Issue 1793 - check whether the frame is whitelisted before injecting CSS

src/plugin/AdblockPlusClient.cpp

 /*
  * This file is part of Adblock Plus <https://adblockplus.org/>,
  * Copyright (C) 2006-2015 Eyeo GmbH
  *
  * Adblock Plus is free software: you can redistribute it and/or modify
  * it under the terms of the GNU General Public License version 3 as
  * published by the Free Software Foundation.
  *
  * Adblock Plus is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  * GNU General Public License for more details.
  *
  * You should have received a copy of the GNU General Public License
  * along with Adblock Plus.  If not, see <http://www.gnu.org/licenses/>.
  */
 
 #include "PluginStdAfx.h"
+#include "AdblockPlusClient.h"
 #include "PluginSettings.h"
 #include "PluginSystem.h"
 #include "PluginFilter.h"
-#include "PluginClientFactory.h"
 #include "PluginMutex.h"
 #include "PluginClass.h"
-
-#include "AdblockPlusClient.h"
-
 #include "../shared/Utils.h"
 
 namespace
 {
+  class ScopedProcessInformation : public PROCESS_INFORMATION {
+  public:
+    ScopedProcessInformation()
+    {
+      hProcess = hThread = 0;
+      dwProcessId = dwThreadId = 0;
+    }
+    ~ScopedProcessInformation()
+    {
+      if (hThread != nullptr)
+      {
+        CloseHandle(hThread);
+      }
+      if (hProcess != nullptr)
+      {
+        CloseHandle(hProcess);
+      }
+    }
+  };
+
   void SpawnAdblockPlusEngine()
   {
     std::wstring engineExecutablePath = GetDllDir() + L"AdblockPlusEngine.exe";
-    CString params = ToCString(L"AdblockPlusEngine.exe " + GetBrowserLanguage());
+    std::wstring params = L"AdblockPlusEngine.exe " + GetBrowserLanguage();
 
     STARTUPINFO startupInfo = {};
-    PROCESS_INFORMATION processInformation = {};
-
-    HANDLE token;
-    OpenProcessToken(GetCurrentProcess(), TOKEN_DUPLICATE | TOKEN_ADJUST_DEFAULT | TOKEN_QUERY | TOKEN_ASSIGN_PRIMARY, &token);
-
-    TOKEN_APPCONTAINER_INFORMATION *acs = NULL;
-    DWORD length = 0;
-
-    // Get AppContainer SID
-    if (!GetTokenInformation(token, TokenAppContainerSid, acs, 0, &length) && GetLastError() == ERROR_INSUFFICIENT_BUFFER)
-    {
-        acs = (TOKEN_APPCONTAINER_INFORMATION*) HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, length);
-        if (acs != NULL)
-        {
-          GetTokenInformation(token, TokenAppContainerSid, acs, length, &length);
-        }
-        else
-        {
-          throw std::runtime_error("Out of memory");
-        }
-    }
-
-    BOOL createProcRes = 0;
-    // Running inside AppContainer or in Windows XP
-    if ((acs != NULL && acs->TokenAppContainer != NULL) || !IsWindowsVistaOrLater())
-    {
-      // We need to break out from AppContainer. Launch with default security - registry entry will eat the user prompt
-      // See http://msdn.microsoft.com/en-us/library/bb250462(v=vs.85).aspx#wpm_elebp
-      createProcRes = CreateProcessW(engineExecutablePath.c_str(), params.GetBuffer(params.GetLength() + 1),
-                              0, 0, false, 0, 0, 0, (STARTUPINFOW*)&startupInfo, &processInformation);
-    }
-    else
-    {
-      // Launch with Low Integrity explicitly
-      HANDLE newToken;
-      DuplicateTokenEx(token, 0, 0, SecurityImpersonation, TokenPrimary, &newToken);
-
-      PSID integritySid = 0;
-      ConvertStringSidToSid(L"S-1-16-4096", &integritySid);
-      std::tr1::shared_ptr<SID> sharedIntegritySid(static_cast<SID*>(integritySid), FreeSid); // Just to simplify cleanup
-
-      TOKEN_MANDATORY_LABEL tml = {};
-      tml.Label.Attributes = SE_GROUP_INTEGRITY;
-      tml.Label.Sid = integritySid;
-
-      // Set the process integrity level
-      SetTokenInformation(newToken, TokenIntegrityLevel, &tml, sizeof(tml));
-
-      STARTUPINFO startupInfo = {};
-      PROCESS_INFORMATION processInformation = {};
-
-      createProcRes = CreateProcessAsUserW(newToken, engineExecutablePath.c_str(), params.GetBuffer(params.GetLength() + 1),
-                              0, 0, false, 0, 0, 0, (STARTUPINFOW*)&startupInfo, &processInformation);
-    }
-
+    ScopedProcessInformation processInformation;
+
+    // We need to break out from AppContainer. Launch with default security - registry entry will eat the user prompt
+    // See http://msdn.microsoft.com/en-us/library/bb250462(v=vs.85).aspx#wpm_elebp
+    BOOL createProcRes = CreateProcessW(engineExecutablePath.c_str(), &params[0],
+      0, 0, false, 0, 0, 0, &startupInfo, &processInformation);
     if (!createProcRes)
     {
       throw std::runtime_error("Failed to start Adblock Plus Engine");
     }
-
-    CloseHandle(processInformation.hProcess);
-    CloseHandle(processInformation.hThread);
   }
 
   Communication::Pipe* OpenEnginePipe()
   {
     try
     {
       return new Communication::Pipe(Communication::pipeName, Communication::Pipe::MODE_CONNECT);
     }
     catch (Communication::PipeConnectionError e)
     {
@@ skipping 17 matching lines @@
 
   std::vector<SubscriptionDescription> ReadSubscriptions(Communication::InputBuffer& message)
   {
     int32_t count;
     message >> count;
 
     std::vector<SubscriptionDescription> result;
     for (int32_t i = 0; i < count; i++)
     {
       SubscriptionDescription description;
-      message >> description.url;
-      message >> description.title;
-      message >> description.specialization;
+      std::string url;
+      message >> url;
+      description.url = ToUtf16String(url);
+      std::string title;
+      message >> title;
+      description.title = ToUtf16String(title);
+      std::string specialization;
+      message >> specialization;
+      description.specialization = ToUtf16String(specialization);
       message >> description.listed;
       result.push_back(description);
     }
     return result;
   }
 }
 
 CAdblockPlusClient* CAdblockPlusClient::s_instance = NULL;
 CComAutoCriticalSection CAdblockPlusClient::s_criticalSectionLocal;
 
@@ skipping 103 matching lines @@
   return isHidden;
 }
 
 bool CAdblockPlusClient::IsWhitelistedUrl(const std::wstring& url, const std::vector<std::string>& frameHierarchy)
 {
   return !GetWhitelistingFilter(url, frameHierarchy).empty();
 }
 
 std::string CAdblockPlusClient::GetWhitelistingFilter(const std::wstring& url, const std::vector<std::string>& frameHierarchy)
 {
-  DEBUG_GENERAL((L"GetWhitelistingFilter: " + url + L" start").c_str());
-  Communication::OutputBuffer request;
-  request << Communication::PROC_GET_WHITELISTING_FITER << url << frameHierarchy;
+  DEBUG_GENERAL((L"IsWhitelistedUrl: " + url + L" start").c_str());
+  Communication::OutputBuffer request;
+  request << Communication::PROC_GET_WHITELISTING_FITER << ToUtf8String(url) << frameHierarchy;
 
   Communication::InputBuffer response;
   if (!CallEngine(request, response)) 
     return "";
 
   std::string filterText;
   response >> filterText;
 
-  DEBUG_GENERAL((L"GetWhitelistingFilter: " + url + L" end").c_str());
+  DEBUG_GENERAL((L"IsWhitelistedUrl: " + url + L" end").c_str());
   return filterText;
 }
 
 bool CAdblockPlusClient::IsElemhideWhitelistedOnDomain(const std::wstring& url, const std::vector<std::string>& frameHierarchy)
 {
   Communication::OutputBuffer request;
-  request << Communication::PROC_IS_ELEMHIDE_WHITELISTED_ON_URL << url << frameHierarchy;
+  request << Communication::PROC_IS_ELEMHIDE_WHITELISTED_ON_URL << ToUtf8String(url) << frameHierarchy;
 
   Communication::InputBuffer response;
   if (!CallEngine(request, response)) 
     return false;
 
   bool isWhitelisted;
   response >> isWhitelisted;
   return isWhitelisted;
 }
 
 bool CAdblockPlusClient::Matches(const std::wstring& url, AdblockPlus::FilterEngine::ContentType contentType, const std::wstring& domain)
 {
   Communication::OutputBuffer request;
-  request << Communication::PROC_MATCHES << url << contentType << domain;
+  request << Communication::PROC_MATCHES << ToUtf8String(url) << static_cast<int32_t>(contentType) << ToUtf8String(domain);
 
   Communication::InputBuffer response;
   if (!CallEngine(request, response)) 
     return false;
 
   bool match;
   response >> match;
   return match;
 }
 
 std::vector<std::wstring> CAdblockPlusClient::GetElementHidingSelectors(const std::wstring& domain)
 {
   Communication::OutputBuffer request;
-  request << Communication::PROC_GET_ELEMHIDE_SELECTORS << domain;
+  request << Communication::PROC_GET_ELEMHIDE_SELECTORS << ToUtf8String(domain);
 
   Communication::InputBuffer response;
   if (!CallEngine(request, response)) 
     return std::vector<std::wstring>();
 
-  std::vector<std::wstring> selectors;
+  std::vector<std::string> selectors;
   response >> selectors;
-  return selectors;
+  return ToUtf16Strings(selectors);
 }
 
 std::vector<SubscriptionDescription> CAdblockPlusClient::FetchAvailableSubscriptions()
 {
   Communication::InputBuffer response;
   if (!CallEngine(Communication::PROC_AVAILABLE_SUBSCRIPTIONS, response)) 
     return std::vector<SubscriptionDescription>();
   return ReadSubscriptions(response);
 }
 
@@ skipping 16 matching lines @@
     {
       return true;
     }
   }
   return false;
 }
 
 void CAdblockPlusClient::SetSubscription(const std::wstring& url)
 {
   Communication::OutputBuffer request;
-  request << Communication::PROC_SET_SUBSCRIPTION << url;
+  request << Communication::PROC_SET_SUBSCRIPTION << ToUtf8String(url);
   CallEngine(request);
 }
 
 void CAdblockPlusClient::AddSubscription(const std::wstring& url)
 {
   Communication::OutputBuffer request;
-  request << Communication::PROC_ADD_SUBSCRIPTION << url;
+  request << Communication::PROC_ADD_SUBSCRIPTION << ToUtf8String(url);
   CallEngine(request);
 }
 
 void CAdblockPlusClient::RemoveSubscription(const std::wstring& url)
 {
   Communication::OutputBuffer request;
-  request << Communication::PROC_REMOVE_SUBSCRIPTION << url;
+  request << Communication::PROC_REMOVE_SUBSCRIPTION << ToUtf8String(url);
   CallEngine(request);
 }
 
 
 void CAdblockPlusClient::UpdateAllSubscriptions()
 {
   CallEngine(Communication::PROC_UPDATE_ALL_SUBSCRIPTIONS);
 }
 
 std::vector<std::wstring> CAdblockPlusClient::GetExceptionDomains()
 {
   Communication::InputBuffer response;
   if (!CallEngine(Communication::PROC_GET_EXCEPTION_DOMAINS, response)) 
     return std::vector<std::wstring>();
 
-  std::vector<std::wstring> domains;
+  std::vector<std::string> domains;
   response >> domains;
-  return domains;
+  return ToUtf16Strings(domains);
 }
 
 bool CAdblockPlusClient::IsFirstRun()
 {
   DEBUG_GENERAL("IsFirstRun");
   Communication::InputBuffer response;
   if (!CallEngine(Communication::PROC_IS_FIRST_RUN_ACTION_NEEDED, response)) return false;
   bool res;
   response >> res;
   return res;
 }
 
 void CAdblockPlusClient::AddFilter(const std::wstring& text)
 {
   Communication::OutputBuffer request;
-  request << Communication::PROC_ADD_FILTER << text;
+  request << Communication::PROC_ADD_FILTER << ToUtf8String(text);
   CallEngine(request);
 }
 
 void CAdblockPlusClient::RemoveFilter(const std::wstring& text)
 {
   RemoveFilter(ToUtf8String(text));
 }
 
 void CAdblockPlusClient::RemoveFilter(const std::string& text)
 {
   Communication::OutputBuffer request;
   request << Communication::PROC_REMOVE_FILTER << text;
   CallEngine(request);
 }
 
 void CAdblockPlusClient::SetPref(const std::wstring& name, const std::wstring& value)
 {
   Communication::OutputBuffer request;
-  request << Communication::PROC_SET_PREF << name << value;
+  request << Communication::PROC_SET_PREF << ToUtf8String(name) << ToUtf8String(value);
   CallEngine(request);
 }
 
 void CAdblockPlusClient::SetPref(const std::wstring& name, const int64_t & value)
 {
   Communication::OutputBuffer request;
-  request << Communication::PROC_SET_PREF << name << value;
+  request << Communication::PROC_SET_PREF << ToUtf8String(name) << value;
   CallEngine(request);
 }
 
 void CAdblockPlusClient::SetPref(const std::wstring& name, bool value)
 {
   Communication::OutputBuffer request;
-  request << Communication::PROC_SET_PREF << name << value;
+  request << Communication::PROC_SET_PREF << ToUtf8String(name) << value;
   CallEngine(request);
 }
 
 std::wstring CAdblockPlusClient::GetPref(const std::wstring& name, const wchar_t* defaultValue)
 {
   return GetPref(name, std::wstring(defaultValue));
 }
 std::wstring CAdblockPlusClient::GetPref(const std::wstring& name, const std::wstring& defaultValue)
 {
   DEBUG_GENERAL((L"GetPref: " + name + L" start").c_str());
   Communication::OutputBuffer request;
-  request << Communication::PROC_GET_PREF << name;
+  request << Communication::PROC_GET_PREF << ToUtf8String(name);
 
   Communication::InputBuffer response;
   if (!CallEngine(request, response)) 
     return defaultValue;
   bool success;
   response >> success;
   if (success)
   {
-    std::wstring value;
+    std::string value;
     response >> value;
     DEBUG_GENERAL((L"GetPref: " + name + L" end").c_str());
-    return value;
+    return ToUtf16String(value);
   }
   else
   {
     DEBUG_GENERAL((L"GetPref: " + name + L" end").c_str());
     return defaultValue;
   }
 }
 
 bool CAdblockPlusClient::GetPref(const std::wstring& name, bool defaultValue)
 {
   DEBUG_GENERAL((L"GetPref: " + name + L" start").c_str());
   Communication::OutputBuffer request;
-  request << Communication::PROC_GET_PREF << name;
+  request << Communication::PROC_GET_PREF << ToUtf8String(name);
 
   Communication::InputBuffer response;
   if (!CallEngine(request, response)) 
     return defaultValue;
   bool success;
   response >> success;
   if (success)
   {
     bool value;
     response >> value;
     DEBUG_GENERAL((L"GetPref: " + name + L" end").c_str());
     return value;
   }
   else
   {
     DEBUG_GENERAL((L"GetPref: " + name + L" end").c_str());
     return defaultValue;
   }
 }
 int64_t CAdblockPlusClient::GetPref(const std::wstring& name, int64_t defaultValue)
 {
   DEBUG_GENERAL((L"GetPref: " + name + L" start").c_str());
   Communication::OutputBuffer request;
-  request << Communication::PROC_GET_PREF << name;
+  request << Communication::PROC_GET_PREF << ToUtf8String(name);
 
   Communication::InputBuffer response;
   if (!CallEngine(request, response)) 
     return defaultValue;
   bool success;
   response >> success;
   if (success)
   {
     int64_t value;
     response >> value;
@@ skipping 13 matching lines @@
   request << Communication::PROC_CHECK_FOR_UPDATES << reinterpret_cast<int32_t>(callbackWindow);
   CallEngine(request);
 }
 
 std::wstring CAdblockPlusClient::GetDocumentationLink()
 {
   DEBUG_GENERAL("GetDocumentationLink");
   Communication::InputBuffer response;
   if (!CallEngine(Communication::PROC_GET_DOCUMENTATION_LINK, response)) 
     return L"";
-  std::wstring docLink;
+  std::string docLink;
   response >> docLink;
-  return docLink;
+  return ToUtf16String(docLink);
 }
 
 bool CAdblockPlusClient::TogglePluginEnabled()
 {
   DEBUG_GENERAL("TogglePluginEnabled");
   Communication::InputBuffer response;
   if (!CallEngine(Communication::PROC_TOGGLE_PLUGIN_ENABLED, response)) 
     return false;
   bool currentEnabledState;
   response >> currentEnabledState;
   return currentEnabledState;
 }
 
 std::wstring CAdblockPlusClient::GetHostFromUrl(const std::wstring& url)
 {
   DEBUG_GENERAL("GetHostFromUrl");
   Communication::OutputBuffer request;
-  request << Communication::PROC_GET_HOST << url;
+  request << Communication::PROC_GET_HOST << ToUtf8String(url);
 
   Communication::InputBuffer response;
   if (!CallEngine(request, response)) 
     return L"";
-  std::wstring host;
+  std::string host;
   response >> host;
-  return host;
+  return ToUtf16String(host);
 }
 
 int CAdblockPlusClient::CompareVersions(const std::wstring& v1, const std::wstring& v2)
 {
   DEBUG_GENERAL("CompareVersions");
   Communication::OutputBuffer request;
-  request << Communication::PROC_COMPARE_VERSIONS << v1 << v2;
+  request << Communication::PROC_COMPARE_VERSIONS << ToUtf8String(v1) << ToUtf8String(v2);
   Communication::InputBuffer response;
   if (!CallEngine(request, response))
     return 0;
   int result;
   response >> result;
   return result;
 }