WebKit/Source/JavaScriptCore/API/JSRemoteInspector.cpp at main · WebKit/WebKit · GitHub

History

141 lines (120 loc) · 5 KB

Raw

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

133

134

135

136

137

138

139

140

141

* Redistribution and use in source and binary forms, with or without

* modification, are permitted provided that the following conditions

* are met:

* 1. Redistributions of source code must retain the above copyright

* notice, this list of conditions and the following disclaimer.

* 2. Redistributions in binary form must reproduce the above copyright

* notice, this list of conditions and the following disclaimer in the

* documentation and/or other materials provided with the distribution.

* THIS SOFTWARE IS PROVIDED BY APPLE INC. ``AS IS'' AND ANY

* EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR

* CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,

* EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,

* PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR

* PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY

* OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT

* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE

* OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

#include "config.h"

#include "JSRemoteInspector.h"

#include "JSGlobalObjectConsoleClient.h"

#include <wtf/ProcessID.h>

#if ENABLE(REMOTE_INSPECTOR)

#include "RemoteInspector.h"

#endif

#if PLATFORM(COCOA)

#include <wtf/cocoa/Entitlements.h>

#include <wtf/cocoa/RuntimeApplicationChecksCocoa.h>

#endif

using namespace Inspector;

static std::optional<bool> remoteInspectionEnabledByDefault = std::nullopt;

static bool inspectionFollowsInternalPolicies = true;

void JSRemoteInspectorDisableAutoStart(void)

{

#if ENABLE(REMOTE_INSPECTOR)

RemoteInspector::startDisabled();

#endif

}

void JSRemoteInspectorStart(void)

{

#if ENABLE(REMOTE_INSPECTOR)

RemoteInspector::singleton();

#endif

}

void JSRemoteInspectorSetParentProcessInformation(ProcessID pid, const uint8_t* auditData, size_t auditLength)

{

#if ENABLE(REMOTE_INSPECTOR) && PLATFORM(COCOA)

RetainPtr<CFDataRef> auditDataRef = adoptCF(CFDataCreate(kCFAllocatorDefault, auditData, auditLength));

RemoteInspector::singleton().setParentProcessInformation(pid, auditDataRef);

#else

UNUSED_PARAM(pid);

UNUSED_PARAM(auditData);

UNUSED_PARAM(auditLength);

#endif

}

void JSRemoteInspectorSetLogToSystemConsole(bool logToSystemConsole)

{

JSGlobalObjectConsoleClient::setLogToSystemConsole(logToSystemConsole);

}

#if PLATFORM(COCOA)

static bool mainProcessHasEntitlement(ASCIILiteral entitlement, std::optional<audit_token_t> parentProcessAuditToken)

{

if (parentProcessAuditToken)

return WTF::hasEntitlement(*parentProcessAuditToken, entitlement);

return WTF::processHasEntitlement(entitlement);

}

#endif

static bool defaultStateForRemoteInspectionEnabledByDefault(void)

{

#if PLATFORM(COCOA)

auto parentProcessAuditToken = RemoteInspector::singleton().parentProcessAuditToken();

if (!linkedOnOrAfterSDKWithBehavior(SDKAlignedBehavior::InspectableDefaultsToDisabled)) {

#if PLATFORM(MAC)

auto developerProvisioningEntitlement = "com.apple.security.get-task-allow"_s;

#else

auto developerProvisioningEntitlement = "get-task-allow"_s;

#endif

if (mainProcessHasEntitlement(developerProvisioningEntitlement, parentProcessAuditToken)) {

WTFLogAlways("Inspection is enabled by default for process or parent application with '%s' entitlement linked against old SDK. Use `inspectable` API to enable inspection on newer SDKs.", developerProvisioningEntitlement.characters());

return true;

}

#if PLATFORM(MAC)

auto deprecatedWebInspectorAllowEntitlement = "com.apple.webinspector.allow"_s;

#else

auto deprecatedWebInspectorAllowEntitlement = "com.apple.private.webinspector.allow-remote-inspection"_s;

#endif

if (mainProcessHasEntitlement(deprecatedWebInspectorAllowEntitlement, parentProcessAuditToken)) {

WTFLogAlways("Inspection is enabled by default for process or parent application with deprecated '%s' entitlement. Use `inspectable` API to enable inspection instead.", deprecatedWebInspectorAllowEntitlement.characters());

return true;

}

return false;

#else

return true;

#endif // not PLATFORM(COCOA)

}

bool JSRemoteInspectorGetInspectionEnabledByDefault(void)

{

if (!remoteInspectionEnabledByDefault)

remoteInspectionEnabledByDefault = defaultStateForRemoteInspectionEnabledByDefault();

return remoteInspectionEnabledByDefault.value();

}

void JSRemoteInspectorSetInspectionEnabledByDefault(bool enabledByDefault)

{

remoteInspectionEnabledByDefault = enabledByDefault;

}

bool JSRemoteInspectorGetInspectionFollowsInternalPolicies(void)

{

return inspectionFollowsInternalPolicies;

}

void JSRemoteInspectorSetInspectionFollowsInternalPolicies(bool followsInternalPolicies)

{

inspectionFollowsInternalPolicies = followsInternalPolicies;

}

WebKit/Source/JavaScriptCore/API/JSRemoteInspector.cpp at main · WebKit/WebKit · GitHub

Uh oh!

Expand file tree

Breadcrumbs

JSRemoteInspector.cpp

Latest commit

History

Breadcrumbs

JSRemoteInspector.cpp

File metadata and controls