Merge pull request #1 from FlashpointProject/dev

Dev

Author: tomysshadow

FlashpointSecurePlayer/CustomSecurityManager.cs

@@ -0,0 +1,136 @@
+using System;
+using System.Collections.Generic;
+using System.ComponentModel;
+using System.Linq;
+using System.Runtime.InteropServices;
+using System.Runtime.InteropServices.ComTypes;
+using System.Text;
+using System.Threading.Tasks;
+using System.Windows.Forms;
+
+using static FlashpointSecurePlayer.Shared;
+using static FlashpointSecurePlayer.Shared.Exceptions;
+using static FlashpointSecurePlayer.InternetInterfaces;
+
+namespace FlashpointSecurePlayer {
+    public class CustomSecurityManager : InternetInterfaces.IServiceProvider, InternetInterfaces.IInternetSecurityManager {
+        public CustomSecurityManager(WebBrowser _WebBrowser) {
+            InternetInterfaces.IServiceProvider webBrowserServiceProviderInterface = _WebBrowser.ActiveXInstance as InternetInterfaces.IServiceProvider;
+            IntPtr profferServiceInterfacePointer = IntPtr.Zero;
+
+            try {
+                int err = webBrowserServiceProviderInterface.QueryService(ref InternetInterfaces.SID_SProfferService, ref InternetInterfaces.IID_IProfferService, out profferServiceInterfacePointer);
+
+                if (err != S_OK) {
+                    throw new Win32Exception();
+                }
+
+                InternetInterfaces.IProfferService profferServiceInterface = Marshal.GetObjectForIUnknown(profferServiceInterfacePointer) as InternetInterfaces.IProfferService;
+
+                if (profferServiceInterface == null) {
+                    throw new Win32Exception();
+                }
+
+                err = profferServiceInterface.ProfferService(ref InternetInterfaces.IID_IInternetSecurityManager, this, out int cookie);
+
+                if (err != S_OK) {
+                    throw new Win32Exception();
+                }
+            } catch (SEHException) {
+                throw new Win32Exception();
+            } catch (ExternalException) {
+                throw new Win32Exception();
+            }
+        }
+
+        int InternetInterfaces.IServiceProvider.QueryService(ref Guid guidService, ref Guid riid, out IntPtr ppvObject) {
+            ppvObject = IntPtr.Zero;
+
+            if (guidService.CompareTo(InternetInterfaces.IID_IInternetSecurityManager) == 0) {
+                return Marshal.QueryInterface(Marshal.GetIUnknownForObject(this), ref riid, out ppvObject);
+            }
+            return E_NOINTERFACE;
+        }
+
+        int InternetInterfaces.IInternetSecurityManager.SetSecuritySite(IntPtr pSite) {
+            return INET_E_DEFAULT_ACTION;
+        }
+
+        int InternetInterfaces.IInternetSecurityManager.GetSecuritySite(out IntPtr pSite) {
+            pSite = IntPtr.Zero;
+            return INET_E_DEFAULT_ACTION;
+        }
+
+        int InternetInterfaces.IInternetSecurityManager.MapUrlToZone([MarshalAs(UnmanagedType.LPWStr)] string pwszUrl, ref uint pdwZone, uint dwFlags) {
+            pdwZone = 0;
+            return INET_E_DEFAULT_ACTION;
+        }
+
+        int InternetInterfaces.IInternetSecurityManager.GetSecurityId([MarshalAs(UnmanagedType.LPWStr)] string pwszUrl, [MarshalAs(UnmanagedType.LPArray)] byte[] pbSecurityId, ref uint pcbSecurityId, uint dwReserved) {
+            return INET_E_DEFAULT_ACTION;
+        }
+
+        int InternetInterfaces.IInternetSecurityManager.ProcessUrlAction([MarshalAs(UnmanagedType.LPWStr)] string pwszUrl, uint dwAction, out uint pPolicy, uint cbPolicy, byte pContext, uint cbContext, uint dwFlags, uint dwReserved) {
+            pPolicy = URLPOLICY_DISALLOW;
+
+            if (dwAction == URLACTION_ACTIVEX_TREATASUNTRUSTED || // trust ActiveX Controls always
+                dwAction == URLACTION_HTML_MIXED_CONTENT || // block HTTPS content on HTTP websites for Flashpoint Proxy
+                dwAction == URLACTION_CLIENT_CERT_PROMPT || // don't allow invalid certificates
+                dwAction == URLACTION_AUTOMATIC_ACTIVEX_UI || // do not display the install dialog for ActiveX Controls
+                dwAction == URLACTION_ALLOW_RESTRICTEDPROTOCOLS || // use same settings for every protocol
+                dwAction == URLACTION_ALLOW_APEVALUATION || // the phishing filter is not applicable to this application
+                dwAction == URLACTION_LOWRIGHTS || // turn off Protected Mode
+                dwAction == URLACTION_ALLOW_ACTIVEX_FILTERING) { // don't allow ActiveX filtering
+                return S_OK;
+            }
+
+            pPolicy = URLPOLICY_JAVA_LOW;
+
+            if (dwAction == URLACTION_JAVA_PERMISSIONS) { // allow Java applets to be as terrible as they need to be to function
+                return S_OK;
+            }
+
+            pPolicy = URLPOLICY_ALLOW;
+
+            if ((dwAction >= URLACTION_DOWNLOAD_MIN && dwAction <= URLACTION_DOWNLOAD_MAX) || // allow downloading ActiveX Controls, scripts, etc.
+                (dwAction >= URLACTION_ACTIVEX_MIN && dwAction <= URLACTION_ACTIVEX_MAX) || // allow ActiveX Controls
+                (dwAction >= URLACTION_SCRIPT_MIN && dwAction <= URLACTION_SCRIPT_MAX) || // allow scripts
+                (dwAction >= URLACTION_HTML_MIN && dwAction <= URLACTION_HTML_MAX) || // allow forms, fonts, meta elements, etc.
+                (dwAction >= URLACTION_JAVA_MIN && dwAction <= URLACTION_JAVA_MAX) || // allow Java applets
+                dwAction == URLACTION_COOKIES || // allow all cookies, which are not in fact dangerous and are in fact harmless plaintext files that don't have any code in them
+                dwAction == URLACTION_COOKIES_SESSION ||
+                dwAction == URLACTION_COOKIES_THIRD_PARTY ||
+                dwAction == URLACTION_COOKIES_SESSION_THIRD_PARTY ||
+                dwAction == URLACTION_COOKIES_ENABLED ||
+                dwAction == URLACTION_BEHAVIOR_RUN || // allow running behaviours
+                dwAction == URLACTION_MANAGED_SIGNED || // run components regardless of if they're signed or not
+                dwAction == URLACTION_MANAGED_UNSIGNED ||
+                dwAction == URLACTION_DOTNET_USERCONTROLS || // allow .NET user controls
+                dwAction == URLACTION_FEATURE_DATA_BINDING || // allow databinding
+                dwAction == URLACTION_FEATURE_CROSSDOMAIN_FOCUS_CHANGE || // allow crossdomain
+                dwAction == URLACTION_ALLOW_AUDIO_VIDEO || // allow audio and video always
+                dwAction == URLACTION_ALLOW_AUDIO_VIDEO_PLUGINS ||
+                dwAction == URLACTION_ALLOW_CROSSDOMAIN_DROP_WITHIN_WINDOW || // allow crossdomain, again
+                dwAction == URLACTION_ALLOW_CROSSDOMAIN_DROP_ACROSS_WINDOWS ||
+                dwAction == URLACTION_ALLOW_CROSSDOMAIN_APPCACHE_MANIFEST ||
+                dwAction == URLACTION_ALLOW_RENDER_LEGACY_DXTFILTERS) { // allow DX transforms
+                return S_OK;
+            }
+            // default zone setting for any other action
+            return INET_E_DEFAULT_ACTION;
+        }
+
+        int InternetInterfaces.IInternetSecurityManager.QueryCustomPolicy([MarshalAs(UnmanagedType.LPWStr)] string pwszUrl, ref Guid guidKey, ref byte ppPolicy, ref uint pcbPolicy, ref byte pContext, uint cbContext, uint dwReserved) {
+            return INET_E_DEFAULT_ACTION;
+        }
+
+        int InternetInterfaces.IInternetSecurityManager.SetZoneMapping(uint dwZone, [MarshalAs(UnmanagedType.LPWStr)] string lpszPattern, uint dwFlags) {
+            return INET_E_DEFAULT_ACTION;
+        }
+
+        int InternetInterfaces.IInternetSecurityManager.GetZoneMappings(uint dwZone, out IEnumString ppenumString, uint dwFlags) {
+            ppenumString = null;
+            return INET_E_DEFAULT_ACTION;
+        }
+    }
+}