cookie.c

   1 /*
   2  * Copyright (c) 2010, 2011 Marco Peereboom <marco@peereboom.us>
   3  *
   4  * Permission to use, copy, modify, and distribute this software for any
   5  * purpose with or without fee is hereby granted, provided that the above
   6  * copyright notice and this permission notice appear in all copies.
   7  *
   8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
   9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
  11  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
  13  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
  14  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  15  */
  16
  17 #include "xxxterm.h"
  18
  19 #define XT_REJECT_FILE          ("rejected.txt")
  20 #define XT_COOKIE_FILE          ("cookies.txt")
  21
  22 /* hooked functions */
  23 void            (*_soup_cookie_jar_add_cookie)(SoupCookieJar *, SoupCookie *);
  24 void            (*_soup_cookie_jar_delete_cookie)(SoupCookieJar *,
  25                     SoupCookie *);
  26
  27 void
  28 print_cookie(char *msg, SoupCookie *c)
  29 {
  30         if (c == NULL)
  31                 return;
  32
  33         if (msg)
  34                 DNPRINTF(XT_D_COOKIE, "%s\n", msg);
  35         DNPRINTF(XT_D_COOKIE, "name     : %s\n", c->name);
  36         DNPRINTF(XT_D_COOKIE, "value    : %s\n", c->value);
  37         DNPRINTF(XT_D_COOKIE, "domain   : %s\n", c->domain);
  38         DNPRINTF(XT_D_COOKIE, "path     : %s\n", c->path);
  39         DNPRINTF(XT_D_COOKIE, "expires  : %s\n",
  40             c->expires ? soup_date_to_string(c->expires, SOUP_DATE_HTTP) : "");
  41         DNPRINTF(XT_D_COOKIE, "secure   : %d\n", c->secure);
  42         DNPRINTF(XT_D_COOKIE, "http_only: %d\n", c->http_only);
  43         DNPRINTF(XT_D_COOKIE, "====================================\n");
  44 }
  45
  46 void
  47 set_hook(void **hook, char *name)
  48 {
  49         if (hook == NULL)
  50                 errx(1, "set_hook");
  51
  52         if (*hook == NULL) {
  53                 *hook = dlsym(RTLD_NEXT, name);
  54                 if (*hook == NULL)
  55                         errx(1, "can't hook %s", name);
  56         }
  57 }
  58
  59 /* override libsoup soup_cookie_equal because it doesn't look at domain */
  60 gboolean
  61 soup_cookie_equal(SoupCookie *cookie1, SoupCookie *cookie2)
  62 {
  63         g_return_val_if_fail(cookie1, FALSE);
  64         g_return_val_if_fail(cookie2, FALSE);
  65
  66         return (!strcmp (cookie1->name, cookie2->name) &&
  67             !strcmp (cookie1->value, cookie2->value) &&
  68             !strcmp (cookie1->path, cookie2->path) &&
  69             !strcmp (cookie1->domain, cookie2->domain));
  70 }
  71
  72 void
  73 transfer_cookies(void)
  74 {
  75         GSList                  *cf;
  76         SoupCookie              *sc, *pc;
  77
  78         cf = soup_cookie_jar_all_cookies(p_cookiejar);
  79
  80         for (;cf; cf = cf->next) {
  81                 pc = cf->data;
  82                 sc = soup_cookie_copy(pc);
  83                 _soup_cookie_jar_add_cookie(s_cookiejar, sc);
  84         }
  85
  86         soup_cookies_free(cf);
  87 }
  88
  89 void
  90 soup_cookie_jar_delete_cookie(SoupCookieJar *jar, SoupCookie *c)
  91 {
  92         GSList                  *cf;
  93         SoupCookie              *ci;
  94
  95         print_cookie("soup_cookie_jar_delete_cookie", c);
  96
  97         if (cookies_enabled == 0)
  98                 return;
  99
 100         if (jar == NULL || c == NULL)
 101                 return;
 102
 103         /* find and remove from persistent jar */
 104         cf = soup_cookie_jar_all_cookies(p_cookiejar);
 105
 106         for (;cf; cf = cf->next) {
 107                 ci = cf->data;
 108                 if (soup_cookie_equal(ci, c)) {
 109                         _soup_cookie_jar_delete_cookie(p_cookiejar, ci);
 110                         break;
 111                 }
 112         }
 113
 114         soup_cookies_free(cf);
 115
 116         /* delete from session jar */
 117         _soup_cookie_jar_delete_cookie(s_cookiejar, c);
 118 }
 119
 120 void
 121 soup_cookie_jar_add_cookie(SoupCookieJar *jar, SoupCookie *cookie)
 122 {
 123         struct domain           *d = NULL;
 124         SoupCookie              *c;
 125         FILE                    *r_cookie_f;
 126
 127         DNPRINTF(XT_D_COOKIE, "soup_cookie_jar_add_cookie: %p %p %p\n",
 128             jar, p_cookiejar, s_cookiejar);
 129
 130         if (cookies_enabled == 0)
 131                 return;
 132
 133         /* see if we are up and running */
 134         if (p_cookiejar == NULL) {
 135                 _soup_cookie_jar_add_cookie(jar, cookie);
 136                 return;
 137         }
 138         /* disallow p_cookiejar adds, shouldn't happen */
 139         if (jar == p_cookiejar)
 140                 return;
 141
 142         /* sanity */
 143         if (jar == NULL || cookie == NULL)
 144                 return;
 145
 146         if (enable_cookie_whitelist &&
 147             (d = wl_find(cookie->domain, &c_wl)) == NULL) {
 148                 blocked_cookies++;
 149                 DNPRINTF(XT_D_COOKIE,
 150                     "soup_cookie_jar_add_cookie: reject %s\n",
 151                     cookie->domain);
 152                 if (save_rejected_cookies) {
 153                         if ((r_cookie_f = fopen(rc_fname, "a+")) == NULL) {
 154                                 show_oops(NULL, "can't open reject cookie file");
 155                                 return;
 156                         }
 157                         fseek(r_cookie_f, 0, SEEK_END);
 158                         fprintf(r_cookie_f, "%s%s\t%s\t%s\t%s\t%lu\t%s\t%s\n",
 159                             cookie->http_only ? "#HttpOnly_" : "",
 160                             cookie->domain,
 161                             *cookie->domain == '.' ? "TRUE" : "FALSE",
 162                             cookie->path,
 163                             cookie->secure ? "TRUE" : "FALSE",
 164                             cookie->expires ?
 165                                 (gulong)soup_date_to_time_t(cookie->expires) :
 166                                 0,
 167                             cookie->name,
 168                             cookie->value);
 169                         fflush(r_cookie_f);
 170                         fclose(r_cookie_f);
 171                 }
 172                 if (!allow_volatile_cookies)
 173                         return;
 174         }
 175
 176         if (cookie->expires == NULL && session_timeout) {
 177                 soup_cookie_set_expires(cookie,
 178                     soup_date_new_from_now(session_timeout));
 179                 print_cookie("modified add cookie", cookie);
 180         }
 181
 182         /* see if we are white listed for persistence */
 183         if ((d && d->handy) || (enable_cookie_whitelist == 0)) {
 184                 /* add to persistent jar */
 185                 c = soup_cookie_copy(cookie);
 186                 print_cookie("soup_cookie_jar_add_cookie p_cookiejar", c);
 187                 _soup_cookie_jar_add_cookie(p_cookiejar, c);
 188         }
 189
 190         /* add to session jar */
 191         print_cookie("soup_cookie_jar_add_cookie s_cookiejar", cookie);
 192         _soup_cookie_jar_add_cookie(s_cookiejar, cookie);
 193 }
 194
 195 void
 196 setup_cookies(void)
 197 {
 198         char                    file[PATH_MAX];
 199
 200         set_hook((void *)&_soup_cookie_jar_add_cookie,
 201             "soup_cookie_jar_add_cookie");
 202         set_hook((void *)&_soup_cookie_jar_delete_cookie,
 203             "soup_cookie_jar_delete_cookie");
 204
 205         if (cookies_enabled == 0)
 206                 return;
 207
 208         /*
 209          * the following code is intricate due to overriding several libsoup
 210          * functions.
 211          * do not alter order of these operations.
 212          */
 213
 214         /* rejected cookies */
 215         if (save_rejected_cookies)
 216                 snprintf(rc_fname, sizeof file, "%s/%s", work_dir,
 217                     XT_REJECT_FILE);
 218
 219         /* persistent cookies */
 220         snprintf(file, sizeof file, "%s/%s", work_dir, XT_COOKIE_FILE);
 221         p_cookiejar = soup_cookie_jar_text_new(file, read_only_cookies);
 222
 223         /* session cookies */
 224         s_cookiejar = soup_cookie_jar_new();
 225         g_object_set(G_OBJECT(s_cookiejar), SOUP_COOKIE_JAR_ACCEPT_POLICY,
 226             cookie_policy, (void *)NULL);
 227         transfer_cookies();
 228
 229         soup_session_add_feature(session, (SoupSessionFeature*)s_cookiejar);
 230 }
 231