xdg-main.cpp

Go to the documentation of this file.

/*
 * BastionGuard™
 * Copyright (C) 2025–2026 Calogero Scarnà
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation, version 3.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 *
 * BastionGuard™ is a trademark of Calogero Scarnà.
 * The BastionGuard™ name and branding are not licensed under the GPL.
 */
 
 
#include "xdg-open.hpp"
#include "SecureBrowser.hpp"
#include <include/cef_app.h>
#include <iostream>
#include <cstdlib>
#include <cstring>
#include <sys/wait.h>
#include <unistd.h>
#include <glibmm/i18n.h>
 
int main(int argc, char** argv) {
    CefMainArgs cef_args(argc, argv);
    int rc = CefExecuteProcess(cef_args, nullptr, nullptr);
    if (rc >= 0)
        return rc;
 
    if (argc < 2) {
        std::cerr << _("Usage: BastionGuard-bankopener <url>\n");
        return 2;
    }
 
    std::string url = argv[1];
    std::cout << _("[BankOpener] 🔍 Verifico dominio: ") << url << std::endl;
 
    const char* wayland = std::getenv("WAYLAND_DISPLAY");
    const char* x11 = std::getenv("DISPLAY");
 
    if (wayland && *wayland) {
        std::cout << _("[BankOpener] 🖥️  Sessione Wayland rilevata → uso backend Wayland per CEF.\n");
        setenv("GDK_BACKEND", "wayland", 1);
        setenv("OZONE_PLATFORM", "wayland", 1);
        // opzionale: rimuovi forcing software se la GPU è stabile
        // unsetenv("LIBGL_ALWAYS_SOFTWARE");
    }
    else if (x11 && *x11) {
        std::cout << _("[BankOpener] 🖥️  Sessione X11 rilevata → uso backend X11 per CEF.\n");
        setenv("GDK_BACKEND", "x11", 1);
        setenv("OZONE_PLATFORM", "x11", 1);
    }
    else {
        std::cout << _("[BankOpener] ⚠️  Nessuna sessione grafica rilevata → fallback X11 software.\n");
        setenv("GDK_BACKEND", "x11", 1);
        setenv("OZONE_PLATFORM", "x11", 1);
        setenv("LIBGL_ALWAYS_SOFTWARE", "1", 1);
    }
 
    setenv("LIBGL_ALWAYS_SOFTWARE", "1", 1);
 
    if (BankOpener::open_if_trusted(url)) {
        return 0;
    }
 
    // ANTI-LOOP CRITICO (vedi nota in BastionGuard-secure.cpp).
    // Il browser di sistema usa il proxy MITM di BastionGuard: aprire qui un
    // dominio bank/secure lo farebbe re-intercettare dal proxy, che
    // rilancerebbe BastionGuard-bankopener → xdg-open → loop infinito
    // (migliaia di finestre). Se siamo già dentro la catena opener, non
    // riapriamo; e comunque neutralizziamo il proxy per il processo figlio.
    if (std::getenv("BG_OPENER_DEPTH")) {
        std::cerr << _("[BankOpener] ⛔ Anti-loop: apertura già in corso, non rilancio: ")
                  << url << std::endl;
        return 0;
    }
 
    std::cout << _("[BankOpener] 🌍 Apertura browser di sistema: ") << url << std::endl;
 
    const pid_t pid = ::fork();
    if (pid < 0) {
        std::cerr << _("[BankOpener] ❌ Impossibile avviare il browser di sistema.\n");
        return 1;
    }
 
    if (pid == 0) {
        // Imposta l'ambiente del solo processo figlio senza passare da una shell.
        ::setenv("BG_OPENER_DEPTH", "1", 1);
        ::setenv("no_proxy", "*", 1);
        ::setenv("NO_PROXY", "*", 1);
        static const char* proxy_vars[] = {
            "http_proxy", "https_proxy", "HTTP_PROXY", "HTTPS_PROXY", "all_proxy", "ALL_PROXY"
        };
        for (const char* name : proxy_vars)
            ::unsetenv(name);
 
        const char* gio_argv[] = {"gio", "open", url.c_str(), nullptr};
        ::execvp("gio", const_cast<char* const*>(gio_argv));
 
        const char* xdg_argv[] = {"xdg-open", url.c_str(), nullptr};
        ::execvp("xdg-open", const_cast<char* const*>(xdg_argv));
        _exit(127);
    }
 
    int status = 0;
    if (::waitpid(pid, &status, 0) < 0) {
        std::cerr << _("[BankOpener] ⚠️ waitpid fallita per browser di sistema.\n");
        return 1;
    }
    if (WIFEXITED(status))
        return WEXITSTATUS(status);
    return 1;
}