15821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Copyright (c) 2011 The Chromium Authors. All rights reserved.
25821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be
35821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// found in the LICENSE file.
45821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)
55821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#ifndef CHROME_COMMON_MAC_CFBUNDLE_BLOCKER_H_
65821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#define CHROME_COMMON_MAC_CFBUNDLE_BLOCKER_H_
75821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)
85821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#if defined(__OBJC__)
95821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)@class NSString;
105821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#else
115821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)class NSString;
125821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#endif
135821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)
145821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace chrome {
155821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace common {
165821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)namespace mac {
175821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)
185821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Arranges to block loading of some third-party plug-in code that might try
195821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// to inject itself into the process. Modules loaded by CFBundle are blocked
205821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// if located within specific directories. Because NSBundle uses CFBundle
215821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// behind the scenes, this also blocks modules loaded by NSBundle when located
225821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// in those same specific directories.
235821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)//
245821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Blocked modules include input managers, contextual menu items, and
255821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// scripting additions installed in per-user (~/Library), per-machine
265821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// (/Library), or network (/Network/Library) locations. Modules installed in
275821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// the operating system location (/System/Library) are never blocked.
285821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)//
295821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// This mechanism does not prevent CFBundle (or NSBundle) objects from being
305821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// created, but it does block them from loading modules into the process.
315821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)void EnableCFBundleBlocker();
325821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)
335821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Returns true if |bundle_id| and |version| identify a bundle that is allowed
345821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// to be loaded even when found in a blocked directory.
355821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)//
365821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)// Exposed only for testing. Do not call from outside the implementation.
375821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)bool IsBundleAllowed(NSString* bundle_id, NSString* version);
385821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)
395821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)}  // namespace mac
405821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)}  // namespace common
415821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)}  // namespace chrome
425821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)
435821806d5e7f356e8fa4b058a389a808ea183019Torne (Richard Coles)#endif  // CHROME_COMMON_MAC_CFBUNDLE_BLOCKER_H_
44