preload.js

/*
 * Copyright (C) 2017-2018 The Particl developers
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License along
 * with this program; if not, write to the Free Software Foundation, Inc.,
 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
 */

// This file is loaded whenever a javascript context is created. It runs in a
// private scope that can access a subset of electron renderer APIs. We must be
// careful to not leak any objects into the global scope!
const { ipcRenderer, remote } = require('electron');

const flatten = (obj) => Object.keys(obj)
  .reduce((acc, key) => {
    const val = obj[key];
    return acc.concat(typeof val === 'object' ? flatten(val) : val);
  }, []);

/**
 * SafeIpcRenderer
 *
 * This class wraps electron's ipcRenderer an prevents
 * invocations to channels passed to the constructor. The instance methods
 * are all created in the constructor to ensure that the protect method
 * and validEvents array cannot be overridden.
 *
 */
class SafeIpcRenderer {
  constructor (events) {
    const validEvents = flatten(events);
    const protect = (fn) => {
      return (channel, ...args) => {

        let validChannel = channel;
        if (channel.indexOf(':') !== -1) {
          if (Number.isInteger(+channel.substr(channel.indexOf(':') + 1))) {
            validChannel = channel.substr(0, channel.indexOf(':'));
          }
        }

        if (!validEvents.includes(validChannel)) {
          throw new Error(`Blocked access to unknown channel
            ${channel} ${validChannel} from the renderer`);
        }
        return fn.apply(ipcRenderer, [channel].concat(args));
      };
    };

    this.on                 = protect(ipcRenderer.on);
    this.once               = protect(ipcRenderer.once);
    this.send               = protect(ipcRenderer.send);
    this.sendSync           = protect(ipcRenderer.sendSync);
    this.sendToHost         = protect(ipcRenderer.sendToHost);
    this.removeListener     = protect(ipcRenderer.removeListener);
    this.removeAllListeners = protect(ipcRenderer.removeAllListeners);
    this.listenerCount      = protect(ipcRenderer.listenerCount);
  }
}

window.ipc = new SafeIpcRenderer([
  'front-choosewallet',
  'front-walletready',

  'daemon',

  'zmq',
  'rpc-channel',
  'hl-rpc-channel',

  'rx-ipc-check-reply',
  'rx-ipc-check-reply:rpc-channel',
  'rx-ipc-check-listener'
]);

window.remote = remote;
window.electron = true;