::Error error) {
Sreeja Kamishetty0be2ac52020-05-28 01:47:463662 // Only active frames can load post-commit error pages:
3663 // - If the frame is in pending deletion, the browser already committed to
3664 // destroying this RenderFrameHost so ignore loading the error page.
3665 // - If the frame is in back-forward cache, it's not allowed to navigate as it
3666 // should remain frozen. Ignore the request and evict the document from
3667 // back-forward cache.
3668 if (static_cast<RenderFrameHostImpl*>(render_frame_host)
3669 ->IsInactiveAndDisallowReactivation()) {
John Delaney56f73332019-11-04 19:39:253670 return;
Sreeja Kamishetty0be2ac52020-05-28 01:47:463671 }
Rakina Zata Amni919b7922020-12-11 09:03:133672 RenderFrameHostImpl* rfhi =
3673 static_cast<RenderFrameHostImpl*>(render_frame_host);
3674 FrameTreeNode* node = rfhi->frame_tree_node();
John Delaney131ad362019-08-08 21:57:413675
3676 mojom::CommonNavigationParamsPtr common_params =
3677 CreateCommonNavigationParams();
Rakina Zata Amnid2da1542020-12-23 00:52:593678 // |url| might be empty, such as when LoadPostCommitErrorPage happens before
3679 // the frame actually committed (e.g. iframe with "src" set to a
3680 // slow-responding URL). We should rewrite the URL to about:blank in this
3681 // case, as the renderer will only think a page is an error page if it has a
3682 // non-empty unreachable URL.
Rakina Zata Amni919b7922020-12-11 09:03:133683 common_params->url = url.is_empty() ? GURL("about:blank") : url;
John Delaney131ad362019-08-08 21:57:413684 mojom::CommitNavigationParamsPtr commit_params =
3685 CreateCommitNavigationParams();
3686
arthursonzogni70ac7302020-05-28 08:49:053687 // Error pages have a fully permissive FramePolicy.
3688 // TODO(arthursonzogni): Consider providing the minimal capabilities to the
3689 // error pages.
3690 commit_params->frame_policy = blink::FramePolicy();
3691
John Delaney131ad362019-08-08 21:57:413692 std::unique_ptr<NavigationRequest> navigation_request =
3693 NavigationRequest::CreateBrowserInitiated(
3694 node, std::move(common_params), std::move(commit_params),
Takashi Toyoshimae87b7be2021-01-22 11:51:083695 true /* browser_initiated */, false /* was_opener_suppressed */,
Lingqi Chi82efa95e2020-12-29 05:31:193696 nullptr /* initiator_frame_token */,
Antonio Sartori9a82f6f32020-12-14 09:22:453697 ChildProcessHost::kInvalidUniqueID /* initiator_process_id */,
John Delaneyf43556d2020-05-04 23:19:063698 "" /* extra_headers */, nullptr /* frame_entry */,
3699 nullptr /* entry */, nullptr /* post_body */,
3700 nullptr /* navigation_ui_data */, base::nullopt /* impression */);
Carlos IL42b416592019-10-07 23:10:363701 navigation_request->set_post_commit_error_page_html(error_page_html);
John Delaney131ad362019-08-08 21:57:413702 navigation_request->set_net_error(error);
3703 node->CreatedNavigationRequest(std::move(navigation_request));
3704 DCHECK(node->navigation_request());
3705 node->navigation_request()->BeginNavigation();
3706}
3707
Lucas Furukawa Gadani5553a1582019-01-08 18:55:573708void NavigationControllerImpl::NotifyEntryChanged(NavigationEntry* entry) {
[email protected]8ff00d72012-10-23 19:12:213709 EntryChangedDetails det;
[email protected]534e54b2008-08-13 15:40:093710 det.changed_entry = entry;
Aran Gilman37d11632019-10-08 23:07:153711 det.index = GetIndexOfEntry(NavigationEntryImpl::FromNavigationEntry(entry));
Sam McNally5c087a32017-08-25 01:46:143712 delegate_->NotifyNavigationEntryChanged(det);
initial.commit09911bf2008-07-26 23:55:293713}
3714
[email protected]d202a7c2012-01-04 07:53:473715void NavigationControllerImpl::FinishRestore(int selected_index,
[email protected]2ca1ea662012-10-04 02:26:363716 RestoreType type) {
[email protected]a26023822011-12-29 00:23:553717 DCHECK(selected_index >= 0 && selected_index < GetEntryCount());
[email protected]2ca1ea662012-10-04 02:26:363718 ConfigureEntriesForRestore(&entries_, type);
initial.commit09911bf2008-07-26 23:55:293719
initial.commit09911bf2008-07-26 23:55:293720 last_committed_entry_index_ = selected_index;
initial.commit09911bf2008-07-26 23:55:293721}
[email protected]765b35502008-08-21 00:51:203722
arthursonzogni69a6a1b2019-09-17 09:23:003723void NavigationControllerImpl::DiscardNonCommittedEntries() {
Michael Thiessen9b14d512019-09-23 21:19:473724 // Avoid sending a notification if there is nothing to discard.
Michael Thiessenc5676d22019-09-25 22:32:103725 // TODO(mthiesse): Temporarily checking failed_pending_entry_id_ to help
3726 // diagnose https://bugs.chromium.org/p/chromium/issues/detail?id=1007570.
Carlos IL4dea8902020-05-26 15:14:293727 if (!pending_entry_ && failed_pending_entry_id_ == 0) {
Michael Thiessen9b14d512019-09-23 21:19:473728 return;
Michael Thiessenc5676d22019-09-25 22:32:103729 }
avi45a72532015-04-07 21:01:453730 DiscardPendingEntry(false);
arthursonzogni69a6a1b2019-09-17 09:23:003731 if (delegate_)
3732 delegate_->NotifyNavigationStateChanged(INVALIDATE_TYPE_ALL);
[email protected]b12eb222013-09-10 00:11:483733}
3734
avi7c6f35e2015-05-08 17:52:383735int NavigationControllerImpl::GetEntryIndexWithUniqueID(
3736 int nav_entry_id) const {
3737 for (int i = static_cast<int>(entries_.size()) - 1; i >= 0; --i) {
3738 if (entries_[i]->GetUniqueID() == nav_entry_id)
3739 return i;
3740 }
3741 return -1;
3742}
3743
[email protected]d202a7c2012-01-04 07:53:473744void NavigationControllerImpl::InsertEntriesFrom(
Lucas Furukawa Gadani5553a1582019-01-08 18:55:573745 NavigationControllerImpl* source,
[email protected]e1cd5452010-08-26 18:03:253746 int max_index) {
Lucas Furukawa Gadani5553a1582019-01-08 18:55:573747 DCHECK_LE(max_index, source->GetEntryCount());
[email protected]e1cd5452010-08-26 18:03:253748 for (int i = 0; i < max_index; i++) {
Nasko Oskov923ca482020-12-04 21:20:463749 // TODO(creis): Once we start sharing FrameNavigationEntries between
3750 // NavigationEntries, it will not be safe to share them with another tab.
3751 // Must have a version of Clone that recreates them.
3752 entries_.insert(entries_.begin() + i, source->entries_[i]->Clone());
[email protected]e1cd5452010-08-26 18:03:253753 }
arthursonzogni5c4c202d2017-04-25 23:41:273754 DCHECK(pending_entry_index_ == -1 ||
3755 pending_entry_ == GetEntryAtIndex(pending_entry_index_));
[email protected]e1cd5452010-08-26 18:03:253756}
[email protected]c5b88d82012-10-06 17:03:333757
3758void NavigationControllerImpl::SetGetTimestampCallbackForTest(
Makoto Shimazud2aa2202019-10-09 13:57:183759 const base::RepeatingCallback<base::Time()>& get_timestamp_callback) {
[email protected]c5b88d82012-10-06 17:03:333760 get_timestamp_callback_ = get_timestamp_callback;
3761}
[email protected]8ff00d72012-10-23 19:12:213762
Shivani Sharmaffb32b82019-04-09 16:58:473763// History manipulation intervention:
3764void NavigationControllerImpl::SetShouldSkipOnBackForwardUIIfNeeded(
Shivani Sharmaffb32b82019-04-09 16:58:473765 bool replace_entry,
3766 bool previous_document_was_activated,
Alexander Timine3ec4192020-04-20 16:39:403767 bool is_renderer_initiated,
3768 ukm::SourceId previous_page_load_ukm_source_id) {
Shivani Sharma712d5d72019-04-16 21:56:453769 // Note that for a subframe, previous_document_was_activated is true if the
3770 // gesture happened in any subframe (propagated to main frame) or in the main
3771 // frame itself.
Shivani Sharmaffb32b82019-04-09 16:58:473772 if (replace_entry || previous_document_was_activated ||
shivanigithubcceeacf2020-03-06 20:00:273773 !is_renderer_initiated) {
Shivani Sharmaffb32b82019-04-09 16:58:473774 if (last_committed_entry_index_ != -1) {
shivanigithube92c33da2020-09-14 13:01:413775 // This histogram always counts when navigating away from an entry,
3776 // irrespective of whether the skippable flag was changed or not, and
3777 // whether this entry is being reused or not.
Shivani Sharmaffb32b82019-04-09 16:58:473778 UMA_HISTOGRAM_BOOLEAN(
shivanigithube92c33da2020-09-14 13:01:413779 "Navigation.BackForward.SetShouldSkipOnBackForwardUI",
3780 GetEntryAtIndex(last_committed_entry_index_)
3781 ->should_skip_on_back_forward_ui());
Shivani Sharmaffb32b82019-04-09 16:58:473782 }
3783 return;
3784 }
3785 if (last_committed_entry_index_ == -1)
3786 return;
3787
Shivani Sharmac4cc8922019-04-18 03:11:173788 SetSkippableForSameDocumentEntries(last_committed_entry_index_, true);
Shivani Sharmaffb32b82019-04-09 16:58:473789 UMA_HISTOGRAM_BOOLEAN("Navigation.BackForward.SetShouldSkipOnBackForwardUI",
3790 true);
3791
Alexander Timine3ec4192020-04-20 16:39:403792 // Log UKM with the URL we are navigating away from.
3793 ukm::builders::HistoryManipulationIntervention(
3794 previous_page_load_ukm_source_id)
3795 .Record(ukm::UkmRecorder::Get());
Shivani Sharmaffb32b82019-04-09 16:58:473796}
3797
Shivani Sharmac4cc8922019-04-18 03:11:173798void NavigationControllerImpl::SetSkippableForSameDocumentEntries(
3799 int reference_index,
3800 bool skippable) {
3801 auto* reference_entry = GetEntryAtIndex(reference_index);
3802 reference_entry->set_should_skip_on_back_forward_ui(skippable);
3803
3804 int64_t document_sequence_number =
3805 reference_entry->root_node()->frame_entry->document_sequence_number();
3806 for (int index = 0; index < GetEntryCount(); index++) {
3807 auto* entry = GetEntryAtIndex(index);
3808 if (entry->root_node()->frame_entry->document_sequence_number() ==
3809 document_sequence_number) {
3810 entry->set_should_skip_on_back_forward_ui(skippable);
3811 }
3812 }
3813}
3814
arthursonzogni66f711c2019-10-08 14:40:363815std::unique_ptr<NavigationControllerImpl::PendingEntryRef>
3816NavigationControllerImpl::ReferencePendingEntry() {
3817 DCHECK(pending_entry_);
3818 auto pending_entry_ref =
3819 std::make_unique<PendingEntryRef>(weak_factory_.GetWeakPtr());
3820 pending_entry_refs_.insert(pending_entry_ref.get());
3821 return pending_entry_ref;
3822}
3823
3824void NavigationControllerImpl::PendingEntryRefDeleted(PendingEntryRef* ref) {
3825 // Ignore refs that don't correspond to the current pending entry.
3826 auto it = pending_entry_refs_.find(ref);
3827 if (it == pending_entry_refs_.end())
3828 return;
3829 pending_entry_refs_.erase(it);
3830
3831 if (!pending_entry_refs_.empty())
3832 return;
3833
3834 // The pending entry may be deleted before the last PendingEntryRef.
3835 if (!pending_entry_)
3836 return;
3837
3838 // We usually clear the pending entry when the matching NavigationRequest
3839 // fails, so that an arbitrary URL isn't left visible above a committed page.
3840 //
3841 // However, we do preserve the pending entry in some cases, such as on the
3842 // initial navigation of an unmodified blank tab. We also allow the delegate
3843 // to say when it's safe to leave aborted URLs in the omnibox, to let the
3844 // user edit the URL and try again. This may be useful in cases that the
3845 // committed page cannot be attacker-controlled. In these cases, we still
3846 // allow the view to clear the pending entry and typed URL if the user
3847 // requests (e.g., hitting Escape with focus in the address bar).
3848 //
3849 // Do not leave the pending entry visible if it has an invalid URL, since this
3850 // might be formatted in an unexpected or unsafe way.
3851 // TODO(creis): Block navigations to invalid URLs in https://crbug.com/850824.
arthursonzogni66f711c2019-10-08 14:40:363852 bool should_preserve_entry =
3853 (pending_entry_ == GetVisibleEntry()) &&
3854 pending_entry_->GetURL().is_valid() &&
3855 (IsUnmodifiedBlankTab() || delegate_->ShouldPreserveAbortedURLs());
3856 if (should_preserve_entry)
3857 return;
3858
3859 DiscardPendingEntry(true);
3860 delegate_->NotifyNavigationStateChanged(INVALIDATE_TYPE_URL);
3861}
3862
Antonio Sartori78a749f2020-11-30 12:03:393863std::unique_ptr<PolicyContainerHost::DocumentPolicies>
3864NavigationControllerImpl::ComputeDocumentPoliciesForFrameEntry(
3865 RenderFrameHostImpl* rfh,
3866 bool is_same_document,
3867 NavigationRequest* request) {
3868 if (!ShouldStoreDocumentPoliciesInFrameNavigationEntry(request))
3869 return nullptr;
3870
3871 if (is_same_document) {
3872 FrameNavigationEntry* previous_frame_entry =
3873 GetLastCommittedEntry()->GetFrameEntry(rfh->frame_tree_node());
3874
3875 // TODO(https://crbug.com/608402): Remove this nullptr check when we can
3876 // ensure we always have a FrameNavigationEntry here.
3877 if (!previous_frame_entry)
3878 return nullptr;
3879
3880 const PolicyContainerHost::DocumentPolicies* previous_document_policies =
3881 previous_frame_entry->document_policies();
3882
3883 if (!previous_document_policies)
3884 return nullptr;
3885
3886 // Make a copy of the policy container for the new FrameNavigationEntry.
3887 return std::make_unique<PolicyContainerHost::DocumentPolicies>(
3888 *previous_document_policies);
3889 }
3890
3891 if (!request->IsWaitingToCommit()) {
3892 // This is the initial, "fake" navigation to about:blank. The
3893 // NavigationRequest contains a dummy policy container, while the
3894 // RenderFrameHost already inherited the policy container from the
3895 // creator, so let's take the policies from there.
3896 return std::make_unique<PolicyContainerHost::DocumentPolicies>(
3897 rfh->policy_container_host()->document_policies());
3898 }
3899
3900 // Take the policy container from the request since we did not move it
3901 // into the RFH yet.
3902 return std::make_unique<PolicyContainerHost::DocumentPolicies>(
3903 request->policy_container_host()->document_policies());
3904}
3905
Carlos Caballeroede6f8c2021-01-28 11:01:503906void NavigationControllerImpl::SetHistoryOffsetAndLength(int history_offset,
3907 int history_length) {
3908 OPTIONAL_TRACE_EVENT2(
3909 "content", "NavigationControllerImpl::SetHistoryOffsetAndLength",
3910 "history_offset", history_offset, "history_length", history_length);
3911
3912 auto callback = base::BindRepeating(
3913 [](int history_offset, int history_length, RenderViewHostImpl* rvh) {
3914 if (auto& broadcast = rvh->GetAssociatedPageBroadcast()) {
3915 broadcast->SetHistoryOffsetAndLength(history_offset, history_length);
3916 }
3917 },
3918 history_offset, history_length);
3919 frame_tree_.root()->render_manager()->ExecutePageBroadcastMethod(callback);
3920}
3921
3922void NavigationControllerImpl::DidAccessInitialMainDocument() {
3923 // We may have left a failed browser-initiated navigation in the address bar
3924 // to let the user edit it and try again. Clear it now that content might
3925 // show up underneath it.
3926 if (!frame_tree_.IsLoading() && GetPendingEntry())
3927 DiscardPendingEntry(false);
3928
3929 // Update the URL display.
3930 delegate_->NotifyNavigationStateChanged(INVALIDATE_TYPE_URL);
3931}
3932
3933void NavigationControllerImpl::UpdateStateForFrame(
3934 RenderFrameHostImpl* rfhi,
3935 const blink::PageState& page_state) {
3936 OPTIONAL_TRACE_EVENT1(
3937 "content", "NavigationControllerImpl::UpdateStateForFrame",
3938 "render_frame_host", base::trace_event::ToTracedValue(rfhi));
3939 // The state update affects the last NavigationEntry associated with the given
3940 // |render_frame_host|. This may not be the last committed NavigationEntry (as
3941 // in the case of an UpdateState from a frame being swapped out). We track
3942 // which entry this is in the RenderFrameHost's nav_entry_id.
3943 NavigationEntryImpl* entry = GetEntryWithUniqueID(rfhi->nav_entry_id());
3944 if (!entry)
3945 return;
3946
3947 FrameNavigationEntry* frame_entry =
3948 entry->GetFrameEntry(rfhi->frame_tree_node());
3949 if (!frame_entry)
3950 return;
3951
3952 // The SiteInstance might not match if we do a cross-process navigation with
3953 // replacement (e.g., auto-subframe), in which case the swap out of the old
3954 // RenderFrameHost runs in the background after the old FrameNavigationEntry
3955 // has already been replaced and destroyed.
3956 if (frame_entry->site_instance() != rfhi->GetSiteInstance())
3957 return;
3958
3959 if (page_state == frame_entry->page_state())
3960 return; // Nothing to update.
3961
3962 DCHECK(page_state.IsValid()) << "Shouldn't set an empty PageState.";
3963
3964 // The document_sequence_number and item_sequence_number recorded in the
3965 // FrameNavigationEntry should not differ from the one coming with the update,
3966 // since it must come from the same document. Do not update it if a difference
3967 // is detected, as this indicates that |frame_entry| is not the correct one.
3968 blink::ExplodedPageState exploded_state;
3969 if (!blink::DecodePageState(page_state.ToEncodedData(), &exploded_state))
3970 return;
3971
3972 if (exploded_state.top.document_sequence_number !=
3973 frame_entry->document_sequence_number() ||
3974 exploded_state.top.item_sequence_number !=
3975 frame_entry->item_sequence_number()) {
3976 return;
3977 }
3978
3979 frame_entry->SetPageState(page_state);
3980 NotifyEntryChanged(entry);
3981}
3982
[email protected]8ff00d72012-10-23 19:12:213983} // namespace content