1 /*
2 * Copyright 2009 Jacek Caban for CodeWeavers
3 *
4 * This library is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU Lesser General Public
6 * License as published by the Free Software Foundation; either
7 * version 2.1 of the License, or (at your option) any later version.
8 *
9 * This library is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 * Lesser General Public License for more details.
13 *
14 * You should have received a copy of the GNU Lesser General Public
15 * License along with this library; if not, write to the Free Software
16 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA
17 */
18
19 #include "config.h"
20 #include "wine/port.h"
21
22 #include "jscript.h"
23 #include "objsafe.h"
24 #include "mshtmhst.h"
25
26 #include "wine/debug.h"
27
28 WINE_DEFAULT_DEBUG_CHANNEL(jscript);
29
30 /* Defined as extern in urlmon.idl, but not exported by uuid.lib */
31 const GUID GUID_CUSTOM_CONFIRMOBJECTSAFETY =
32 {0x10200490,0xfa38,0x11d0,{0xac,0x0e,0x00,0xa0,0xc9,0xf,0xff,0xc0}};
33
34 static IInternetHostSecurityManager *get_sec_mgr(script_ctx_t *ctx)
35 {
36 IInternetHostSecurityManager *secmgr;
37 IServiceProvider *sp;
38 HRESULT hres;
39
40 if(!ctx->site)
41 return NULL;
42
43 if(ctx->secmgr)
44 return ctx->secmgr;
45
46 hres = IActiveScriptSite_QueryInterface(ctx->site, &IID_IServiceProvider, (void**)&sp);
47 if(FAILED(hres))
48 return NULL;
49
50 hres = IServiceProvider_QueryService(sp, &SID_SInternetHostSecurityManager, &IID_IInternetHostSecurityManager,
51 (void**)&secmgr);
52 IServiceProvider_Release(sp);
53 if(FAILED(hres))
54 return NULL;
55
56 return ctx->secmgr = secmgr;
57 }
58
59 static IUnknown *create_activex_object(script_ctx_t *ctx, const WCHAR *progid)
60 {
61 IInternetHostSecurityManager *secmgr;
62 IObjectWithSite *obj_site;
63 struct CONFIRMSAFETY cs;
64 IClassFactoryEx *cfex;
65 IClassFactory *cf;
66 DWORD policy_size;
67 BYTE *bpolicy;
68 IUnknown *obj;
69 DWORD policy;
70 GUID guid;
71 HRESULT hres;
72
73 hres = CLSIDFromProgID(progid, &guid);
74 if(FAILED(hres))
75 return NULL;
76
77 TRACE("GUID %s\n", debugstr_guid(&guid));
78
79 secmgr = get_sec_mgr(ctx);
80 if(!secmgr)
81 return NULL;
82
83 policy = 0;
84 hres = IInternetHostSecurityManager_ProcessUrlAction(secmgr, URLACTION_ACTIVEX_RUN, (BYTE*)&policy, sizeof(policy),
85 (BYTE*)&guid, sizeof(GUID), 0, 0);
86 if(FAILED(hres) || policy != URLPOLICY_ALLOW)
87 return NULL;
88
89 hres = CoGetClassObject(&guid, CLSCTX_INPROC_SERVER|CLSCTX_INPROC_HANDLER, NULL, &IID_IClassFactory, (void**)&cf);
90 if(FAILED(hres))
91 return NULL;
92
93 hres = IClassFactory_QueryInterface(cf, &IID_IClassFactoryEx, (void**)&cfex);
94 if(SUCCEEDED(hres)) {
95 FIXME("Use IClassFactoryEx\n");
96 IClassFactoryEx_Release(cfex);
97 }
98
99 hres = IClassFactory_CreateInstance(cf, NULL, &IID_IUnknown, (void**)&obj);
100 if(FAILED(hres))
101 return NULL;
102
103 cs.clsid = guid;
104 cs.pUnk = obj;
105 cs.dwFlags = 0;
106 hres = IInternetHostSecurityManager_QueryCustomPolicy(secmgr, &GUID_CUSTOM_CONFIRMOBJECTSAFETY, &bpolicy, &policy_size,
107 (BYTE*)&cs, sizeof(cs), 0);
108 if(SUCCEEDED(hres)) {
109 policy = policy_size >= sizeof(DWORD) ? *(DWORD*)bpolicy : URLPOLICY_DISALLOW;
110 CoTaskMemFree(bpolicy);
111 }
112
113 if(FAILED(hres) || policy != URLPOLICY_ALLOW) {
114 IUnknown_Release(obj);
115 return NULL;
116 }
117
118 hres = IUnknown_QueryInterface(obj, &IID_IObjectWithSite, (void**)&obj_site);
119 if(SUCCEEDED(hres)) {
120 IUnknown *ax_site;
121
122 ax_site = create_ax_site(ctx);
123 if(ax_site) {
124 hres = IObjectWithSite_SetSite(obj_site, ax_site);
125 IUnknown_Release(ax_site);
126 }
127 IObjectWithSite_Release(obj_site);
128 if(!ax_site || FAILED(hres)) {
129 IObjectWithSite_Release(obj_site);
130 IUnknown_Release(obj);
131 return NULL;
132 }
133 }
134
135 return obj;
136 }
137
138 static HRESULT ActiveXObject_value(script_ctx_t *ctx, vdisp_t *jsthis, WORD flags, DISPPARAMS *dp,
139 VARIANT *retv, jsexcept_t *ei, IServiceProvider *caller)
140 {
141 IDispatch *disp;
142 IUnknown *obj;
143 BSTR progid;
144 HRESULT hres;
145
146 TRACE("\n");
147
148 if(flags != DISPATCH_CONSTRUCT) {
149 FIXME("unsupported flags %x\n", flags);
150 return E_NOTIMPL;
151 }
152
153 if(ctx->safeopt != (INTERFACESAFE_FOR_UNTRUSTED_DATA|INTERFACE_USES_DISPEX|INTERFACE_USES_SECURITY_MANAGER)) {
154 FIXME("Unsupported safeopt %x\n", ctx->safeopt);
155 return E_NOTIMPL;
156 }
157
158 if(arg_cnt(dp) != 1) {
159 FIXME("unsupported arg_cnt %d\n", arg_cnt(dp));
160 return E_NOTIMPL;
161 }
162
163 hres = to_string(ctx, get_arg(dp,0), ei, &progid);
164 if(FAILED(hres))
165 return hres;
166
167 obj = create_activex_object(ctx, progid);
168 SysFreeString(progid);
169 if(!obj)
170 return throw_generic_error(ctx, ei, IDS_CREATE_OBJ_ERROR, NULL);
171
172 hres = IUnknown_QueryInterface(obj, &IID_IDispatch, (void**)&disp);
173 IUnknown_Release(obj);
174 if(FAILED(hres)) {
175 FIXME("Object does not support IDispatch\n");
176 return E_NOTIMPL;
177 }
178
179 V_VT(retv) = VT_DISPATCH;
180 V_DISPATCH(retv) = disp;
181 return S_OK;
182 }
183
184 HRESULT create_activex_constr(script_ctx_t *ctx, DispatchEx **ret)
185 {
186 DispatchEx *prototype;
187 HRESULT hres;
188
189 static const WCHAR ActiveXObjectW[] = {'A','c','t','i','v','e','X','O','b','j','e','c','t',0};
190
191 hres = create_object(ctx, NULL, &prototype);
192 if(FAILED(hres))
193 return hres;
194
195 hres = create_builtin_function(ctx, ActiveXObject_value, ActiveXObjectW, NULL,
196 PROPF_CONSTR|1, prototype, ret);
197
198 jsdisp_release(prototype);
199 return hres;
200 }
201
This page was automatically generated by the
LXR engine.
Visit the LXR main site for more
information.