setupWinListeners.js

// Copyright 2015-2019 Parity Technologies (UK) Ltd.
// This file is part of Parity.
//
// SPDX-License-Identifier: BSD-3-Clause

import debounce from 'lodash/debounce';

import { SECURITY_OPTIONS } from '../options/config';
import Pino from '../utils/pino';

const { TRUSTED_HOSTS } = SECURITY_OPTIONS.fetherNetwork;
const trustedHostsAll = Object.values(TRUSTED_HOSTS).flat();
const pino = Pino();

function setupWinListeners (fetherApp) {
  const { onWindowClose, processSaveWinPosition, win } = fetherApp;

  /**
   * Insecure TLS Validation - verify the application does not explicitly opt-out of TLS validation
   *
   * References:
   * - https://doyensec.com/resources/us-17-Carettoni-Electronegativity-A-Study-Of-Electron-Security-wp.pdf
   * - https://electronjs.org/docs/api/session#sessetcertificateverifyprocproc
   */
  win.webContents.session.setCertificateVerifyProc((request, callback) => {
    const { hostname, certificate, verificationResult, errorCode } = request; // eslint-disable-line

    pino.debug(
      'Processing server certificate verification request for the session in setCertificateVerifyProc with hostname: ',
      hostname
    );

    if (errorCode) {
      pino.error(
        'Error processing server certificate verification request for the session in setCertificateVerifyProc: ',
        errorCode
      );

      // Failure accepting certificate due to errorCode
      callback(-2); // eslint-disable-line
    } else if (!trustedHostsAll.includes(hostname)) {
      pino.info(
        'Failure accepting server certification due to its hostname being an untrusted host in setCertificateVerifyProc: ',
        hostname
      );

      // Failure accepting server certificate due to its source hostname being untrusted
      callback(-2); // eslint-disable-line
    } else if (!verificationResult === 'net::OK') {
      pino.info(
        'Failure accepting server certificate due to it failing Chromium verification: ',
        hostname,
        verificationResult
      );

      // Failure accepting server certificate due to it failing Chromium verification
      callback(-2); // eslint-disable-line
    } else {
      pino.info(
        'Fallback to using the verification result from Chromium: ',
        hostname,
        verificationResult
      );

      // Fallback to using the verification result from Chromium
      callback(-3); // eslint-disable-line

      // // Success and accept the certifcate, disable Certificate Transparency verification
      // callback(0); // eslint-disable-line
    }
  });

  // Windows and Linux (unchecked on others)
  win.on('move', () => {
    /**
     * On Linux using this with debouncing is the closest equivalent
     * to using 'moved' (not supported on Linux) with debouncing
     */
    debounce(() => {
      processSaveWinPosition(fetherApp);
    }, 1000);
  });

  // macOS (not Windows or Linux)
  win.on('moved', () => {
    /**
     * On macOS save the position in the 'moved' event since if
     * we run it just in 'close' instead, then if the Fether app
     * crashes after they've moved the Fether window then it won't run
     * 'close' and it won't save the window position.
     *
     * On Windows we use the equivalent WM_EXITSIZEMOVE that detects
     * the equivalent of 'moved'
     *
     * On Linux the closest equivalent to achieving 'moved' is debouncing
     * on the 'move' event. It also works in 'close' even when app crashes
     */
    pino.info('Detected moved event');
  });

  // macOS and Linux and Windows
  win.on('resize', () => {
    pino.info('Detected resize event');
  });

  win.on('blur', () => {
    fetherApp.emit('blur-window');
  });

  win.on('close', () => {
    onWindowClose(fetherApp);
  });

  win.on('closed', () => {
    fetherApp.win = null;

    fetherApp.emit('after-closed-window');
  });

  win.on('minimize', () => {
    fetherApp.emit('minimize-window');
  });
}

export default setupWinListeners;