HSTS: add net-internals UI.

chrome/browser/dom_ui/net_internals_ui.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/dom_ui/net_internals_ui.h"
 
 #include <algorithm>
 #include <string>
 #include <utility>
 #include <vector>
@@ skipping 237 matching lines @@
   void OnRendererReady(const ListValue* list);
 
   void OnGetProxySettings(const ListValue* list);
   void OnReloadProxySettings(const ListValue* list);
   void OnGetBadProxies(const ListValue* list);
   void OnClearBadProxies(const ListValue* list);
   void OnGetHostResolverInfo(const ListValue* list);
   void OnClearHostResolverCache(const ListValue* list);
   void OnEnableIPv6(const ListValue* list);
   void OnStartConnectionTests(const ListValue* list);
+  void OnHSTSQuery(const ListValue* list);
+  void OnHSTSAdd(const ListValue* list);
+  void OnHSTSDelete(const ListValue* list);
   void OnGetHttpCacheInfo(const ListValue* list);
   void OnGetSocketPoolInfo(const ListValue* list);
   void OnGetSpdySessionInfo(const ListValue* list);
   void OnGetSpdyStatus(const ListValue* list);
   void OnGetSpdyAlternateProtocolMappings(const ListValue* list);
 #ifdef OS_WIN
   void OnGetServiceProviders(const ListValue* list);
 #endif
 
   void OnSetLogLevel(const ListValue* list);
@@ skipping 232 matching lines @@
   dom_ui_->RegisterMessageCallback(
       "clearHostResolverCache",
       proxy_->CreateCallback(&IOThreadImpl::OnClearHostResolverCache));
   dom_ui_->RegisterMessageCallback(
       "enableIPv6",
       proxy_->CreateCallback(&IOThreadImpl::OnEnableIPv6));
   dom_ui_->RegisterMessageCallback(
       "startConnectionTests",
       proxy_->CreateCallback(&IOThreadImpl::OnStartConnectionTests));
   dom_ui_->RegisterMessageCallback(
+      "hstsQuery",
+      proxy_->CreateCallback(&IOThreadImpl::OnHSTSQuery));
+  dom_ui_->RegisterMessageCallback(
+      "hstsAdd",
+      proxy_->CreateCallback(&IOThreadImpl::OnHSTSAdd));
+  dom_ui_->RegisterMessageCallback(
+      "hstsDelete",
+      proxy_->CreateCallback(&IOThreadImpl::OnHSTSDelete));
+  dom_ui_->RegisterMessageCallback(
       "getHttpCacheInfo",
       proxy_->CreateCallback(&IOThreadImpl::OnGetHttpCacheInfo));
   dom_ui_->RegisterMessageCallback(
       "getSocketPoolInfo",
       proxy_->CreateCallback(&IOThreadImpl::OnGetSocketPoolInfo));
   dom_ui_->RegisterMessageCallback(
       "getSpdySessionInfo",
       proxy_->CreateCallback(&IOThreadImpl::OnGetSpdySessionInfo));
   dom_ui_->RegisterMessageCallback(
       "getSpdyStatus",
@@ skipping 427 matching lines @@
 
   // Try to fix-up the user provided URL into something valid.
   // For example, turn "www.google.com" into "http://www.google.com".
   GURL url(URLFixerUpper::FixupURL(UTF16ToUTF8(url_str), std::string()));
 
   connection_tester_.reset(new ConnectionTester(
       this, io_thread_->globals()->proxy_script_fetcher_context.get()));
   connection_tester_->RunAllTests(url);
 }
 
+void NetInternalsMessageHandler::IOThreadImpl::OnHSTSQuery(
+    const ListValue* list) {
+  // |list| should be: [<domain to query>].
+  std::string domain;
+  CHECK(list->GetString(0, &domain));

[eroman, 2011/02/16 20:12:45]

Note that GetString() is going to give you a UTF-8 encoded string --> it is not
necessarily ascii.

Would be good to restrict the inputs to ASCII here, sine the
transportsecuritystate is not prepared to handle unicode.

(it isn't inconceivable that a user might try to enter an IDNA hostname using
unicode).

[agl, 2011/02/16 22:46:22]

Restricted to ASCII.

+  net::TransportSecurityState* transport_security_state =
+    context_getter_->GetURLRequestContext()->transport_security_state();

[eroman, 2011/02/16 20:12:45]

nit: indent by 4.

[agl, 2011/02/16 22:46:22]

Done.

+  if (!transport_security_state)
+    return;

[eroman, 2011/02/16 20:12:45]

I think it would be better to call g_browser.recenvedHSTSResult() with an empty
result. Never responding to the requests could make it look like a hang.

[agl, 2011/02/16 22:46:22]

Now replies with error.

+
+  net::TransportSecurityState::DomainState state;
+  const bool r = transport_security_state->IsEnabledForHost(&state, domain);

[eroman, 2011/02/16 20:12:45]

can you use a more descriptive variable name than "r"?

[agl, 2011/02/16 22:46:22]

Done.

+
+  DictionaryValue* result = new(DictionaryValue);
+  result->SetBoolean("result", r);
+  if (r) {
+    result->SetInteger("mode", static_cast<int>(state.mode));
+    result->SetDouble("created", static_cast<double>(state.created.ToTimeT()));

[eroman, 2011/02/16 20:12:45]

Are you sure this works?

Isn't Chrome representing timestamps internally using Windows Epoch on all
platforms? It is generally better to pass a unix timestamp to the javascript,
since its date functions can deal with that.

Also nit, you can use Time::ToDoubleT() to avoid the cast...

[agl, 2011/02/16 22:46:22]

I didn't end up exposing the timestamps anyway so I've removed this.

+    result->SetDouble("expiry", static_cast<double>(state.expiry.ToTimeT()));
+    result->SetBoolean("subdomains", state.include_subdomains);
+    result->SetBoolean("preloaded", state.preloaded);
+    result->SetString("domain", state.domain);
+  }
+  CallJavascriptFunction(L"g_browser.receivedHSTSResult", result);
+}
+
+void NetInternalsMessageHandler::IOThreadImpl::OnHSTSAdd(
+    const ListValue* list) {
+  // |list| should be: [<domain to query>, <include subdomains>].
+  std::string domain;
+  CHECK(list->GetString(0, &domain));
+  bool include_subdomains;
+  CHECK(list->GetBoolean(1, &include_subdomains));
+
+  net::TransportSecurityState* transport_security_state =
+    context_getter_->GetURLRequestContext()->transport_security_state();

[eroman, 2011/02/16 20:12:45]

indent continued lines by 4.

[agl, 2011/02/16 22:46:22]

Done.

+  if (!transport_security_state)
+    return;
+
+  net::TransportSecurityState::DomainState state;
+  state.expiry = state.created + base::TimeDelta::FromDays(1000);

[eroman, 2011/02/16 20:12:45]

What is the significance of 1000 days?

[agl, 2011/02/16 22:46:22]

It's long enough to be useful basically. This is intended to be used as a cheap
way for sites to test HSTS without risk of breaking users.

+  state.include_subdomains = include_subdomains;
+
+  transport_security_state->EnableHost(domain, state);
+}
+
+void NetInternalsMessageHandler::IOThreadImpl::OnHSTSDelete(
+    const ListValue* list) {
+  // |list| should be: [<domain to query>].
+  std::string domain;
+  CHECK(list->GetString(0, &domain));
+  net::TransportSecurityState* transport_security_state =
+    context_getter_->GetURLRequestContext()->transport_security_state();

[eroman, 2011/02/16 20:12:45]

indent by 4

[agl, 2011/02/16 22:46:22]

Done.

+  if (!transport_security_state)
+    return;
+
+  transport_security_state->DeleteHost(domain);
+}
+
 void NetInternalsMessageHandler::IOThreadImpl::OnGetHttpCacheInfo(
     const ListValue* list) {
   DictionaryValue* info_dict = new DictionaryValue();
   DictionaryValue* stats_dict = new DictionaryValue();
 
   disk_cache::Backend* disk_cache = GetDiskCacheBackend(
       context_getter_->GetURLRequestContext());
 
   if (disk_cache) {
     // Extract the statistics key/value pairs from the backend.
@@ skipping 252 matching lines @@
 ////////////////////////////////////////////////////////////////////////////////
 
 NetInternalsUI::NetInternalsUI(TabContents* contents) : WebUI(contents) {
   AddMessageHandler((new NetInternalsMessageHandler())->Attach(this));
 
   NetInternalsHTMLSource* html_source = new NetInternalsHTMLSource();
 
   // Set up the chrome://net-internals/ source.
   contents->profile()->GetChromeURLDataManager()->AddDataSource(html_source);
 }