1da1cae...
by
Michael Catanzaro <email address hidden>
Unregister main world message handlers when no longer needed
Currently all script message handlers are global, always connected, and
managed by EphyEmbedShell. But this is only suitable for about half of
them. It's OK to do this for message handlers that use Epiphany's
private script world, because they are not accessible to web content and
therefore it is harmless to leave them registered always. But Epiphany
registers three other message handlers that *are* always accessible to
web content. One reloads the current page, one reloads the page
bypassing TLS errors, and one deletes web apps. Arbitrary websites
should not be able to access these, but we cannot use a private script
world because the message handlers need to be accessible to Epiphany's
error pages and about:applications page.
Fix this by registering these message handlers only immediately before
displaying an error page or about:applications. The message handler will
then be unregistered before the next page load, so it's no longer
available to websites.
Note in the case of EphyAboutHandler, the load has already started, so
we unregister the handler for the very next load. For the other two
cases, the load will start imminently, so we should not unregister the
handler until the load after that.
Finally, note that message handlers only get unregistered when a future
load does not itself require message handlers. That should be fine for
any reasonably foreseeable future, but it would break if we ever
intentionally wanted to make a message handler available to all
websites, so leave a warning about this.
cafca23...
by
Michael Catanzaro <email address hidden>
embed-shell: rename ucm registration functions
We'll think of these functions as registering the user content manager
itself, rather than all of its handlers, since in the next commit I'll
move the registration of default script world handlers to different
places.
92caed9...
by
Michael Catanzaro <email address hidden>
web-view: register ucm handlers in constructed
Best practice is to do the bare minimum work in new, so there is less to
do when using g_object_new() directly. We don't ever do that in
Epiphany, but it's still nice to follow best practices, and also avoids
a small amount of code duplication.
