brave-core/browser/brave_content_browser_client.cc

/* Copyright (c) 2019 The Brave Authors. All rights reserved.
 * This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this file,
 * You can obtain one at http://mozilla.org/MPL/2.0/. */

#include "brave/browser/brave_content_browser_client.h"

#include <algorithm>
#include <optional>
#include <string>
#include <utility>
#include <vector>

#include "base/check.h"
#include "base/check_op.h"
#include "base/command_line.h"
#include "base/feature_list.h"
#include "base/functional/bind.h"
#include "base/memory/scoped_refptr.h"
#include "base/strings/strcat.h"
#include "base/strings/string_number_conversions.h"
#include "base/system/sys_info.h"
#include "brave/browser/brave_account/brave_account_navigation_throttle.h"
#include "brave/browser/brave_browser_features.h"
#include "brave/browser/brave_browser_main_extra_parts.h"
#include "brave/browser/brave_browser_process.h"
#include "brave/browser/brave_search/backup_results_navigation_throttle.h"
#include "brave/browser/brave_search/backup_results_service_factory.h"
#include "brave/browser/brave_shields/brave_farbling_service_factory.h"
#include "brave/browser/brave_shields/brave_shields_settings_service_factory.h"
#include "brave/browser/brave_shields/brave_shields_web_contents_observer.h"
#include "brave/browser/cosmetic_filters/cosmetic_filters_tab_helper.h"
#include "brave/browser/debounce/debounce_service_factory.h"
#include "brave/browser/ephemeral_storage/ephemeral_storage_service_factory.h"
#include "brave/browser/ephemeral_storage/ephemeral_storage_tab_helper.h"
#include "brave/browser/net/brave_proxying_url_loader_factory.h"
#include "brave/browser/net/brave_proxying_web_socket.h"
#include "brave/browser/net/features.h"
#include "brave/browser/new_tab/new_tab_shows_navigation_throttle.h"
#include "brave/browser/profiles/brave_renderer_updater.h"
#include "brave/browser/profiles/brave_renderer_updater_factory.h"
#include "brave/browser/skus/skus_service_factory.h"
#include "brave/browser/ui/brave_ui_features.h"
#include "brave/browser/ui/webui/local_ai/local_ai_ui.h"
#include "brave/browser/ui/webui/skus_internals_ui.h"
#include "brave/browser/updater/buildflags.h"
#include "brave/browser/url_sanitizer/url_sanitizer_service_factory.h"
#include "brave/components/ai_chat/core/common/buildflags/buildflags.h"
#include "brave/components/body_sniffer/body_sniffer_throttle.h"
#include "brave/components/brave_account/features.h"
#include "brave/components/brave_account/mojom/brave_account.mojom.h"
#include "brave/components/brave_ads/buildflags/buildflags.h"
#include "brave/components/brave_education/buildflags.h"
#include "brave/components/brave_news/common/buildflags/buildflags.h"
#include "brave/components/brave_origin/buildflags/buildflags.h"
#include "brave/components/brave_origin/mojom/brave_origin_settings.mojom.h"
#include "brave/components/brave_rewards/core/buildflags/buildflags.h"
#include "brave/components/brave_search/browser/backup_results_service.h"
#include "brave/components/brave_search/browser/brave_search_default_host.h"
#include "brave/components/brave_search/browser/brave_search_default_host_private.h"
#include "brave/components/brave_search/browser/brave_search_fallback_host.h"
#include "brave/components/brave_search/common/brave_search_default.mojom.h"
#include "brave/components/brave_search/common/brave_search_fallback.mojom.h"
#include "brave/components/brave_search/common/brave_search_utils.h"
#include "brave/components/brave_shields/content/browser/ad_block_engine_wrapper.h"
#include "brave/components/brave_shields/content/browser/ad_block_service.h"
#include "brave/components/brave_shields/content/browser/brave_farbling_service.h"
#include "brave/components/brave_shields/content/browser/brave_shields_util.h"
#include "brave/components/brave_shields/content/browser/domain_block_navigation_throttle.h"
#include "brave/components/brave_shields/core/browser/brave_shields_settings_service.h"
#include "brave/components/brave_shields/core/common/brave_shield_constants.h"
#include "brave/components/brave_shields/core/common/features.h"
#include "brave/components/brave_shields/core/common/shields_settings.mojom.h"
#include "brave/components/brave_vpn/common/buildflags/buildflags.h"
#include "brave/components/brave_wallet/common/buildflags/buildflags.h"
#include "brave/components/constants/pref_names.h"
#include "brave/components/constants/webui_url_constants.h"
#include "brave/components/containers/buildflags/buildflags.h"
#include "brave/components/cosmetic_filters/browser/cosmetic_filters_resources.h"
#include "brave/components/cosmetic_filters/common/cosmetic_filters.mojom.h"
#include "brave/components/de_amp/browser/de_amp_body_handler.h"
#include "brave/components/debounce/content/browser/debounce_navigation_throttle.h"
#include "brave/components/email_aliases/buildflags/buildflags.h"
#include "brave/components/global_privacy_control/global_privacy_control_utils.h"
#include "brave/components/google_sign_in_permission/google_sign_in_permission_throttle.h"
#include "brave/components/google_sign_in_permission/google_sign_in_permission_util.h"
#include "brave/components/local_ai/core/local_ai.mojom.h"
#include "brave/components/ntp_background_images/browser/mojom/ntp_background_images.mojom.h"
#include "brave/components/password_strength_meter/password_strength_meter.mojom.h"
#include "brave/components/playlist/core/common/buildflags/buildflags.h"
#include "brave/components/request_otr/common/buildflags/buildflags.h"
#include "brave/components/skus/common/features.h"
#include "brave/components/skus/common/skus_internals.mojom.h"
#include "brave/components/skus/common/skus_sdk.mojom.h"
#include "brave/components/skus/common/skus_utils.h"
#include "brave/components/speedreader/common/buildflags/buildflags.h"
#include "brave/components/tor/buildflags/buildflags.h"
#include "brave/components/translate/core/common/brave_translate_switches.h"
#include "brave/components/url_sanitizer/core/browser/url_sanitizer_service.h"
#include "brave/grit/brave_generated_resources.h"
#include "brave/third_party/blink/renderer/brave_farbling_constants.h"
#include "build/build_config.h"
#include "chrome/browser/browser_process.h"
#include "chrome/browser/chrome_browser_interface_binders.h"
#include "chrome/browser/chrome_browser_main.h"
#include "chrome/browser/chrome_content_browser_client.h"
#include "chrome/browser/content_settings/cookie_settings_factory.h"
#include "chrome/browser/content_settings/host_content_settings_map_factory.h"
#include "chrome/browser/profiles/profile.h"
#include "chrome/browser/profiles/profile_io_data.h"
#include "chrome/browser/search_engines/template_url_service_factory.h"
#include "chrome/common/url_constants.h"
#include "chrome/grit/branded_strings.h"
#include "components/content_settings/browser/page_specific_content_settings.h"
#include "components/content_settings/core/browser/host_content_settings_map.h"
#include "components/embedder_support/switches.h"
#include "components/history_embeddings/core/history_embeddings_features.h"
#include "components/prefs/pref_service.h"
#include "components/services/heap_profiling/public/mojom/heap_profiling_client.mojom.h"
#include "components/user_prefs/user_prefs.h"
#include "components/version_info/version_info.h"
#include "content/public/browser/browser_context.h"
#include "content/public/browser/browser_task_traits.h"
#include "content/public/browser/browser_thread.h"
#include "content/public/browser/browser_url_handler.h"
#include "content/public/browser/navigation_handle.h"
#include "content/public/browser/navigation_throttle_registry.h"
#include "content/public/browser/render_frame_host.h"
#include "content/public/browser/render_process_host.h"
#include "content/public/browser/site_instance.h"
#include "content/public/browser/storage_partition.h"
#include "content/public/browser/weak_document_ptr.h"
#include "content/public/browser/web_ui_browser_interface_broker_registry.h"
#include "content/public/browser/web_ui_controller_interface_binder.h"
#include "content/public/common/content_client.h"
#include "content/public/common/content_switches.h"
#include "content/public/common/url_constants.h"
#include "extensions/buildflags/buildflags.h"
#include "mojo/public/cpp/bindings/pending_receiver.h"
#include "mojo/public/cpp/bindings/self_owned_receiver.h"
#include "net/base/registry_controlled_domains/registry_controlled_domain.h"
#include "net/cookies/site_for_cookies.h"
#include "services/service_manager/public/cpp/binder_registry.h"
#include "third_party/blink/public/common/associated_interfaces/associated_interface_registry.h"
#include "third_party/blink/public/common/features.h"
#include "third_party/blink/public/common/loader/url_loader_throttle.h"
#include "third_party/blink/public/common/switches.h"
#include "third_party/blink/public/mojom/webpreferences/web_preferences.mojom.h"
#include "third_party/widevine/cdm/buildflags.h"
#include "ui/base/l10n/l10n_util.h"

#if !BUILDFLAG(IS_ANDROID)
#include "brave/browser/hid/brave_hid_delegate.h"
#include "brave/browser/ui/geolocation/brave_geolocation_permission_tab_helper.h"
#include "brave/browser/ui/webui/brave_new_tab_page_refresh/brave_new_tab_page.mojom.h"
#include "brave/browser/ui/webui/brave_new_tab_page_refresh/brave_new_tab_page_ui.h"
#include "brave/browser/ui/webui/brave_settings_ui.h"
#include "brave/browser/ui/webui/brave_shields/shields_panel_ui.h"
#include "brave/browser/ui/webui/new_tab_page/brave_new_tab_ui.h"
#include "brave/browser/ui/webui/private_new_tab_page/brave_private_new_tab_ui.h"
#include "brave/components/brave_new_tab_ui/brave_new_tab_page.mojom.h"
#include "brave/components/brave_private_new_tab_ui/common/brave_private_new_tab.mojom.h"
#endif  // !BUILDFLAG(IS_ANDROID)

#if BUILDFLAG(ENABLE_BRAVE_ADS)
#include "brave/browser/ui/webui/ads_internals/ads_internals_ui.h"
#include "brave/components/services/bat_ads/public/interfaces/bat_ads.mojom.h"
#endif

#if BUILDFLAG(ENABLE_BRAVE_REWARDS)
#include "brave/browser/ui/webui/brave_rewards/rewards_page_ui.h"
#include "brave/components/brave_rewards/content/rewards_protocol_navigation_throttle.h"
#if !BUILDFLAG(IS_ANDROID)
#include "brave/browser/ui/webui/brave_rewards/rewards_page_top_ui.h"
#endif  // !BUILDFLAG(IS_ANDROID)
#endif  // !BUILDFLAG(ENABLE_BRAVE_REWARDS)

#if BUILDFLAG(ENABLE_BRAVE_WALLET)
#include "brave/browser/brave_wallet/brave_wallet_context_utils.h"
#include "brave/browser/brave_wallet/brave_wallet_provider_delegate_impl.h"
#include "brave/browser/brave_wallet/brave_wallet_service_factory.h"
#include "brave/browser/brave_wallet/brave_wallet_tab_helper.h"
#include "brave/components/brave_wallet/browser/brave_wallet_p3a_private.h"
#include "brave/components/brave_wallet/browser/brave_wallet_service.h"
#include "brave/components/brave_wallet/browser/brave_wallet_utils.h"
#include "brave/components/brave_wallet/common/brave_wallet.mojom.h"
#include "brave/components/brave_wallet/common/common_utils.h"
#include "brave/components/decentralized_dns/content/decentralized_dns_navigation_throttle.h"
#endif

#if BUILDFLAG(ENABLE_REQUEST_OTR)
#include "brave/browser/request_otr/request_otr_service_factory.h"
#include "brave/components/request_otr/browser/request_otr_navigation_throttle.h"
#include "brave/components/request_otr/browser/request_otr_storage_tab_helper.h"
#endif

using blink::web_pref::WebPreferences;
using brave_shields::BraveShieldsWebContentsObserver;
using brave_shields::ControlType;
using brave_shields::GetBraveShieldsEnabled;
using brave_shields::GetFingerprintingControlType;
using content::BrowserThread;
using content::ContentBrowserClient;
using content::RenderFrameHost;
using content::WebContents;

#if BUILDFLAG(ENABLE_EXTENSIONS)
#include "chrome/browser/extensions/chrome_content_browser_client_extensions_part.h"
#include "extensions/browser/extension_registry.h"
#include "extensions/common/constants.h"

using extensions::ChromeContentBrowserClientExtensionsPart;
#endif

#if BUILDFLAG(ENABLE_AI_CHAT)
#include "brave/browser/ai_chat/ai_chat_service_factory.h"
#include "brave/browser/ui/webui/ai_chat/ai_chat_ui.h"
#include "brave/browser/ui/webui/ai_chat/ai_chat_untrusted_conversation_ui.h"
#include "brave/components/ai_chat/content/browser/ai_chat_brave_search_throttle.h"
#include "brave/components/ai_chat/content/browser/ai_chat_throttle.h"
#include "brave/components/ai_chat/core/browser/utils.h"
#include "brave/components/ai_chat/core/common/features.h"
#include "brave/components/ai_chat/core/common/mojom/ai_chat.mojom.h"
#include "brave/components/ai_chat/core/common/mojom/bookmarks.mojom.h"
#include "brave/components/ai_chat/core/common/mojom/common.mojom.h"
#include "brave/components/ai_chat/core/common/mojom/customization_settings.mojom.h"
#include "brave/components/ai_chat/core/common/mojom/history.mojom.h"
#include "brave/components/ai_chat/core/common/mojom/ollama.mojom.h"
#include "brave/components/ai_chat/core/common/mojom/settings_helper.mojom.h"
#include "brave/components/ai_chat/core/common/mojom/tab_tracker.mojom.h"
#include "brave/components/ai_chat/core/common/mojom/untrusted_frame.mojom.h"
#endif

#if BUILDFLAG(ENABLE_CONTAINERS)
#include "brave/components/containers/content/browser/storage_partition_utils.h"
#include "brave/components/containers/core/common/features.h"
#include "brave/components/containers/core/mojom/containers.mojom.h"
#endif

#if !BUILDFLAG(IS_ANDROID)
#include "brave/browser/ui/split_view/split_view_link_navigation_throttle.h"
#include "brave/browser/ui/webui/brave_account/brave_account_ui_desktop.h"
#include "brave/components/brave_account/mojom/brave_account.mojom.h"
#include "brave/components/brave_account/mojom/brave_account_row.mojom.h"
#include "brave/components/commands/common/commands.mojom.h"
#include "brave/components/commands/common/features.h"
#include "brave/ui/webui/brave_color_change_listener/brave_color_change_handler.h"
#include "ui/webui/resources/cr_components/color_change_listener/color_change_listener.mojom.h"
#if BUILDFLAG(ENABLE_AI_CHAT)
#include "brave/browser/ui/ai_chat/utils.h"
#endif
#else
#include "brave/browser/ui/webui/brave_account/brave_account_ui_android.h"
#if BUILDFLAG(ENABLE_AI_CHAT)
#include "brave/components/ai_chat/core/browser/android/ai_chat_iap_subscription_android.h"
#endif
#include "brave/components/brave_origin/features.h"
#include "brave/components/brave_origin/origin_iap_subscription.h"
#endif

#if BUILDFLAG(ENABLE_TOR)
#include "brave/browser/tor/tor_profile_service_factory.h"
#include "brave/components/tor/onion_location_navigation_throttle.h"
#include "brave/components/tor/tor_navigation_throttle.h"
#endif

#if BUILDFLAG(ENABLE_SPEEDREADER)
#include "brave/browser/speedreader/speedreader_service_factory.h"
#include "brave/browser/ui/speedreader/speedreader_tab_helper.h"
#include "brave/components/speedreader/speedreader_body_distiller.h"
#include "brave/components/speedreader/speedreader_distilled_page_producer.h"
#include "brave/components/speedreader/speedreader_util.h"
#if !BUILDFLAG(IS_ANDROID)
#include "brave/browser/ui/webui/speedreader/speedreader_toolbar_ui.h"
#include "brave/components/speedreader/common/speedreader_toolbar.mojom.h"
#endif
#endif

#if BUILDFLAG(ENABLE_WIDEVINE)
#include "brave/browser/brave_drm_tab_helper.h"
#endif

#if BUILDFLAG(ENABLE_BRAVE_VPN)
#include "brave/browser/brave_vpn/brave_vpn_service_factory.h"
#include "brave/browser/ui/webui/brave_vpn/vpn_panel_ui.h"
#include "brave/components/brave_vpn/common/brave_vpn_utils.h"
#include "brave/components/brave_vpn/common/mojom/brave_vpn.mojom.h"
#endif

#if BUILDFLAG(IS_ANDROID)
#if BUILDFLAG(ENABLE_BRAVE_WALLET)
#include "brave/browser/ui/webui/brave_wallet/android/android_wallet_page_ui.h"
#endif  //  BUILDFLAG(ENABLE_BRAVE_WALLET)
#include "brave/browser/ui/webui/new_tab_takeover/android/new_tab_takeover_ui.h"
#endif  // BUILDFLAG(IS_ANDROID)

#if !BUILDFLAG(IS_ANDROID)
#if BUILDFLAG(ENABLE_BRAVE_WALLET)
#include "brave/browser/ui/webui/brave_wallet/wallet_page_ui.h"
#include "brave/browser/ui/webui/brave_wallet/wallet_panel_ui.h"
#endif  // BUILDFLAG(ENABLE_BRAVE_WALLET)

#if BUILDFLAG(ENABLE_BRAVE_NEWS)
#include "brave/browser/ui/webui/brave_news_internals/brave_news_internals_ui.h"
#include "brave/components/brave_news/common/brave_news.mojom.h"
#include "brave/components/brave_news/common/features.h"
#endif  // BUILDFLAG(ENABLE_BRAVE_NEWS)
#include "brave/components/brave_shields/core/common/brave_shields_panel.mojom.h"
#include "components/omnibox/browser/searchbox.mojom.h"
#endif  // !BUILDFLAG(IS_ANDROID)

#if BUILDFLAG(ENABLE_PLAYLIST)
#include "brave/components/playlist/content/browser/playlist_background_web_contents_helper.h"
#include "brave/components/playlist/content/browser/playlist_media_handler.h"
#include "brave/components/playlist/core/common/features.h"
#include "brave/components/playlist/core/common/mojom/playlist.mojom.h"
#endif  // BUILDFLAG(ENABLE_PLAYLIST)

#if BUILDFLAG(ENABLE_PLAYLIST_WEBUI)
#include "brave/browser/ui/webui/playlist_ui.h"
#endif  // BUILDFLAG(ENABLE_PLAYLIST_WEBUI)

#if BUILDFLAG(ENABLE_BRAVE_EDUCATION)
#include "brave/browser/ui/webui/brave_education/brave_education_page_ui.h"
#endif

#if BUILDFLAG(IS_BRAVE_ORIGIN_BRANDED)
#include "brave/browser/ui/webui/brave_origin_startup/brave_origin_startup_ui.h"
#include "brave/components/brave_origin/mojom/brave_origin_startup.mojom.h"
#endif

#if BUILDFLAG(IS_WIN)
#include "brave/components/windows_recall/windows_recall.h"
#endif

#if BUILDFLAG(ENABLE_OMAHA4)
#include "brave/browser/brave_browser_main_extra_parts_p3a.h"
#endif

#if BUILDFLAG(ENABLE_EMAIL_ALIASES)
#include "brave/browser/ui/webui/email_aliases/email_aliases_panel_ui.h"
#include "brave/components/email_aliases/email_aliases.mojom.h"
#include "brave/components/email_aliases/features.h"
#endif

namespace {

void BindCosmeticFiltersResourcesOnTaskRunner(
    mojo::PendingReceiver<cosmetic_filters::mojom::CosmeticFiltersResources>
        receiver,
    brave_shields::AdBlockEngineWrapper* engine_wrapper) {
  mojo::MakeSelfOwnedReceiver(
      std::make_unique<cosmetic_filters::CosmeticFiltersResources>(
          engine_wrapper),
      std::move(receiver));
}

void BindCosmeticFiltersResources(
    content::RenderFrameHost* const frame_host,
    mojo::PendingReceiver<cosmetic_filters::mojom::CosmeticFiltersResources>
        receiver) {
  g_brave_browser_process->ad_block_service()->AsyncCall(base::BindOnce(
      &BindCosmeticFiltersResourcesOnTaskRunner, std::move(receiver)));
}

#if BUILDFLAG(ENABLE_BRAVE_WALLET)
void MaybeBindWalletP3A(
    content::RenderFrameHost* const frame_host,
    mojo::PendingReceiver<brave_wallet::mojom::BraveWalletP3A> receiver) {
  auto* context = frame_host->GetBrowserContext();
  if (brave_wallet::IsAllowedForContext(frame_host->GetBrowserContext())) {
    brave_wallet::BraveWalletService* wallet_service =
        brave_wallet::BraveWalletServiceFactory::GetServiceForContext(context);
    DCHECK(wallet_service);
    wallet_service->GetBraveWalletP3A()->Bind(std::move(receiver));
  } else {
    // Dummy API to avoid reporting P3A for OTR contexts
    mojo::MakeSelfOwnedReceiver(
        std::make_unique<brave_wallet::BraveWalletP3APrivate>(),
        std::move(receiver));
  }
}
#endif

void BindBraveSearchFallbackHost(
    content::ChildProcessId process_id,
    mojo::PendingReceiver<brave_search::mojom::BraveSearchFallback> receiver) {
  content::RenderProcessHost* render_process_host =
      content::RenderProcessHost::FromID(process_id);
  if (!render_process_host) {
    return;
  }

  content::BrowserContext* context = render_process_host->GetBrowserContext();
  auto* backup_results_service =
      brave_search::BackupResultsServiceFactory::GetForBrowserContext(context);
  if (!backup_results_service) {
    return;
  }
  mojo::MakeSelfOwnedReceiver(
      std::make_unique<brave_search::BraveSearchFallbackHost>(
          backup_results_service),
      std::move(receiver));
}

void BindBraveSearchDefaultHost(
    content::RenderFrameHost* const frame_host,
    mojo::PendingReceiver<brave_search::mojom::BraveSearchDefault> receiver) {
  const GURL& frame_host_url = frame_host->GetLastCommittedURL();
  if (!brave_search::IsAllowedHost(frame_host_url)) {
    return;
  }
  auto* context = frame_host->GetBrowserContext();
  auto* profile = Profile::FromBrowserContext(context);
  if (profile->IsRegularProfile()) {
    auto* template_url_service =
        TemplateURLServiceFactory::GetForProfile(profile);
    mojo::MakeSelfOwnedReceiver(
        std::make_unique<brave_search::BraveSearchDefaultHost>(
            frame_host->GetLastCommittedURL().host(), template_url_service,
            profile->GetPrefs()),
        std::move(receiver));
  } else {
    // Dummy API which always returns false for private contexts.
    mojo::MakeSelfOwnedReceiver(
        std::make_unique<brave_search::BraveSearchDefaultHostPrivate>(),
        std::move(receiver));
  }
}

#if BUILDFLAG(IS_ANDROID) && BUILDFLAG(ENABLE_AI_CHAT)
void BindIAPSubscription(
    content::RenderFrameHost* const frame_host,
    mojo::PendingReceiver<ai_chat::mojom::IAPSubscription> receiver) {
  const GURL& frame_host_url = frame_host->GetLastCommittedURL();
  if (!skus::IsSafeOrigin(frame_host_url)) {
    return;
  }
  auto* context = frame_host->GetBrowserContext();
  auto* profile = Profile::FromBrowserContext(context);
  mojo::MakeSelfOwnedReceiver(
      std::make_unique<ai_chat::AIChatIAPSubscription>(profile->GetPrefs()),
      std::move(receiver));
}
#endif

#if BUILDFLAG(IS_ANDROID)
void BindOriginIAPSubscription(
    content::RenderFrameHost* const frame_host,
    mojo::PendingReceiver<brave_origin::mojom::OriginIAPSubscription>
        receiver) {
  const GURL& frame_host_url = frame_host->GetLastCommittedURL();
  if (!skus::IsSafeOrigin(frame_host_url)) {
    return;
  }
  auto* context = frame_host->GetBrowserContext();
  auto* profile = Profile::FromBrowserContext(context);
  mojo::MakeSelfOwnedReceiver(
      std::make_unique<brave_origin::OriginIAPSubscription>(
          profile->GetPrefs()),
      std::move(receiver));
}
#endif

#if BUILDFLAG(ENABLE_BRAVE_VPN)
void MaybeBindBraveVpnImpl(
    content::RenderFrameHost* const frame_host,
    mojo::PendingReceiver<brave_vpn::mojom::ServiceHandler> receiver) {
  const GURL& frame_host_url = frame_host->GetLastCommittedURL();
  if (!skus::IsSafeOrigin(frame_host_url)) {
    return;
  }
  auto* context = frame_host->GetBrowserContext();
  brave_vpn::BraveVpnServiceFactory::BindForContext(context,
                                                    std::move(receiver));
}
#endif
void MaybeBindSkusSdkImpl(
    content::RenderFrameHost* const frame_host,
    mojo::PendingReceiver<skus::mojom::SkusService> receiver) {
  const GURL& frame_host_url = frame_host->GetLastCommittedURL();
  if (!skus::IsSafeOrigin(frame_host_url)) {
    return;
  }
  auto* context = frame_host->GetBrowserContext();
  skus::SkusServiceFactory::BindForContext(context, std::move(receiver));
}

#if !BUILDFLAG(IS_ANDROID)
void MaybeBindColorChangeHandler(
    content::RenderFrameHost* const frame_host,
    mojo::PendingReceiver<color_change_listener::mojom::PageHandler> receiver) {
  const GURL& frame_host_url = frame_host->GetLastCommittedURL();

  // Only supported on chrome://, chrome-untrusted:// and chrome-extension://
  // urls
  if (!frame_host_url.SchemeIs(content::kChromeUIScheme) &&
      !frame_host_url.SchemeIs(content::kChromeUIUntrustedScheme) &&
      !frame_host_url.SchemeIs(extensions::kExtensionScheme)) {
    return;
  }

  ui::BraveColorChangeHandler::BindInterface(
      content::WebContents::FromRenderFrameHost(frame_host),
      std::move(receiver));
}
#endif

bool IsJsBlockingEnforced(content::BrowserContext* browser_context,
                          const GURL& url) {
  Profile* profile = Profile::FromBrowserContext(browser_context);
  auto* settings_service =
      BraveShieldsSettingsServiceFactory::GetForProfile(profile);
  if (!settings_service) {
    return false;
  }

  return settings_service->IsJsBlockingEnforced(url);
}

}  // namespace

BraveContentBrowserClient::BraveContentBrowserClient() = default;

BraveContentBrowserClient::~BraveContentBrowserClient() = default;

std::unique_ptr<content::BrowserMainParts>
BraveContentBrowserClient::CreateBrowserMainParts(bool is_integration_test) {
  std::unique_ptr<content::BrowserMainParts> main_parts =
      ChromeContentBrowserClient::CreateBrowserMainParts(is_integration_test);
  ChromeBrowserMainParts* chrome_main_parts =
      static_cast<ChromeBrowserMainParts*>(main_parts.get());
  chrome_main_parts->AddParts(std::make_unique<BraveBrowserMainExtraParts>());
#if BUILDFLAG(ENABLE_OMAHA4)
  chrome_main_parts->AddParts(
      std::make_unique<BraveBrowserMainExtraPartsP3A>());
#endif
  return main_parts;
}

bool BraveContentBrowserClient::AreIsolatedWebAppsEnabled(
    content::BrowserContext* browser_context) {
  return false;
}

void BraveContentBrowserClient::BrowserURLHandlerCreated(
    content::BrowserURLHandler* handler) {
  handler->AddHandlerPair(&HandleURLOverrideRewrite, &HandleURLOverrideRewrite);
  ChromeContentBrowserClient::BrowserURLHandlerCreated(handler);
}

void BraveContentBrowserClient::RenderProcessWillLaunch(
    content::RenderProcessHost* host) {
  Profile* profile = Profile::FromBrowserContext(host->GetBrowserContext());
  // The BraveRendererUpdater might be null for some irregular profiles, e.g.
  // the System Profile.
  if (BraveRendererUpdater* service =
          BraveRendererUpdaterFactory::GetForProfile(profile)) {
    service->InitializeRenderer(host);
  }

  ChromeContentBrowserClient::RenderProcessWillLaunch(host);
}

void BraveContentBrowserClient::
    RegisterAssociatedInterfaceBindersForRenderFrameHost(
        content::RenderFrameHost& render_frame_host,                // NOLINT
        blink::AssociatedInterfaceRegistry& associated_registry) {  // NOLINT
#if BUILDFLAG(ENABLE_WIDEVINE)
  associated_registry.AddInterface<
      brave_drm::mojom::BraveDRM>(base::BindRepeating(
      [](content::RenderFrameHost* render_frame_host,
         mojo::PendingAssociatedReceiver<brave_drm::mojom::BraveDRM> receiver) {
        BraveDrmTabHelper::BindBraveDRM(std::move(receiver), render_frame_host);
      },
      &render_frame_host));
#endif  // BUILDFLAG(ENABLE_WIDEVINE)

#if !BUILDFLAG(IS_ANDROID)
  associated_registry.AddInterface<
      geolocation::mojom::BraveGeolocationPermission>(base::BindRepeating(
      [](content::RenderFrameHost* render_frame_host,
         mojo::PendingAssociatedReceiver<
             geolocation::mojom::BraveGeolocationPermission> receiver) {
        BraveGeolocationPermissionTabHelper::BindBraveGeolocationPermission(
            std::move(receiver), render_frame_host);
      },
      &render_frame_host));
#endif  // !BUILDFLAG(IS_ANDROID)

  associated_registry.AddInterface<
      brave_shields::mojom::BraveShieldsHost>(base::BindRepeating(
      [](content::RenderFrameHost* render_frame_host,
         mojo::PendingAssociatedReceiver<brave_shields::mojom::BraveShieldsHost>
             receiver) {
        brave_shields::BraveShieldsWebContentsObserver::BindBraveShieldsHost(
            std::move(receiver), render_frame_host);
      },
      &render_frame_host));

#if BUILDFLAG(ENABLE_SPEEDREADER)
  associated_registry.AddInterface<speedreader::mojom::SpeedreaderHost>(
      base::BindRepeating(
          [](content::RenderFrameHost* render_frame_host,
             mojo::PendingAssociatedReceiver<
                 speedreader::mojom::SpeedreaderHost> receiver) {
            speedreader::SpeedreaderTabHelper::BindSpeedreaderHost(
                std::move(receiver), render_frame_host);
          },
          &render_frame_host));
#endif

#if BUILDFLAG(ENABLE_PLAYLIST)
  associated_registry.AddInterface<playlist::mojom::PlaylistMediaResponder>(
      base::BindRepeating(
          &playlist::PlaylistMediaHandler::BindMediaResponderReceiver,
          &render_frame_host));
#endif  // BUILDFLAG(ENABLE_PLAYLIST)

  associated_registry.AddInterface<
      cosmetic_filters::mojom::CosmeticFiltersHandler>(base::BindRepeating(
      &cosmetic_filters::CosmeticFiltersTabHelper::BindCosmeticFiltersHandler,
      &render_frame_host));

  ChromeContentBrowserClient::
      RegisterAssociatedInterfaceBindersForRenderFrameHost(render_frame_host,
                                                           associated_registry);
}

void BraveContentBrowserClient::RegisterTrustedWebUIInterfaceBrokers(
    content::WebUIBrowserInterfaceBrokerRegistry& registry) {
  ChromeContentBrowserClient::RegisterTrustedWebUIInterfaceBrokers(registry);
#if !BUILDFLAG(IS_ANDROID)
  registry.AddGlobal<color_change_listener::mojom::PageHandler>(
      base::BindRepeating(&MaybeBindColorChangeHandler));
#endif

  // BraveSettingsUI interfaces
#if BUILDFLAG(ENABLE_CONTAINERS)
  if (base::FeatureList::IsEnabled(containers::features::kContainers)) {
    registry.ForWebUI<BraveSettingsUI>()
        .Add<containers::mojom::ContainersSettingsHandler>();
  }
#endif  // BUILDFLAG(ENABLE_CONTAINERS)
#if !BUILDFLAG(IS_ANDROID)
#if BUILDFLAG(ENABLE_AI_CHAT)
  registry.ForWebUI<BraveSettingsUI>()
      .Add<ai_chat::mojom::AIChatSettingsHelper>()
      .Add<ai_chat::mojom::CustomizationSettingsHandler>()
      .Add<ai_chat::mojom::OllamaService>();
#endif  // BUILDFLAG(ENABLE_AI_CHAT)
  if (base::FeatureList::IsEnabled(commands::features::kBraveCommands)) {
    registry.ForWebUI<BraveSettingsUI>()
        .Add<commands::mojom::CommandsService>();
  }
#if BUILDFLAG(ENABLE_EMAIL_ALIASES)
  if (email_aliases::features::IsEmailAliasesEnabled()) {
    registry.ForWebUI<BraveSettingsUI>()
        .Add<email_aliases::mojom::EmailAliasesService>();
  }
#endif
  if (brave_account::features::IsBraveAccountEnabled()) {
    registry.ForWebUI<BraveSettingsUI>()
        .Add<brave_account::mojom::Authentication>()
        .Add<brave_account::mojom::RowHandler>();
  }
  registry.ForWebUI<BraveSettingsUI>()
      .Add<brave_origin::mojom::BraveOriginSettingsHandler>();
#endif  // !BUILDFLAG(IS_ANDROID)
  // End of BraveSettingsUI interfaces

#if BUILDFLAG(IS_BRAVE_ORIGIN_BRANDED)
  registry.ForWebUI<BraveOriginStartupUI>()
      .Add<brave_origin::mojom::BraveOriginStartupHandler>();
#endif

#if BUILDFLAG(ENABLE_AI_CHAT)
  if (ai_chat::features::IsAIChatEnabled()) {
    registry.ForWebUI<AIChatUI>()
        .Add<ai_chat::mojom::AIChatUIHandler>()
        .Add<ai_chat::mojom::Service>()
        .Add<ai_chat::mojom::TabTrackerService>()
        .Add<ai_chat::mojom::BookmarksPageHandler>()
        .Add<ai_chat::mojom::HistoryUIHandler>();
    registry.ForWebUI<AIChatUntrustedConversationUI>()
        .Add<ai_chat::mojom::UntrustedUIHandler>()
        .Add<ai_chat::mojom::UntrustedService>();
  }
#endif

#if BUILDFLAG(ENABLE_BRAVE_ADS)
  registry.ForWebUI<AdsInternalsUI>().Add<bat_ads::mojom::AdsInternals>();
#endif  // BUILDFLAG(ENABLE_BRAVE_ADS)

  if (base::FeatureList::IsEnabled(skus::features::kSkusFeature)) {
    registry.ForWebUI<SkusInternalsUI>().Add<skus::mojom::SkusInternals>();
  }

#if BUILDFLAG(ENABLE_BRAVE_REWARDS)
  registry.ForWebUI<brave_rewards::RewardsPageUI>()
      .Add<brave_rewards::mojom::RewardsPageHandler>();
#endif

#if !BUILDFLAG(IS_ANDROID)
#if BUILDFLAG(ENABLE_BRAVE_WALLET)
  registry.ForWebUI<WalletPageUI>()
      .Add<brave_wallet::mojom::PageHandlerFactory>()
#if BUILDFLAG(ENABLE_BRAVE_REWARDS)
      .Add<brave_rewards::mojom::RewardsPageHandler>()
#endif
      ;
  registry.ForWebUI<WalletPanelUI>()
      .Add<brave_wallet::mojom::PanelHandlerFactory>()
#if BUILDFLAG(ENABLE_BRAVE_REWARDS)
      .Add<brave_rewards::mojom::RewardsPageHandler>()
#endif
      ;
#endif

  auto ntp_refresh_registration =
      registry.ForWebUI<BraveNewTabPageUI>()
          .Add<brave_new_tab_page_refresh::mojom::NewTabPageHandler>()
#if BUILDFLAG(ENABLE_BRAVE_REWARDS)
          .Add<brave_rewards::mojom::RewardsPageHandler>()
#endif
#if BUILDFLAG(ENABLE_BRAVE_NEWS)
          .Add<brave_news::mojom::BraveNewsController>()
#endif
          .Add<
              ntp_background_images::mojom::SponsoredRichMediaAdEventHandler>();

  auto ntp_registration =
      registry.ForWebUI<BraveNewTabUI>()
          .Add<brave_new_tab_page::mojom::PageHandlerFactory>()
#if BUILDFLAG(ENABLE_BRAVE_NEWS)
          .Add<brave_news::mojom::BraveNewsController>()
#endif
      ;

#if BUILDFLAG(ENABLE_AI_CHAT)
  if (ai_chat::features::IsAIChatEnabled() &&
      ai_chat::features::IsShowAIChatInputOnNewTabPageEnabled()) {
    ntp_refresh_registration.Add<ai_chat::mojom::AIChatUIHandler>()
        .Add<ai_chat::mojom::Service>()
        .Add<ai_chat::mojom::TabTrackerService>()
        .Add<ai_chat::mojom::BookmarksPageHandler>()
        .Add<ai_chat::mojom::HistoryUIHandler>();
  }
#endif

#if BUILDFLAG(ENABLE_BRAVE_VPN)
  if (brave_vpn::IsBraveVPNFeatureEnabled()) {
    ntp_refresh_registration.Add<brave_vpn::mojom::ServiceHandler>();
    ntp_registration.Add<brave_vpn::mojom::ServiceHandler>();
  }
#endif

  if (base::FeatureList::IsEnabled(features::kBraveNtpSearchWidget)) {
    ntp_refresh_registration.Add<searchbox::mojom::PageHandler>();
    ntp_registration.Add<searchbox::mojom::PageHandler>();
  }

#if BUILDFLAG(ENABLE_BRAVE_NEWS)
  if (base::FeatureList::IsEnabled(
          brave_news::features::kBraveNewsFeedUpdate)) {
    registry.ForWebUI<BraveNewsInternalsUI>()
        .Add<brave_news::mojom::BraveNewsController>()
        .Add<brave_news::mojom::BraveNewsInternals>();
  }
#endif  // BUILDFLAG(ENABLE_BRAVE_NEWS)

  if (brave_account::features::IsBraveAccountEnabled()) {
    registry.ForWebUI<BraveAccountUIDesktop>()
        .Add<brave_account::mojom::Authentication>()
        .Add<brave_account::mojom::DialogController>()
        .Add<password_strength_meter::mojom::PasswordStrengthMeter>();
  }

#if BUILDFLAG(ENABLE_EMAIL_ALIASES)
  if (email_aliases::features::IsEmailAliasesEnabled()) {
    registry.ForWebUI<EmailAliasesPanelUI>()
        .Add<email_aliases::mojom::EmailAliasesService>()
        .Add<email_aliases::mojom::EmailAliasesPanelHandler>();
  }
#endif

#else   // !BUILDFLAG(IS_ANDROID)
  registry.ForWebUI<NewTabTakeoverUI>()
      .Add<new_tab_takeover::mojom::NewTabTakeover>();

  if (brave_account::features::IsBraveAccountEnabled()) {
    registry.ForWebUI<BraveAccountUIAndroid>()
        .Add<brave_account::mojom::Authentication>()
        .Add<brave_account::mojom::DialogController>()
        .Add<password_strength_meter::mojom::PasswordStrengthMeter>();
  }
#endif  // !BUILDFLAG(IS_ANDROID)
}

void BraveContentBrowserClient::RegisterUntrustedWebUIInterfaceBrokers(
    content::WebUIBrowserInterfaceBrokerRegistry& registry) {
  ChromeContentBrowserClient::RegisterUntrustedWebUIInterfaceBrokers(registry);

#if BUILDFLAG(ENABLE_BRAVE_VPN) && !BUILDFLAG(IS_ANDROID)
  if (brave_vpn::IsBraveVPNFeatureEnabled()) {
    registry.ForWebUI<VPNPanelUI>()
        .Add<brave_vpn::mojom::PanelHandlerFactory>();
  }
#endif

#if BUILDFLAG(ENABLE_PLAYLIST_WEBUI)
  if (base::FeatureList::IsEnabled(playlist::features::kPlaylist)) {
    registry.ForWebUI<playlist::PlaylistUI>()
        .Add<playlist::mojom::PageHandlerFactory>();
  }
#endif
}

std::optional<base::UnguessableToken>
BraveContentBrowserClient::GetEphemeralStorageToken(
    content::RenderFrameHost* render_frame_host,
    const url::Origin& origin) {
  DCHECK(render_frame_host);
  auto* wc = content::WebContents::FromRenderFrameHost(render_frame_host);
  if (!wc) {
    return std::nullopt;
  }

  auto* es_tab_helper =
      ephemeral_storage::EphemeralStorageTabHelper::FromWebContents(wc);
  if (!es_tab_helper) {
    return std::nullopt;
  }

  return es_tab_helper->GetEphemeralStorageToken(origin);
}

bool BraveContentBrowserClient::AllowWorkerFingerprinting(
    const GURL& url,
    content::BrowserContext* browser_context) {
  return WorkerGetBraveShieldSettings(url, browser_context)->farbling_level !=
         brave_shields::mojom::FarblingLevel::MAXIMUM;
}

brave_shields::mojom::ShieldsSettingsPtr
BraveContentBrowserClient::WorkerGetBraveShieldSettings(
    const GURL& url,
    content::BrowserContext* browser_context) {
  const brave_shields::mojom::FarblingLevel farbling_level =
      brave_shields::GetFarblingLevel(
          HostContentSettingsMapFactory::GetForProfile(browser_context), url);
  const base::Token farbling_token =
      farbling_level != brave_shields::mojom::FarblingLevel::OFF
          ? brave_shields::GetFarblingToken(
                HostContentSettingsMapFactory::GetForProfile(browser_context),
                url)
          : base::Token();

  PrefService* pref_service = user_prefs::UserPrefs::Get(browser_context);

  return brave_shields::mojom::ShieldsSettings::New(
      farbling_level, farbling_token, std::vector<std::string>(),
      brave_shields::IsReduceLanguageEnabledForProfile(pref_service),
      IsJsBlockingEnforced(browser_context, url));
}

content::ContentBrowserClient::AllowWebBluetoothResult
BraveContentBrowserClient::AllowWebBluetooth(
    content::BrowserContext* browser_context,
    const url::Origin& requesting_origin,
    const url::Origin& embedding_origin) {
  if (!base::FeatureList::IsEnabled(blink::features::kBraveWebBluetoothAPI)) {
    return ContentBrowserClient::AllowWebBluetoothResult::
        BLOCK_GLOBALLY_DISABLED;
  }
  return ChromeContentBrowserClient::AllowWebBluetooth(
      browser_context, requesting_origin, embedding_origin);
}

bool BraveContentBrowserClient::CanCreateWindow(
    content::RenderFrameHost* opener,
    const GURL& opener_url,
    const GURL& opener_top_level_frame_url,
    const url::Origin& source_origin,
    content::mojom::WindowContainerType container_type,
    const GURL& target_url,
    const content::Referrer& referrer,
    const std::string& frame_name,
    WindowOpenDisposition disposition,
    const blink::mojom::WindowFeatures& features,
    bool user_gesture,
    bool opener_suppressed,
    bool* no_javascript_access) {
  // Check base implementation first
  bool can_create_window = ChromeContentBrowserClient::CanCreateWindow(
      opener, opener_url, opener_top_level_frame_url, source_origin,
      container_type, target_url, referrer, frame_name, disposition, features,
      user_gesture, opener_suppressed, no_javascript_access);

#if BUILDFLAG(ENABLE_REQUEST_OTR)
  // If the user has requested going off-the-record in this tab, don't allow
  // opening new windows via script
  if (content::WebContents* web_contents =
          content::WebContents::FromRenderFrameHost(opener)) {
    if (request_otr::
            RequestOTRStorageTabHelper* request_otr_storage_tab_helper =
                request_otr::RequestOTRStorageTabHelper::FromWebContents(
                    web_contents)) {
      if (request_otr_storage_tab_helper->has_requested_otr()) {
        *no_javascript_access = true;
      }
    }
  }
#endif

  return can_create_window && google_sign_in_permission::CanCreateWindow(
                                  opener, opener_url, target_url);
}

void BraveContentBrowserClient::ExposeInterfacesToRenderer(
    service_manager::BinderRegistry* registry,
    blink::AssociatedInterfaceRegistry* associated_registry,
    content::RenderProcessHost* render_process_host) {
  ChromeContentBrowserClient::ExposeInterfacesToRenderer(
      registry, associated_registry, render_process_host);
  registry->AddInterface(base::BindRepeating(&BindBraveSearchFallbackHost,
                                             render_process_host->GetID()),
                         content::GetUIThreadTaskRunner({}));
}

void BraveContentBrowserClient::RegisterBrowserInterfaceBindersForFrame(
    content::RenderFrameHost* render_frame_host,
    mojo::BinderMapWithContext<content::RenderFrameHost*>* map) {
  ChromeContentBrowserClient::RegisterBrowserInterfaceBindersForFrame(
      render_frame_host, map);
  map->Add<cosmetic_filters::mojom::CosmeticFiltersResources>(
      base::BindRepeating(&BindCosmeticFiltersResources));
  if (brave_search::IsDefaultAPIEnabled()) {
    map->Add<brave_search::mojom::BraveSearchDefault>(
        base::BindRepeating(&BindBraveSearchDefaultHost));
  }

#if BUILDFLAG(ENABLE_BRAVE_WALLET)
  map->Add<brave_wallet::mojom::BraveWalletP3A>(
      base::BindRepeating(&MaybeBindWalletP3A));
  if (brave_wallet::IsAllowedForContext(
          render_frame_host->GetBrowserContext())) {
    map->Add<brave_wallet::mojom::EthereumProvider>(base::BindRepeating(
        &brave_wallet::BraveWalletTabHelper::BindEthereumProvider));
    map->Add<brave_wallet::mojom::SolanaProvider>(base::BindRepeating(
        &brave_wallet::BraveWalletTabHelper::BindSolanaProvider));
    if (brave_wallet::IsCardanoDAppSupportEnabled()) {
      map->Add<brave_wallet::mojom::CardanoProvider>(base::BindRepeating(
          &brave_wallet::BraveWalletTabHelper::BindCardanoProvider));
    }
  }
#endif

  map->Add<skus::mojom::SkusService>(
      base::BindRepeating(&MaybeBindSkusSdkImpl));
  if (base::FeatureList::IsEnabled(history_embeddings::kHistoryEmbeddings)) {
    content::RegisterWebUIControllerInterfaceBinder<
        local_ai::mojom::LocalAIService, local_ai::UntrustedLocalAIUI>(map);
  }
#if BUILDFLAG(ENABLE_BRAVE_VPN)
  map->Add<brave_vpn::mojom::ServiceHandler>(
      base::BindRepeating(&MaybeBindBraveVpnImpl));
#endif

#if BUILDFLAG(IS_ANDROID) && BUILDFLAG(ENABLE_BRAVE_WALLET)
  content::RegisterWebUIControllerInterfaceBinder<
      brave_wallet::mojom::PageHandlerFactory, AndroidWalletPageUI>(map);
#endif

#if !BUILDFLAG(IS_ANDROID)
  content::RegisterWebUIControllerInterfaceBinder<
      brave_private_new_tab::mojom::PageHandler, BravePrivateNewTabUI>(map);
  content::RegisterWebUIControllerInterfaceBinder<
      brave_shields::mojom::PanelHandlerFactory, ShieldsPanelUI>(map);
#if BUILDFLAG(ENABLE_BRAVE_REWARDS)
  content::RegisterWebUIControllerInterfaceBinder<
      brave_rewards::mojom::RewardsPageHandler,
      brave_rewards::RewardsPageTopUI>(map);
#endif

  map->Add<color_change_listener::mojom::PageHandler>(
      base::BindRepeating(&MaybeBindColorChangeHandler));
#endif

#if BUILDFLAG(ENABLE_AI_CHAT)
  auto* prefs =
      user_prefs::UserPrefs::Get(render_frame_host->GetBrowserContext());
  if (ai_chat::IsAIChatEnabled(prefs) &&
      Profile::FromBrowserContext(render_frame_host->GetBrowserContext())
          ->IsRegularProfile()) {
    // WebUI -> Browser interface
    content::RegisterWebUIControllerInterfaceBinder<
        ai_chat::mojom::AIChatUIHandler, AIChatUI>(map);
  }
#if BUILDFLAG(IS_ANDROID)
  if (ai_chat::IsAIChatEnabled(prefs)) {
    map->Add<ai_chat::mojom::IAPSubscription>(
        base::BindRepeating(&BindIAPSubscription));
  }
#endif
#endif

#if BUILDFLAG(IS_ANDROID)
  if (base::FeatureList::IsEnabled(brave_origin::features::kBraveOrigin)) {
    map->Add<brave_origin::mojom::OriginIAPSubscription>(
        base::BindRepeating(&BindOriginIAPSubscription));
  }
#endif

#if BUILDFLAG(ENABLE_SPEEDREADER) && !BUILDFLAG(IS_ANDROID)
  content::RegisterWebUIControllerInterfaceBinder<
      speedreader::mojom::ToolbarFactory, SpeedreaderToolbarUI>(map);
#endif

#if BUILDFLAG(ENABLE_BRAVE_EDUCATION)
  content::RegisterWebUIControllerInterfaceBinder<
      brave_education::mojom::PageHandlerFactory, BraveEducationPageUI>(map);
  content::RegisterWebUIControllerInterfaceBinder<
      brave_browser_command::mojom::BraveBrowserCommandHandlerFactory,
      BraveEducationPageUI>(map);
#endif
}

bool BraveContentBrowserClient::HandleExternalProtocol(
    const GURL& url,
    content::WebContents::Getter web_contents_getter,
    content::FrameTreeNodeId frame_tree_node_id,
    content::NavigationUIData* navigation_data,
    bool is_primary_main_frame,
    bool is_in_fenced_frame_tree,
    network::mojom::WebSandboxFlags sandbox_flags,
    ui::PageTransition page_transition,
    bool has_user_gesture,
    const std::optional<url::Origin>& initiating_origin,
    content::RenderFrameHost* initiator_document,
    const net::IsolationInfo& isolation_info,
    mojo::PendingRemote<network::mojom::URLLoaderFactory>* out_factory) {
  return ChromeContentBrowserClient::HandleExternalProtocol(
      url, web_contents_getter, frame_tree_node_id, navigation_data,
      is_primary_main_frame, is_in_fenced_frame_tree, sandbox_flags,
      page_transition, has_user_gesture, initiating_origin, initiator_document,
      isolation_info, out_factory);
}

void BraveContentBrowserClient::AppendExtraCommandLineSwitches(
    base::CommandLine* command_line,
    int child_process_id) {
  ChromeContentBrowserClient::AppendExtraCommandLineSwitches(command_line,
                                                             child_process_id);

  std::string process_type =
      command_line->GetSwitchValueASCII(switches::kProcessType);
  if (process_type == switches::kRendererProcess) {
#if BUILDFLAG(BRAVE_V8_ENABLE_DRUMBRAKE)
    if (base::FeatureList::IsEnabled(features::kBraveWebAssemblyJitless)) {
      content::RenderProcessHost* process =
          content::RenderProcessHost::FromID(child_process_id);
      if (process && process->IsJitDisabled()) {
        command_line->AppendSwitchASCII(blink::switches::kJavaScriptFlags,
                                        "--wasm-jitless");
      }
    }
#endif  // BUILDFLAG(BRAVE_V8_ENABLE_DRUMBRAKE)
    // Command line parameters from the browser process are propagated to the
    // renderers *after* ContentBrowserClient::AppendExtraCommandLineSwitches()
    // is called from RenderProcessHostImpl::AppendRendererCommandLine(). This
    // means we have to inspect the main browser process' parameters for the
    // |switches::kTestType| as it will be too soon to find it on command_line.
    const base::CommandLine& browser_command_line =
        *base::CommandLine::ForCurrentProcess();
    if (!browser_command_line.HasSwitch(switches::kTestType)) {
      if (command_line->HasSwitch(switches::kEnableIsolatedWebAppsInRenderer)) {
        command_line->RemoveSwitch(switches::kEnableIsolatedWebAppsInRenderer);
      }
    }

    // Switches to pass to render processes.
    static const char* const kSwitchNames[] = {
        translate::switches::kBraveTranslateUseGoogleEndpoint,
    };
    command_line->CopySwitchesFrom(browser_command_line, kSwitchNames);
  }
}

std::vector<std::unique_ptr<blink::URLLoaderThrottle>>
BraveContentBrowserClient::CreateURLLoaderThrottles(
    const network::ResourceRequest& request,
    content::BrowserContext* browser_context,
    const content::WebContents::Getter& wc_getter,
    content::NavigationUIData* navigation_ui_data,
    content::FrameTreeNodeId frame_tree_node_id,
    std::optional<int64_t> navigation_id) {
  auto result = ChromeContentBrowserClient::CreateURLLoaderThrottles(
      request, browser_context, wc_getter, navigation_ui_data,
      frame_tree_node_id, navigation_id);
  content::WebContents* contents = wc_getter.Run();

  if (contents) {
    const bool isMainFrame =
        request.resource_type ==
        static_cast<int>(blink::mojom::ResourceType::kMainFrame);

    auto body_sniffer_throttle =
        std::make_unique<body_sniffer::BodySnifferThrottle>(
            base::SingleThreadTaskRunner::GetCurrentDefault());

    // Speedreader
#if BUILDFLAG(ENABLE_SPEEDREADER)
    auto* tab_helper =
        speedreader::SpeedreaderTabHelper::FromWebContents(contents);
    if (tab_helper && isMainFrame) {
      auto* speedreader_service =
          speedreader::SpeedreaderServiceFactory::GetForBrowserContext(
              browser_context);
      CHECK(speedreader_service);

      auto producer =
          speedreader::SpeedreaderDistilledPageProducer::MaybeCreate(
              tab_helper->GetWeakPtr());
      if (producer) {
        body_sniffer_throttle->SetBodyProducer(std::move(producer));
      }

      auto handler = speedreader::SpeedreaderBodyDistiller::MaybeCreate(
          g_brave_browser_process->speedreader_rewriter_service(),
          speedreader_service, tab_helper->GetWeakPtr());
      if (handler) {
        body_sniffer_throttle->AddHandler(std::move(handler));
      }
    }
#endif  // ENABLE_SPEEDREADER

    if (isMainFrame) {
      // De-AMP
      auto handler = de_amp::DeAmpBodyHandler::Create(request, wc_getter);
      if (handler) {
        body_sniffer_throttle->AddHandler(std::move(handler));
      }
    }

    result.push_back(std::move(body_sniffer_throttle));

    if (auto google_sign_in_permission_throttle =
            google_sign_in_permission::GoogleSignInPermissionThrottle::
                MaybeCreateThrottleFor(request, wc_getter)) {
      result.push_back(std::move(google_sign_in_permission_throttle));
    }
  }

  return result;
}

void BraveContentBrowserClient::WillCreateURLLoaderFactory(
    content::BrowserContext* browser_context,
    content::RenderFrameHost* frame,
    int render_process_id,
    URLLoaderFactoryType type,
    const url::Origin& request_initiator,
    const net::IsolationInfo& isolation_info,
    std::optional<int64_t> navigation_id,
    ukm::SourceIdObj ukm_source_id,
    network::URLLoaderFactoryBuilder& factory_builder,
    mojo::PendingRemote<network::mojom::TrustedURLLoaderHeaderClient>*
        header_client,
    bool* bypass_redirect_checks,
    bool* disable_secure_dns,
    network::mojom::URLLoaderFactoryOverridePtr* factory_override,
    scoped_refptr<base::SequencedTaskRunner> navigation_response_task_runner) {
  // TODO(iefremov): Skip proxying for certain requests?
  if (base::FeatureList::IsEnabled(features::kBraveRequestInfoUniquePtr)) {
    BraveProxyingURLLoaderFactory<base::WeakPtr>::MaybeProxyRequest(
        browser_context, frame, factory_builder,
        navigation_response_task_runner);
  } else {
    // Ignore shared_ptr presubmit error, this is old code we are trying to
    // convert to unique_ptr/WeakPtr
    BraveProxyingURLLoaderFactory<
        std::shared_ptr>::MaybeProxyRequest(  // nocheck
        browser_context, frame, factory_builder,
        navigation_response_task_runner);
  }

  ChromeContentBrowserClient::WillCreateURLLoaderFactory(
      browser_context, frame, render_process_id, type, request_initiator,
      isolation_info, std::move(navigation_id), ukm_source_id, factory_builder,
      header_client, bypass_redirect_checks, disable_secure_dns,
      factory_override, navigation_response_task_runner);
}

bool BraveContentBrowserClient::WillInterceptWebSocket(
    content::RenderFrameHost* frame) {
  return (frame != nullptr);
}

template <template <typename> class T>
void BraveContentBrowserClient::CreateChromeWebSocket(
    content::RenderFrameHost* frame,
    const GURL& url,
    const net::SiteForCookies& site_for_cookies,
    const std::optional<std::string>& user_agent,
    mojo::PendingRemote<network::mojom::WebSocketHandshakeClient>
        handshake_client,
    BraveProxyingWebSocket<T>* proxy) {
  if (ChromeContentBrowserClient::WillInterceptWebSocket(frame)) {
    ChromeContentBrowserClient::CreateWebSocket(
        frame, proxy->CreateWebSocketFactory(), url, site_for_cookies,
        user_agent, std::move(handshake_client));
  } else {
    proxy->Start(std::move(handshake_client));
  }
}
void BraveContentBrowserClient::CreateWebSocket(
    content::RenderFrameHost* frame,
    content::ContentBrowserClient::WebSocketFactory factory,
    const GURL& url,
    const net::SiteForCookies& site_for_cookies,
    const std::optional<std::string>& user_agent,
    mojo::PendingRemote<network::mojom::WebSocketHandshakeClient>
        handshake_client) {
  if (base::FeatureList::IsEnabled(features::kBraveRequestInfoUniquePtr)) {
    auto* proxy = BraveProxyingWebSocket<base::WeakPtr>::ProxyWebSocket(
        frame, std::move(factory), url, site_for_cookies, user_agent);
    CreateChromeWebSocket<base::WeakPtr>(frame, url, site_for_cookies,
                                         user_agent,
                                         std::move(handshake_client), proxy);
  } else {
    // Ignore shared_ptr presubmit error, this is old code we are trying to
    // convert to unique_ptr/WeakPtr
    auto* proxy =
        BraveProxyingWebSocket<std::shared_ptr>::ProxyWebSocket(  // nocheck
            frame, std::move(factory), url, site_for_cookies, user_agent);
    CreateChromeWebSocket<std::shared_ptr>(  // nocheck
        frame, url, site_for_cookies,        // nocheck
        user_agent, std::move(handshake_client), proxy);
  }
}

void BraveContentBrowserClient::MaybeHideReferrer(
    content::BrowserContext* browser_context,
    const GURL& request_url,
    const GURL& document_url,
    blink::mojom::ReferrerPtr* referrer) {
  DCHECK(referrer && !referrer->is_null());
#if BUILDFLAG(ENABLE_EXTENSIONS)
  if (document_url.SchemeIs(extensions::kExtensionScheme) ||
      request_url.SchemeIs(extensions::kExtensionScheme)) {
    return;
  }
#endif
  if (document_url.SchemeIs(content::kChromeUIScheme) ||
      request_url.SchemeIs(content::kChromeUIScheme)) {
    return;
  }

  Profile* profile = Profile::FromBrowserContext(browser_context);
  const bool allow_referrers = brave_shields::AreReferrersAllowed(
      HostContentSettingsMapFactory::GetForProfile(profile), document_url);
  const bool shields_up = brave_shields::GetBraveShieldsEnabled(
      HostContentSettingsMapFactory::GetForProfile(profile), document_url);

  content::Referrer new_referrer;
  if (brave_shields::MaybeChangeReferrer(allow_referrers, shields_up,
                                         (*referrer)->url, request_url,
                                         &new_referrer)) {
    (*referrer)->url = new_referrer.url;
    (*referrer)->policy = new_referrer.policy;
  }
}

std::optional<GURL> BraveContentBrowserClient::GetEffectiveURL(
    content::BrowserContext* browser_context,
    const GURL& url) {
  Profile* profile = Profile::FromBrowserContext(browser_context);
  if (!profile) {
    return url;
  }

#if BUILDFLAG(ENABLE_EXTENSIONS)
  if (extensions::ChromeContentBrowserClientExtensionsPart::
          AreExtensionsDisabledForProfile(profile)) {
    return url;
  }
  return ChromeContentBrowserClientExtensionsPart::GetEffectiveURL(profile,
                                                                   url);
#else
  return url;
#endif
}

// [static]
bool BraveContentBrowserClient::HandleURLOverrideRewrite(
    GURL* url,
    content::BrowserContext* browser_context) {
  // Some of these rewrites are for WebUI pages with URL that has moved.
  // After rewrite happens, GetWebUIFactoryFunction() will work as expected.
  // (see browser\ui\webui\brave_web_ui_controller_factory.cc for more info)
  //
  // Scope of schema is intentionally narrower than content::HasWebUIScheme(url)
  // which also allows both `chrome-untrusted` and `chrome-devtools`.
  if (!url->SchemeIs(content::kBraveUIScheme) &&
      !url->SchemeIs(content::kChromeUIScheme)) {
    return false;
  }

  // brave://sync => brave://settings/braveSync
  if (url->host() == chrome::kBraveUISyncHost) {
    GURL::Replacements replacements;
    replacements.SetSchemeStr(content::kChromeUIScheme);
    replacements.SetHostStr(chrome::kChromeUISettingsHost);
    replacements.SetPathStr(kBraveSyncPath);
    *url = url->ReplaceComponents(replacements);
    return true;
  }

#if !BUILDFLAG(IS_ANDROID)
  // brave://adblock => brave://settings/shields/filters
  if (url->host() == kAdblockHost) {
    GURL::Replacements replacements;
    replacements.SetSchemeStr(content::kChromeUIScheme);
    replacements.SetHostStr(chrome::kChromeUISettingsHost);
    replacements.SetPathStr(kContentFiltersPath);
    *url = url->ReplaceComponents(replacements);
    return false;
  }
#endif

  // no special win10 welcome page
  if (url->host() == kWelcomeHost) {
    *url = GURL(kWelcomeURL);
    return true;
  }

  return false;
}

void BraveContentBrowserClient::CreateThrottlesForNavigation(
    content::NavigationThrottleRegistry& registry) {
#if BUILDFLAG(ENABLE_BRAVE_REWARDS)
  // inserting the navigation throttle at the fist position before any java
  // navigation happens
  brave_rewards::RewardsProtocolNavigationThrottle::MaybeCreateAndAdd(registry);
#endif

  ChromeContentBrowserClient::CreateThrottlesForNavigation(registry);

  content::NavigationHandle& navigation_handle = registry.GetNavigationHandle();
  content::BrowserContext* context =
      navigation_handle.GetWebContents()->GetBrowserContext();

  BraveAccountNavigationThrottle::MaybeCreateAndAdd(registry);

#if !BUILDFLAG(IS_ANDROID)
  NewTabShowsNavigationThrottle::MaybeCreateAndAdd(registry);
  SplitViewLinkNavigationThrottle::MaybeCreateAndAdd(registry);
#endif

#if BUILDFLAG(ENABLE_TOR)
  tor::TorNavigationThrottle::MaybeCreateAndAdd(registry, context->IsTor());
  tor::OnionLocationNavigationThrottle::MaybeCreateAndAdd(
      registry, TorProfileServiceFactory::IsTorDisabled(context),
      context->IsTor());
#endif

#if BUILDFLAG(ENABLE_BRAVE_WALLET)
  decentralized_dns::DecentralizedDnsNavigationThrottle::MaybeCreateAndAdd(
      registry, user_prefs::UserPrefs::Get(context),
      g_browser_process->local_state(),
      g_browser_process->GetApplicationLocale());
#endif

  // Debounce
  debounce::DebounceNavigationThrottle::MaybeCreateAndAdd(
      registry,
      debounce::DebounceServiceFactory::GetForBrowserContext(context));

  // The HostContentSettingsMap might be null for some irregular profiles, e.g.
  // the System Profile.
  auto* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(context);
  if (host_content_settings_map) {
    brave_shields::DomainBlockNavigationThrottle::MaybeCreateAndAdd(
        registry, g_brave_browser_process->ad_block_service(),
        g_brave_browser_process->ad_block_service()->custom_filters_provider(),
        EphemeralStorageServiceFactory::GetForContext(context),
        host_content_settings_map, g_browser_process->GetApplicationLocale());
  }

#if BUILDFLAG(ENABLE_REQUEST_OTR)
  // Request Off-The-Record
  request_otr::RequestOTRNavigationThrottle::MaybeCreateAndAdd(
      registry,
      request_otr::RequestOTRServiceFactory::GetForBrowserContext(context),
      EphemeralStorageServiceFactory::GetForContext(context),
      Profile::FromBrowserContext(context)->GetPrefs(),
      g_browser_process->GetApplicationLocale());
#endif

#if BUILDFLAG(ENABLE_AI_CHAT)
  if (Profile::FromBrowserContext(context)->IsRegularProfile()) {
    ai_chat::AIChatThrottle::MaybeCreateAndAdd(registry);
  }

#if !BUILDFLAG(IS_ANDROID)
  ai_chat::AIChatBraveSearchThrottle::MaybeCreateAndAdd(
      base::BindOnce(&ai_chat::OpenAIChatForTab), registry,
      ai_chat::AIChatServiceFactory::GetForBrowserContext(context),
      user_prefs::UserPrefs::Get(context));
#endif
#endif

  brave_search::BackupResultsNavigationThrottle::MaybeCreateAndAdd(registry);
}

// Updates the global privacy control web preference and returns true if it is
// changed.
bool UpdateGlobalPrivacyControlWebPreference(WebContents* web_contents,
                                             WebPreferences* prefs) {
  Profile* profile =
      Profile::FromBrowserContext(web_contents->GetBrowserContext());
  CHECK(profile);

  const bool global_privacy_control_enabled =
      global_privacy_control::IsGlobalPrivacyControlEnabled(
          profile->GetPrefs());
  if (prefs->global_privacy_control_enabled == global_privacy_control_enabled) {
    return false;
  }

  prefs->global_privacy_control_enabled = global_privacy_control_enabled;
  return true;
}

bool PreventDarkModeFingerprinting(WebContents* web_contents,
                                   content::SiteInstance& main_frame_site,
                                   WebPreferences* prefs) {
  Profile* profile =
      Profile::FromBrowserContext(web_contents->GetBrowserContext());
  // The HostContentSettingsMap might be null for some irregular profiles, e.g.
  // the System Profile.
  auto* host_content_settings_map =
      HostContentSettingsMapFactory::GetForProfile(profile);
  if (!host_content_settings_map) {
    return false;
  }
  const GURL url = main_frame_site.GetSiteURL();
  const bool shields_up =
      brave_shields::GetBraveShieldsEnabled(host_content_settings_map, url);
  auto fingerprinting_type = brave_shields::GetFingerprintingControlType(
      host_content_settings_map, url);
  // https://github.com/brave/brave-browser/issues/15265
  // Always use color scheme Light if fingerprinting mode strict
  if (base::FeatureList::IsEnabled(
          brave_shields::features::kBraveDarkModeBlock) &&
      shields_up && fingerprinting_type == ControlType::BLOCK &&
      prefs->preferred_color_scheme !=
          blink::mojom::PreferredColorScheme::kLight) {
    prefs->preferred_color_scheme = blink::mojom::PreferredColorScheme::kLight;
    return true;
  }
  return false;
}

std::vector<url::Origin>
BraveContentBrowserClient::GetOriginsRequiringDedicatedProcess() {
  std::vector<url::Origin> isolated_origin_list;

  std::transform(skus::kSafeOrigins.cbegin(), skus::kSafeOrigins.cend(),
                 std::back_inserter(isolated_origin_list),
                 [](auto& url) { return url::Origin::Create(GURL(url)); });

  if (brave_search::IsDefaultAPIEnabled()) {
    std::transform(brave_search::kVettedHosts.cbegin(),
                   brave_search::kVettedHosts.cend(),
                   std::back_inserter(isolated_origin_list),
                   [](auto& url) { return url::Origin::Create(GURL(url)); });
  }

  auto origins_from_chrome =
      ChromeContentBrowserClient::GetOriginsRequiringDedicatedProcess();
  std::move(std::begin(origins_from_chrome), std::end(origins_from_chrome),
            std::back_inserter(isolated_origin_list));

  return isolated_origin_list;
}

bool BraveContentBrowserClient::OverrideWebPreferencesAfterNavigation(
    WebContents* web_contents,
    content::SiteInstance& main_frame_site,
    WebPreferences* prefs) {
  bool changed =
      ChromeContentBrowserClient::OverrideWebPreferencesAfterNavigation(
          web_contents, main_frame_site, prefs);

  return PreventDarkModeFingerprinting(web_contents, main_frame_site, prefs) ||
         UpdateGlobalPrivacyControlWebPreference(web_contents, prefs) ||
         changed;
}

void BraveContentBrowserClient::OverrideWebPreferences(
    WebContents* web_contents,
    content::SiteInstance& main_frame_site,
    WebPreferences* web_prefs) {
  ChromeContentBrowserClient::OverrideWebPreferences(
      web_contents, main_frame_site, web_prefs);
  PreventDarkModeFingerprinting(web_contents, main_frame_site, web_prefs);
  UpdateGlobalPrivacyControlWebPreference(web_contents, web_prefs);

#if BUILDFLAG(ENABLE_PLAYLIST)
  if (playlist::PlaylistBackgroundWebContentsHelper::FromWebContents(
          web_contents)) {
    web_prefs->force_cosmetic_filtering = true;
  }
#endif  // BUILDFLAG(ENABLE_PLAYLIST)
}

blink::UserAgentMetadata BraveContentBrowserClient::GetUserAgentMetadata() {
  blink::UserAgentMetadata metadata =
      ChromeContentBrowserClient::GetUserAgentMetadata();
  // Expect the brand version lists to have brand version, chromium_version, and
  // greased version.
  base::CommandLine* command_line = base::CommandLine::ForCurrentProcess();
  if (command_line->HasSwitch(embedder_support::kUserAgent)) {
    return metadata;
  }
  DCHECK_EQ(3UL, metadata.brand_version_list.size());
  DCHECK_EQ(3UL, metadata.brand_full_version_list.size());
  // Zero out the last 3 version components in full version list versions.
  for (auto& brand_version : metadata.brand_full_version_list) {
    base::Version version(brand_version.version);
    brand_version.version =
        base::StrCat({base::NumberToString(version.components()[0]), ".0.0.0"});
  }
  // Zero out the last 3 version components in full version.
  base::Version version(metadata.full_version);
  metadata.full_version =
      base::StrCat({base::NumberToString(version.components()[0]), ".0.0.0"});
  return metadata;
}

std::optional<GURL> BraveContentBrowserClient::SanitizeURL(
    content::RenderFrameHost* render_frame_host,
    const GURL& url) {
  if (!base::FeatureList::IsEnabled(features::kBraveCopyCleanLinkFromJs)) {
    return std::nullopt;
  }
  CHECK(render_frame_host);
  CHECK(render_frame_host->GetBrowserContext());
  auto* url_sanitizer_service =
      brave::URLSanitizerServiceFactory::GetForBrowserContext(
          render_frame_host->GetBrowserContext());
  CHECK(url_sanitizer_service);
  if (!url_sanitizer_service->CheckJsPermission(
          render_frame_host->GetLastCommittedURL())) {
    return std::nullopt;
  }
  const GURL& sanitized_url = url_sanitizer_service->SanitizeURL(url);
  if (sanitized_url == url) {
    // No actual replacements were made.
    return std::nullopt;
  }
  return sanitized_url;
}

bool BraveContentBrowserClient::IsWindowsRecallDisabled() {
#if BUILDFLAG(IS_WIN)
  return windows_recall::IsWindowsRecallDisabled(
      g_browser_process->local_state());
#else
  return false;
#endif
}

bool BraveContentBrowserClient::ShouldInheritStoragePartition(
    const content::StoragePartitionConfig& partition_config) const {
#if BUILDFLAG(ENABLE_CONTAINERS)
  return base::FeatureList::IsEnabled(containers::features::kContainers) &&
         containers::IsContainersStoragePartition(partition_config);
#else
  return false;
#endif  // BUILDFLAG(ENABLE_CONTAINERS)
}

bool BraveContentBrowserClient::AllowSignedExchange(
    content::BrowserContext* context) {
  // This override has been introduced due to the deletion of the flag
  // `features::kSignedHTTPExchange`, which was being used to disable signed
  // exchanges.
  return false;
}

#if !BUILDFLAG(IS_ANDROID)
content::HidDelegate* BraveContentBrowserClient::GetHidDelegate() {
  if (!brave_hid_delegate_) {
    brave_hid_delegate_ = std::make_unique<BraveHidDelegate>();
  }
  return brave_hid_delegate_.get();
}
#endif  // !BUILDFLAG(IS_ANDROID)

bool BraveContentBrowserClient::IsJitDisabledForSite(
    content::BrowserContext* browser_context,
    const GURL& site_url) {
  // When v8-jitless-mode flag is enabled, V8 optimizer
  // settings should disable JIT completely, not just optimizations
  if (!AreV8OptimizationsEnabledForSite(browser_context, std::nullopt,
                                        site_url) &&
      base::FeatureList::IsEnabled(features::kBraveV8JitlessMode)) {
    return true;
  }

  return ChromeContentBrowserClient::IsJitDisabledForSite(browser_context,
                                                          site_url);
}