/********************************************************************************
 * Copyright (C) 2021 Ericsson and others.
 *
 * This program and the accompanying materials are made available under the
 * terms of the Eclipse Public License v. 2.0 which is available at
 * http://www.eclipse.org/legal/epl-2.0.
 *
 * This Source Code may also be made available under the following Secondary
 * Licenses when the conditions for such availability set forth in the Eclipse
 * Public License v. 2.0 are satisfied: GNU General Public License, version 2
 * with the GNU Classpath Exception which is available at
 * https://www.gnu.org/software/classpath/license.html.
 *
 * SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
 ********************************************************************************/ import { MessageService } from '@theia/core' ; import { Dialog , FrontendApplicationContribution } from '@theia/core/lib/browser' ; import { FrontendApplicationConfigProvider } from '@theia/core/lib/browser/frontend-application-config-provider' ; import { nls } from '@theia/core/lib/common/nls' ; import { WindowService } from '@theia/core/lib/browser/window/window-service' ; import { inject , injectable } from '@theia/core/shared/inversify' ; import { MiniBrowserEndpoint } from '../common/mini-browser-endpoint' ; import { MiniBrowserEnvironment } from './environment/mini-browser-environment' ; @ injectable ( ) export class MiniBrowserFrontendSecurityWarnings implements FrontendApplicationContribution { @ inject ( WindowService ) protected windowService : WindowService ; @ inject ( MessageService ) protected messageService : MessageService ; @ inject ( MiniBrowserEnvironment ) protected miniBrowserEnvironment : MiniBrowserEnvironment ; initialize ( ) { this . checkHostPattern ( ) ; } protected async checkHostPattern ( ) { if ( FrontendApplicationConfigProvider . get ( ) [ 'warnOnPotentiallyInsecureHostPattern' ] === false ) { return ; } const hostPattern = await this . miniBrowserEnvironment . hostPatternPromise ; if ( hostPattern !== MiniBrowserEndpoint . HOST_PATTERN_DEFAULT ) { const goToReadme = nls . localize ( 'theia/webview/goToReadme' , 'Go To README' ) ; const message = nls . localize ( 'theia/webview/messageWarning' , '\
            The {0} endpoint\'s host pattern has been changed to `{1}`; changing the pattern can lead to security vulnerabilities. \
            See `{2}` for more information.' , 'mini-browser' , hostPattern , '@theia/mini-browser/README.md' ) ; this . messageService . warn ( message , Dialog . OK , goToReadme ) . then ( action => { if ( action === goToReadme ) { this . windowService . openNewWindow ( 'https://www.npmjs.com/package/@theia/mini-browser' , { external : true } ) ; } } ) ; } } }