/* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */ /* * This file is part of the LibreOffice project. * * This Source Code Form is subject to the terms of the Mozilla Public * License, v. 2.0. If a copy of the MPL was not distributed with this * file, You can obtain one at http://mozilla.org/MPL/2.0/. * * This file incorporates work covered by the following license notice: * * Licensed to the Apache Software Foundation (ASF) under one or more * contributor license agreements. See the NOTICE file distributed * with this work for additional information regarding copyright * ownership. The ASF licenses this file to you under the Apache * License, Version 2.0 (the "License"); you may not use this file * except in compliance with the License. You may obtain a copy of * the License at http://www.apache.org/licenses/LICENSE-2.0 . */ #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include // namespaces using namespace ::com::sun::star::uno; constexpr OUString PROPERTYNAME_MACRO_TRUSTEDAUTHORS = u"TrustedAuthors"_ustr; constexpr OUString PROPERTYNAME_TRUSTEDAUTHOR_SUBJECTNAME = u"SubjectName"_ustr; constexpr OUString PROPERTYNAME_TRUSTEDAUTHOR_SERIALNUMBER = u"SerialNumber"_ustr; constexpr OUString PROPERTYNAME_TRUSTEDAUTHOR_RAWDATA = u"RawData"_ustr; namespace SvtSecurityOptions { bool IsReadOnly( EOption eOption ) { bool bReadonly; switch(eOption) { case SvtSecurityOptions::EOption::SecureUrls : bReadonly = officecfg::Office::Common::Security::Scripting::SecureURL::isReadOnly(); break; case SvtSecurityOptions::EOption::DocWarnSaveOrSend: bReadonly = officecfg::Office::Common::Security::Scripting::WarnSaveOrSendDoc::isReadOnly(); break; case SvtSecurityOptions::EOption::DocWarnSigning: bReadonly = officecfg::Office::Common::Security::Scripting::WarnSignDoc::isReadOnly(); break; case SvtSecurityOptions::EOption::DocWarnPrint: bReadonly = officecfg::Office::Common::Security::Scripting::WarnPrintDoc::isReadOnly(); break; case SvtSecurityOptions::EOption::DocWarnCreatePdf: bReadonly = officecfg::Office::Common::Security::Scripting::WarnCreatePDF::isReadOnly(); break; case SvtSecurityOptions::EOption::DocWarnRemovePersonalInfo: bReadonly = officecfg::Office::Common::Security::Scripting::RemovePersonalInfoOnSaving::isReadOnly(); break; case SvtSecurityOptions::EOption::DocWarnKeepRedlineInfo: bReadonly = officecfg::Office::Common::Security::Scripting::KeepRedlineInfoOnSaving::isReadOnly(); break; case SvtSecurityOptions::EOption::DocWarnKeepDocUserInfo: bReadonly = officecfg::Office::Common::Security::Scripting::KeepDocUserInfoOnSaving::isReadOnly(); break; case SvtSecurityOptions::EOption::DocWarnKeepNoteAuthorDateInfo: bReadonly = officecfg::Office::Common::Security::Scripting::KeepNoteAuthorDateInfoOnSaving::isReadOnly(); break; case SvtSecurityOptions::EOption::DocWarnKeepDocVersionInfo: bReadonly = officecfg::Office::Common::Security::Scripting::KeepDocVersionInfoOnSaving::isReadOnly(); break; case SvtSecurityOptions::EOption::DocKeepPrinterSettings: bReadonly = officecfg::Office::Common::Security::Scripting::KeepDocPrinterSettingsOnSaving::isReadOnly(); break; case SvtSecurityOptions::EOption::DocWarnRecommendPassword: bReadonly = officecfg::Office::Common::Security::Scripting::RecommendPasswordProtection::isReadOnly(); break; case SvtSecurityOptions::EOption::MacroSecLevel: bReadonly = officecfg::Office::Common::Security::Scripting::MacroSecurityLevel::isReadOnly(); break; case SvtSecurityOptions::EOption::MacroTrustedAuthors: bReadonly = officecfg::Office::Common::Security::Scripting::TrustedAuthors::isReadOnly(); break; case SvtSecurityOptions::EOption::CtrlClickHyperlink: bReadonly = officecfg::Office::Common::Security::Scripting::HyperlinksWithCtrlClick::isReadOnly(); break; case SvtSecurityOptions::EOption::BlockUntrustedRefererLinks: bReadonly = officecfg::Office::Common::Security::Scripting::BlockUntrustedRefererLinks::isReadOnly(); break; case SvtSecurityOptions::EOption::DisableActiveContent: bReadonly = officecfg::Office::Common::Security::Scripting::DisableActiveContent::isReadOnly() || officecfg::Office::Common::Security::Scripting::DisableOLEAutomation::isReadOnly(); break; default: assert(false); bReadonly = true; } return bReadonly; } std::vector< OUString > GetSecureURLs() { if (comphelper::IsFuzzing()) return {}; std::vector aRet = comphelper::sequenceToContainer>( officecfg::Office::Common::Security::Scripting::SecureURL::get()); SvtPathOptions aOpt; std::transform(aRet.begin(), aRet.end(), aRet.begin(), [&aOpt](const OUString& rUrl) -> OUString { return aOpt.SubstituteVariable( rUrl ); }); return aRet; } void SetSecureURLs( std::vector< OUString >&& urlList ) { // DBG_ASSERT(!officecfg::SecureURL::isReadOnly(), "SvtSecurityOptions_Impl::SetSecureURLs()\nYou tried to write on a readonly value!\n"); // if (officecfg::SecureURL::isReadOnly()) // return; std::vector< OUString > lURLs( std::move(urlList) ); SvtPathOptions aOpt; std::transform(lURLs.begin(), lURLs.end(), lURLs.begin(), [&aOpt](const OUString& rUrl) -> OUString { return aOpt.UseVariable( rUrl ); }); std::shared_ptr xChanges = comphelper::ConfigurationChanges::create(); officecfg::Office::Common::Security::Scripting::SecureURL::set(comphelper::containerToSequence(lURLs), xChanges); xChanges->commit(); } bool isSecureMacroUri( OUString const & uri, OUString const & referer) { switch (INetURLObject(uri).GetProtocol()) { case INetProtocol::Macro: if (uri.startsWithIgnoreAsciiCase("macro:///")) { // Denotes an App-BASIC macro (see SfxMacroLoader::loadMacro), which // is considered safe: return true; } [[fallthrough]]; case INetProtocol::Slot: return referer.equalsIgnoreAsciiCase("private:user") || isTrustedLocationUri(referer); default: return true; } } bool isUntrustedReferer(OUString const & referer) { return IsOptionSet(EOption::BlockUntrustedRefererLinks) && !(referer.isEmpty() || referer.startsWithIgnoreAsciiCase("private:") || isTrustedLocationUri(referer)); } bool isTrustedLocationUri(OUString const & uri) { for (const auto & url : GetSecureURLs()) { if (utl::UCBContentHelper::IsSubPath(url, uri)) { return true; } } return false; } bool isTrustedLocationUriForUpdatingLinks(OUString const & uri) { return GetMacroSecurityLevel() == 0 || uri.isEmpty() || uri.startsWithIgnoreAsciiCase("private:") || isTrustedLocationUri(uri); } sal_Int32 GetMacroSecurityLevel() { return comphelper::IsFuzzing() ? 3 : officecfg::Office::Common::Security::Scripting::MacroSecurityLevel::get(); } void SetMacroSecurityLevel( sal_Int32 _nLevel ) { if (comphelper::IsFuzzing() || officecfg::Office::Common::Security::Scripting::MacroSecurityLevel::isReadOnly()) return; if( _nLevel > 3 || _nLevel < 0 ) _nLevel = 3; std::shared_ptr xChanges = comphelper::ConfigurationChanges::create(); officecfg::Office::Common::Security::Scripting::MacroSecurityLevel::set(_nLevel, xChanges); xChanges->commit(); } bool IsMacroDisabled() { return comphelper::IsFuzzing() || officecfg::Office::Common::Security::Scripting::DisableMacrosExecution::get() || officecfg::Office::Common::Misc::ViewerAppMode::get(); } std::vector< SvtSecurityOptions::Certificate > GetTrustedAuthors() { Reference xHierarchyAccess = utl::ConfigManager::acquireTree(u"Office.Common/Security/Scripting"); const Sequence< OUString > lAuthors = utl::ConfigItem::GetNodeNames( xHierarchyAccess, PROPERTYNAME_MACRO_TRUSTEDAUTHORS, utl::ConfigNameFormat::LocalPath ); sal_Int32 c1 = lAuthors.getLength(); if( !c1 ) return {}; sal_Int32 c2 = c1 * 3; // 3 Properties inside Struct TrustedAuthor Sequence< OUString > lAllAuthors( c2 ); auto plAllAuthors = lAllAuthors.getArray(); sal_Int32 i2 = 0; OUString aSep( u"/"_ustr ); for( const auto& rAuthor : lAuthors ) { plAllAuthors[ i2 ] = PROPERTYNAME_MACRO_TRUSTEDAUTHORS + aSep + rAuthor + aSep + PROPERTYNAME_TRUSTEDAUTHOR_SUBJECTNAME; ++i2; plAllAuthors[ i2 ] = PROPERTYNAME_MACRO_TRUSTEDAUTHORS + aSep + rAuthor + aSep + PROPERTYNAME_TRUSTEDAUTHOR_SERIALNUMBER; ++i2; plAllAuthors[ i2 ] = PROPERTYNAME_MACRO_TRUSTEDAUTHORS + aSep + rAuthor + aSep + PROPERTYNAME_TRUSTEDAUTHOR_RAWDATA; ++i2; } Sequence< Any > lValues = utl::ConfigItem::GetProperties( xHierarchyAccess, lAllAuthors, /*bAllLocales*/false ); if( lValues.getLength() != c2 ) return {}; std::vector< SvtSecurityOptions::Certificate > aTrustedAuthors; SvtSecurityOptions::Certificate aCert; i2 = 0; for( sal_Int32 i1 = 0; i1 < c1; ++i1 ) { lValues[ i2 ] >>= aCert.SubjectName; ++i2; lValues[ i2 ] >>= aCert.SerialNumber; ++i2; lValues[ i2 ] >>= aCert.RawData; ++i2; // Filter out TrustedAuthor entries with empty RawData, which // would cause an unexpected std::bad_alloc in // SecurityEnvironment_NssImpl::createCertificateFromAscii and // have been observed in the wild (fdo#55019): if( !aCert.RawData.isEmpty() ) { aTrustedAuthors.push_back( aCert ); } } return aTrustedAuthors; } void SetTrustedAuthors( const std::vector< Certificate >& rAuthors ) { // DBG_ASSERT(!m_bROTrustedAuthors, "SvtSecurityOptions_Impl::SetTrustedAuthors()\nYou tried to write on a readonly value!\n"); // if( m_bROTrustedAuthors ) // return; Reference xHierarchyAccess = utl::ConfigManager::acquireTree(u"Office.Common/Security/Scripting"); // first, clear existing entries { Reference xCont; xHierarchyAccess->getByHierarchicalName(PROPERTYNAME_MACRO_TRUSTEDAUTHORS) >>= xCont; const Sequence< OUString > aNames = xCont->getElementNames(); Reference xBatch(xHierarchyAccess, UNO_QUERY); for (const OUString& rName : aNames) xCont->removeByName(rName); xBatch->commitChanges(); } sal_Int32 nCnt = rAuthors.size(); for( sal_Int32 i = 0; i < nCnt; ++i ) { OUString aPrefix( PROPERTYNAME_MACRO_TRUSTEDAUTHORS + "/a" + OUString::number(i) + "/"); Sequence< css::beans::PropertyValue > lPropertyValues{ comphelper::makePropertyValue(aPrefix + PROPERTYNAME_TRUSTEDAUTHOR_SUBJECTNAME, rAuthors[i].SubjectName), comphelper::makePropertyValue(aPrefix + PROPERTYNAME_TRUSTEDAUTHOR_SERIALNUMBER, rAuthors[i].SerialNumber), comphelper::makePropertyValue(aPrefix + PROPERTYNAME_TRUSTEDAUTHOR_RAWDATA, rAuthors[i].RawData) }; utl::ConfigItem::SetSetProperties( xHierarchyAccess, PROPERTYNAME_MACRO_TRUSTEDAUTHORS, lPropertyValues ); } } bool IsOptionSet( EOption eOption ) { if (comphelper::IsFuzzing()) return false; bool bSet = false; switch(eOption) { case SvtSecurityOptions::EOption::DocWarnSaveOrSend: bSet = officecfg::Office::Common::Security::Scripting::WarnSaveOrSendDoc::get(); break; case SvtSecurityOptions::EOption::DocWarnSigning: bSet = officecfg::Office::Common::Security::Scripting::WarnSignDoc::get(); break; case SvtSecurityOptions::EOption::DocWarnPrint: bSet = officecfg::Office::Common::Security::Scripting::WarnPrintDoc::get(); break; case SvtSecurityOptions::EOption::DocWarnCreatePdf: bSet = officecfg::Office::Common::Security::Scripting::WarnCreatePDF::get(); break; case SvtSecurityOptions::EOption::DocWarnRemovePersonalInfo: bSet = officecfg::Office::Common::Security::Scripting::RemovePersonalInfoOnSaving::get(); break; case SvtSecurityOptions::EOption::DocWarnKeepRedlineInfo: bSet = officecfg::Office::Common::Security::Scripting::KeepRedlineInfoOnSaving::get(); break; case SvtSecurityOptions::EOption::DocWarnKeepDocUserInfo: bSet = officecfg::Office::Common::Security::Scripting::KeepDocUserInfoOnSaving::get(); break; case SvtSecurityOptions::EOption::DocWarnKeepNoteAuthorDateInfo: bSet = officecfg::Office::Common::Security::Scripting::KeepNoteAuthorDateInfoOnSaving::get(); break; case SvtSecurityOptions::EOption::DocWarnKeepDocVersionInfo: bSet = officecfg::Office::Common::Security::Scripting::KeepDocVersionInfoOnSaving::get(); break; case SvtSecurityOptions::EOption::DocKeepPrinterSettings: bSet = officecfg::Office::Common::Security::Scripting::KeepDocPrinterSettingsOnSaving::get(); break; case SvtSecurityOptions::EOption::DocWarnRecommendPassword: bSet = officecfg::Office::Common::Security::Scripting::RecommendPasswordProtection::get(); break; case SvtSecurityOptions::EOption::CtrlClickHyperlink: bSet = officecfg::Office::Common::Security::Scripting::HyperlinksWithCtrlClick::get(); break; case SvtSecurityOptions::EOption::BlockUntrustedRefererLinks: bSet = officecfg::Office::Common::Security::Scripting::BlockUntrustedRefererLinks::get(); break; case SvtSecurityOptions::EOption::DisableActiveContent: bSet = officecfg::Office::Common::Security::Scripting::DisableActiveContent::get() && officecfg::Office::Common::Security::Scripting::DisableOLEAutomation::get(); break; default: assert(false); } return bSet; } void SetOption( EOption eOption, bool bValue ) { std::shared_ptr xChanges = comphelper::ConfigurationChanges::create(); switch(eOption) { case SvtSecurityOptions::EOption::DocWarnSaveOrSend: officecfg::Office::Common::Security::Scripting::WarnSaveOrSendDoc::set(bValue, xChanges); break; case SvtSecurityOptions::EOption::DocWarnSigning: officecfg::Office::Common::Security::Scripting::WarnSignDoc::set(bValue, xChanges); break; case SvtSecurityOptions::EOption::DocWarnPrint: officecfg::Office::Common::Security::Scripting::WarnPrintDoc::set(bValue, xChanges); break; case SvtSecurityOptions::EOption::DocWarnCreatePdf: officecfg::Office::Common::Security::Scripting::WarnCreatePDF::set(bValue, xChanges); break; case SvtSecurityOptions::EOption::DocWarnRemovePersonalInfo: officecfg::Office::Common::Security::Scripting::RemovePersonalInfoOnSaving::set(bValue, xChanges); break; case SvtSecurityOptions::EOption::DocWarnKeepRedlineInfo: officecfg::Office::Common::Security::Scripting::KeepRedlineInfoOnSaving::set(bValue, xChanges); break; case SvtSecurityOptions::EOption::DocWarnKeepDocUserInfo: officecfg::Office::Common::Security::Scripting::KeepDocUserInfoOnSaving::set(bValue, xChanges); break; case SvtSecurityOptions::EOption::DocWarnKeepNoteAuthorDateInfo: officecfg::Office::Common::Security::Scripting::KeepNoteAuthorDateInfoOnSaving::set(bValue, xChanges); break; case SvtSecurityOptions::EOption::DocWarnKeepDocVersionInfo: officecfg::Office::Common::Security::Scripting::KeepDocVersionInfoOnSaving::set(bValue, xChanges); break; case SvtSecurityOptions::EOption::DocKeepPrinterSettings: officecfg::Office::Common::Security::Scripting::KeepDocPrinterSettingsOnSaving::set(bValue, xChanges); break; case SvtSecurityOptions::EOption::DocWarnRecommendPassword: officecfg::Office::Common::Security::Scripting::RecommendPasswordProtection::set(bValue, xChanges); break; case SvtSecurityOptions::EOption::CtrlClickHyperlink: officecfg::Office::Common::Security::Scripting::HyperlinksWithCtrlClick::set(bValue, xChanges); break; case SvtSecurityOptions::EOption::BlockUntrustedRefererLinks: officecfg::Office::Common::Security::Scripting::BlockUntrustedRefererLinks::set(bValue, xChanges); break; case SvtSecurityOptions::EOption::DisableActiveContent: officecfg::Office::Common::Security::Scripting::DisableActiveContent::set(bValue, xChanges); officecfg::Office::Common::Security::Scripting::DisableOLEAutomation::set(bValue, xChanges); break; default: assert(false); } xChanges->commit(); } } // namespace SvtSecurityOptions // map personal info strings to 1, 2, ... to remove personal info size_t SvtSecurityMapPersonalInfo::GetInfoID( const OUString& sPersonalInfo ) { auto aIter = aInfoIDs.find( sPersonalInfo ); if ( aIter == aInfoIDs.end() ) { size_t nNewID = aInfoIDs.size() + 1; aInfoIDs[sPersonalInfo] = nNewID; return nNewID; } return aIter->second; } /* vim:set shiftwidth=4 softtabstop=4 expandtab: */ alog LibreOffice 核心代码仓库文档基金会
summaryrefslogtreecommitdiff
path: root/shell/source/sessioninstall
AgeCommit message (Expand)Author
2022-09-15tdf#42982 Improved UNO API error reportingMahdi Tizabi
2021-09-24GError::message is UTF-8Stephan Bergmann
2020-12-11Adapt the remaining OUString functions to std string_viewStephan Bergmann
2020-12-11Strength-reduce some OUStringToOString("..."+...)Stephan Bergmann
2020-07-17shell/sessioninstall: create instances with uno constructorsNoel Grandin
2020-06-10tdf#42949 Fix IWYU warnings in shell/Gabor Kelemen
2020-05-26Fix loplugin:simplifypointertobool for libstdc++ std::shared_ptrStephan Bergmann
2020-05-10compact namespace in sal..svgioNoel Grandin
2020-01-31clang-tidy modernize-concat-nested-namespaceNoel Grandin
2019-12-22sal_Char->char in sfx2..slideshowNoel Grandin
2018-10-09Extend loplugin:redundantinline to catch inline functions w/o external linkageStephan Bergmann
2018-04-12Keep strings alive again as necessaryNoel Grandin
2018-04-11new loplugin:unusedvariablemoreNoel Grandin
2018-01-11InstallPrinteDrivers->InstallPrinterDriversCaolán McNamara
2018-01-11[API CHANGE] migrate PackageKit usage to Modify2Caolán McNamara
2017-12-22call g_variant_unref on return valueCaolán McNamara
2017-12-22fix indent vs other functionsCaolán McNamara
2017-12-11loplugin:salcall fix functionsNoel Grandin
2017-11-13Fix typosAndrea Gelmini
2017-10-23loplugin:includeform: shellStephan Bergmann