Ignore *.corp.google.* as GoogleBaseURL

chrome/browser/google_url_tracker.cc

-// Copyright (c) 2006-2008 The Chromium Authors. All rights reserved.
+// Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/google_url_tracker.h"
 
 #include <vector>
 
 #include "base/compiler_specific.h"
 #include "base/string_util.h"
 #include "base/utf_string_conversions.h"
@@ skipping 60 matching lines @@
   // Only allow updates if the new URL appears to be on google.xx, google.co.xx,
   // or google.com.xx.  Cases other than this are either malicious, or doorway
   // pages for hotel WiFi connections and the like.
   // NOTE: Obviously the above is not as secure as whitelisting all known Google
   // frontpage domains, but for now we're trying to prevent login pages etc.
   // from ruining the user experience, rather than preventing hijacking.
   std::vector<std::string> host_components;
   SplitStringDontTrim(url.host(), '.', &host_components);
   if (host_components.size() < 2)
     return false;
-  std::string& component = host_components[host_components.size() - 2];
+  size_t google_component = host_components.size() - 2;
+  const std::string& component = host_components[google_component];
   if (component != "google") {
     if ((host_components.size() < 3) ||
         ((component != "co") && (component != "com")))
       return false;
-    if (host_components[host_components.size() - 3] != "google")
+    google_component = host_components.size() - 3;
+    if (host_components[google_component] != "google")
       return false;
   }
+  // For Google employees only: If the URL appears to be on
+  // [*.]corp.google.com, it's likely a doorway (e.g.
+  // wifi.corp.google.com), so ignore it.
+  if ((google_component > 0) &&
+      (host_components[google_component - 1] == "corp"))
+    return false;
 
   // If the url's path does not begin "/intl/", reset it to "/".  Other paths
   // represent services such as iGoogle that are irrelevant to the baseURL.
   *base_url = url.path().compare(0, 6, "/intl/") ? url.GetWithEmptyPath() : url;
   return true;
 }
 
 void GoogleURLTracker::SetNeedToFetch() {
   need_to_fetch_ = true;
   StartFetchIfDesirable();
@@ skipping 62 matching lines @@
   }
 }
 
 void GoogleURLTracker::Observe(NotificationType type,
                                const NotificationSource& source,
                                const NotificationDetails& details) {
   DCHECK_EQ(NotificationType::DEFAULT_REQUEST_CONTEXT_AVAILABLE, type.value);
   request_context_available_ = true;
   StartFetchIfDesirable();
 }