-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathBrowserGuard.iss
More file actions
209 lines (180 loc) · 7.49 KB
/
Copy pathBrowserGuard.iss
File metadata and controls
209 lines (180 loc) · 7.49 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
;BrowserGuard Setup--
[Setup]
AppName=BrowserGuard
AppVerName=BrowserGuard
VersionInfoVersion=1.0.0.0
AppVersion=1.0.0.0
AppMutex=BrowserGuardSetup
;DefaultDirName=C:\BrowserGuard
DefaultDirName={code:GetProgramFiles}\BrowserGuard
Compression=lzma2
SolidCompression=yes
OutputDir=SetupOutput
OutputBaseFilename=BrowserGuardSetup
AppPublisher=BrowserGuard
WizardImageStretch=no
VersionInfoDescription=BrowserGuardSetup
ArchitecturesAllowed=x64
ArchitecturesInstallIn64BitMode=x64
DefaultGroupName=BrowserGuard
UninstallDisplayIcon={app}\BrowserGuard.exe
[Registry]
Root: HKLM; Subkey: "Software\BrowserGuard"; Flags: uninsdeletekey
Root: HKLM; Subkey: "Software\BrowserGuard"; ValueType: string; ValueName: "Path"; ValueData: "{app}\"
Root: HKLM; Subkey: "Software\BrowserGuard"; ValueType: string; ValueName: "ClientType"; ValueData: ""
Root: HKLM; Subkey: "Software\BrowserGuard"; ValueType: string; ValueName: "Version"; ValueData: "1.0.0.0"
Root: HKLM; Subkey: "Software\BrowserGuard"; ValueType: string; ValueName: "Configfile"; ValueData: "{app}\BrowserGuard.json"
Root: HKLM; Subkey: "Software\BrowserGuard"; ValueType: string; ValueName: "ExtensionExecfile"; ValueData: "{app}\BrowserGuard.exe"
Root: HKLM; Subkey: "Software\WOW6432Node\BrowserGuard"; Flags: uninsdeletekey
Root: HKLM; Subkey: "Software\WOW6432Node\BrowserGuard"; ValueType: string; ValueName: "Path"; ValueData: "{app}\"
Root: HKLM; Subkey: "Software\WOW6432Node\BrowserGuard"; ValueType: string; ValueName: "ClientType"; ValueData: ""
Root: HKLM; Subkey: "Software\WOW6432Node\BrowserGuard"; ValueType: string; ValueName: "Version"; ValueData: "1.0.0.0"
Root: HKLM; Subkey: "Software\WOW6432Node\BrowserGuard"; ValueType: string; ValueName: "Rulefile"; ValueData: "{app}\BrowserGuard.json"
Root: HKLM; Subkey: "Software\WOW6432Node\BrowserGuard"; ValueType: string; ValueName: "ExtensionExecfile"; ValueData: "{app}\BrowserGuard.exe"
;Edge
Root: HKLM; Subkey: "SOFTWARE\Microsoft\Edge\NativeMessagingHosts\com.clear_code.browser_guard"; Flags: uninsdeletekey
Root: HKLM; Subkey: "SOFTWARE\Microsoft\Edge\NativeMessagingHosts\com.clear_code.browser_guard"; ValueType: string; ValueData: "{app}\BrowserGuardHost\edge.json";
[Languages]
Name: jp; MessagesFile: "compiler:Languages\Japanese.isl"
[Files]
;Config
Source: "Resources\BrowserGuard.json"; DestDir: "{app}"; Flags: onlyifdoesntexist
;Host
Source: "BrowserGuard\bin\Release\net8.0\publish\win-x86\*.dll"; DestDir: "{app}\BrowserGuardHost";Flags: ignoreversion;permissions:users-readexec admins-full system-full
Source: "BrowserGuard\bin\Release\net8.0\publish\win-x86\*.exe"; DestDir: "{app}\BrowserGuardHost";Flags: ignoreversion;permissions:users-readexec admins-full system-full
;Native Messaging Host Manifest
Source: "Resources\edge.json"; DestDir: "{app}\BrowserGuardHost";Flags: ignoreversion;permissions:users-readexec admins-full system-full
;Extension
Source: "webextensions\BrowserGuardEdge.crx"; DestDir: "{app}\BrowserGuardExtension";Flags: ignoreversion;permissions:users-readexec admins-full system-full
;Update Manifest
Source: "Resources\manifest.xml"; DestDir: "{app}\BrowserGuardExtension";Flags: ignoreversion;permissions:users-readexec admins-full system-full
[Dirs]
Name: "{app}";Permissions: users-modify
[Run]
Filename: "{sys}\icacls.exe";Parameters: """{app}\BrowserGuard.exe"" /inheritance:r"; Flags: runhidden shellexec
Filename: "{sys}\icacls.exe";Parameters: """{app}\BrowserGuardHost\edge.json"" /inheritance:r"; Flags: runhidden shellexec
[UninstallRun]
[Code]
const
// Determined by the signing key (webextensions\pem\edge.pem).
// Must match the appid in Resources\manifest.xml.
ExtensionId = 'ddniogodiahgpmfkljajobgkaecabnif';
// SOFTWARE\Policies is shared between the 32 and 64 bit registry views.
ForcelistKey = 'SOFTWARE\Policies\Microsoft\Edge\ExtensionInstallForcelist';
function GetProgramFiles(Param: string): string;
begin
if IsWin64 then Result := ExpandConstant('{pf64}')
else Result := ExpandConstant('{pf32}')
end;
procedure TaskKill(FileName: String);
var
ResultCode: Integer;
begin
Exec(ExpandConstant('taskkill.exe'), '/f /im ' + '"' + FileName + '"', '', SW_HIDE,ewWaitUntilTerminated, ResultCode);
end;
function InitializeSetup():Boolean;
begin
TaskKill('msedge.exe');
TaskKill('BrowserGuard.exe');
Result := True;
end;
// Inno Setup does not expand constants inside file contents, so the
// {InstallFolder} placeholder in manifest.xml is replaced after installing.
// The result is a file URL, which is what the browser expects for update_url.
function GetExtensionFolderUrl(): String;
var
Path: String;
begin
Path := ExpandConstant('{app}\BrowserGuardExtension');
StringChangeEx(Path, '\', '/', True);
StringChangeEx(Path, ' ', '%20', True);
Result := 'file:///' + Path;
end;
procedure ExpandUpdateManifest();
var
FilePath: String;
Lines: TArrayOfString;
Url: String;
i: Integer;
begin
FilePath := ExpandConstant('{app}\BrowserGuardExtension\manifest.xml');
if not LoadStringsFromFile(FilePath, Lines) then
begin
Log('Cannot read update manifest: ' + FilePath);
Exit;
end;
Url := GetExtensionFolderUrl();
for i := 0 to GetArrayLength(Lines) - 1 do
StringChangeEx(Lines[i], '{InstallFolder}', Url, True);
if not SaveStringsToFile(FilePath, Lines, False) then
Log('Cannot write update manifest: ' + FilePath);
end;
// Force installing the extension from the locally hosted update manifest.
// Entries are named with sequential numbers, so an unused slot is picked,
// and an entry left by a previous install is reused instead of duplicated.
function FindOwnForcelistValueName(var ValueName: String): Boolean;
var
Names: TArrayOfString;
Data: String;
i: Integer;
begin
Result := False;
if not RegGetValueNames(HKEY_LOCAL_MACHINE, ForcelistKey, Names) then
Exit;
for i := 0 to GetArrayLength(Names) - 1 do
begin
if RegQueryStringValue(HKEY_LOCAL_MACHINE, ForcelistKey, Names[i], Data) then
begin
if Pos(ExtensionId + ';', Data) = 1 then
begin
ValueName := Names[i];
Result := True;
Exit;
end;
end;
end;
end;
procedure RegisterForcelist();
var
ValueName, Entry: String;
Slot: Integer;
begin
Entry := ExtensionId + ';' + GetExtensionFolderUrl() + '/manifest.xml';
if not FindOwnForcelistValueName(ValueName) then
begin
Slot := 1;
while RegValueExists(HKEY_LOCAL_MACHINE, ForcelistKey, IntToStr(Slot)) do
Slot := Slot + 1;
ValueName := IntToStr(Slot);
end;
if not RegWriteStringValue(HKEY_LOCAL_MACHINE, ForcelistKey, ValueName, Entry) then
Log('Cannot write policy value: ' + ForcelistKey + '\' + ValueName);
end;
// Only the entry belonging to this extension is removed, so policies set for
// other extensions are left untouched.
procedure UnregisterForcelist();
var
ValueName: String;
begin
while FindOwnForcelistValueName(ValueName) do
begin
if not RegDeleteValue(HKEY_LOCAL_MACHINE, ForcelistKey, ValueName) then
begin
Log('Cannot delete policy value: ' + ForcelistKey + '\' + ValueName);
Exit;
end;
end;
end;
procedure CurStepChanged(CurStep: TSetupStep);
begin
if CurStep = ssPostInstall then
begin
ExpandUpdateManifest();
RegisterForcelist();
end;
end;
procedure CurUninstallStepChanged(CurUninstallStep: TUninstallStep);
begin
if CurUninstallStep = usUninstall then
UnregisterForcelist();
end;