HSTS: add net-internals UI.

chrome/browser/dom_ui/net_internals_ui.cc

 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/dom_ui/net_internals_ui.h"
 
 #include <algorithm>
 #include <string>
 #include <utility>
 #include <vector>
 
 #include "base/command_line.h"
 #include "base/file_util.h"
 #include "base/message_loop.h"
 #include "base/path_service.h"
 #include "base/singleton.h"
 #include "base/string_number_conversions.h"
 #include "base/string_piece.h"
+#include "base/string_util.h"
 #include "base/utf_string_conversions.h"
 #include "base/values.h"
 #include "chrome/browser/browser_process.h"
 #include "chrome/browser/browser_thread.h"
 #include "chrome/browser/dom_ui/chrome_url_data_manager.h"
 #include "chrome/browser/io_thread.h"
 #include "chrome/browser/net/chrome_net_log.h"
 #include "chrome/browser/net/connection_tester.h"
 #include "chrome/browser/net/passive_log_collector.h"
 #include "chrome/browser/net/url_fixer_upper.h"
@@ skipping 219 matching lines @@
   void OnRendererReady(const ListValue* list);
 
   void OnGetProxySettings(const ListValue* list);
   void OnReloadProxySettings(const ListValue* list);
   void OnGetBadProxies(const ListValue* list);
   void OnClearBadProxies(const ListValue* list);
   void OnGetHostResolverInfo(const ListValue* list);
   void OnClearHostResolverCache(const ListValue* list);
   void OnEnableIPv6(const ListValue* list);
   void OnStartConnectionTests(const ListValue* list);
+  void OnHSTSQuery(const ListValue* list);
+  void OnHSTSAdd(const ListValue* list);
+  void OnHSTSDelete(const ListValue* list);
   void OnGetHttpCacheInfo(const ListValue* list);
   void OnGetSocketPoolInfo(const ListValue* list);
   void OnGetSpdySessionInfo(const ListValue* list);
   void OnGetSpdyStatus(const ListValue* list);
   void OnGetSpdyAlternateProtocolMappings(const ListValue* list);
 #ifdef OS_WIN
   void OnGetServiceProviders(const ListValue* list);
 #endif
 
   void OnSetLogLevel(const ListValue* list);
@@ skipping 232 matching lines @@
   dom_ui_->RegisterMessageCallback(
       "clearHostResolverCache",
       proxy_->CreateCallback(&IOThreadImpl::OnClearHostResolverCache));
   dom_ui_->RegisterMessageCallback(
       "enableIPv6",
       proxy_->CreateCallback(&IOThreadImpl::OnEnableIPv6));
   dom_ui_->RegisterMessageCallback(
       "startConnectionTests",
       proxy_->CreateCallback(&IOThreadImpl::OnStartConnectionTests));
   dom_ui_->RegisterMessageCallback(
+      "hstsQuery",
+      proxy_->CreateCallback(&IOThreadImpl::OnHSTSQuery));
+  dom_ui_->RegisterMessageCallback(
+      "hstsAdd",
+      proxy_->CreateCallback(&IOThreadImpl::OnHSTSAdd));
+  dom_ui_->RegisterMessageCallback(
+      "hstsDelete",
+      proxy_->CreateCallback(&IOThreadImpl::OnHSTSDelete));
+  dom_ui_->RegisterMessageCallback(
       "getHttpCacheInfo",
       proxy_->CreateCallback(&IOThreadImpl::OnGetHttpCacheInfo));
   dom_ui_->RegisterMessageCallback(
       "getSocketPoolInfo",
       proxy_->CreateCallback(&IOThreadImpl::OnGetSocketPoolInfo));
   dom_ui_->RegisterMessageCallback(
       "getSpdySessionInfo",
       proxy_->CreateCallback(&IOThreadImpl::OnGetSpdySessionInfo));
   dom_ui_->RegisterMessageCallback(
       "getSpdyStatus",
@@ skipping 427 matching lines @@
 
   // Try to fix-up the user provided URL into something valid.
   // For example, turn "www.google.com" into "http://www.google.com".
   GURL url(URLFixerUpper::FixupURL(UTF16ToUTF8(url_str), std::string()));
 
   connection_tester_.reset(new ConnectionTester(
       this, io_thread_->globals()->proxy_script_fetcher_context.get()));
   connection_tester_->RunAllTests(url);
 }
 
+void NetInternalsMessageHandler::IOThreadImpl::OnHSTSQuery(
+    const ListValue* list) {
+  // |list| should be: [<domain to query>].
+  std::string domain;
+  CHECK(list->GetString(0, &domain));
+  DictionaryValue* result = new(DictionaryValue);
+
+  if (!IsStringASCII(domain)) {
+    result->SetString("error", "non-ASCII domain name");
+  } else {
+    net::TransportSecurityState* transport_security_state =
+        context_getter_->GetURLRequestContext()->transport_security_state();
+    if (!transport_security_state) {
+      result->SetString("error", "no TransportSecurityState active");
+    } else {
+      net::TransportSecurityState::DomainState state;
+      const bool found = transport_security_state->IsEnabledForHost(
+          &state, domain);
+
+      result->SetBoolean("result", found);
+      if (found) {
+        result->SetInteger("mode", static_cast<int>(state.mode));
+        result->SetBoolean("subdomains", state.include_subdomains);
+        result->SetBoolean("preloaded", state.preloaded);
+        result->SetString("domain", state.domain);
+      }
+    }
+  }
+
+  CallJavascriptFunction(L"g_browser.receivedHSTSResult", result);
+}
+
+void NetInternalsMessageHandler::IOThreadImpl::OnHSTSAdd(
+    const ListValue* list) {
+  // |list| should be: [<domain to query>, <include subdomains>].
+  std::string domain;
+  CHECK(list->GetString(0, &domain));
+  if (!IsStringASCII(domain)) {
+    // Silently fail. The user will get a helpful error if they query for the
+    // name.
+    return;
+  }
+  bool include_subdomains;
+  CHECK(list->GetBoolean(1, &include_subdomains));
+
+  net::TransportSecurityState* transport_security_state =
+      context_getter_->GetURLRequestContext()->transport_security_state();
+  if (!transport_security_state)
+    return;
+
+  net::TransportSecurityState::DomainState state;
+  state.expiry = state.created + base::TimeDelta::FromDays(1000);
+  state.include_subdomains = include_subdomains;
+
+  transport_security_state->EnableHost(domain, state);
+}
+
+void NetInternalsMessageHandler::IOThreadImpl::OnHSTSDelete(
+    const ListValue* list) {
+  // |list| should be: [<domain to query>].
+  std::string domain;
+  CHECK(list->GetString(0, &domain));
+  if (!IsStringASCII(domain)) {
+    // There cannot be a unicode entry in the HSTS set.
+    return;
+  }
+  net::TransportSecurityState* transport_security_state =
+      context_getter_->GetURLRequestContext()->transport_security_state();
+  if (!transport_security_state)
+    return;
+
+  transport_security_state->DeleteHost(domain);
+}
+
 void NetInternalsMessageHandler::IOThreadImpl::OnGetHttpCacheInfo(
     const ListValue* list) {
   DictionaryValue* info_dict = new DictionaryValue();
   DictionaryValue* stats_dict = new DictionaryValue();
 
   disk_cache::Backend* disk_cache = GetDiskCacheBackend(
       context_getter_->GetURLRequestContext());
 
   if (disk_cache) {
     // Extract the statistics key/value pairs from the backend.
@@ skipping 252 matching lines @@
 ////////////////////////////////////////////////////////////////////////////////
 
 NetInternalsUI::NetInternalsUI(TabContents* contents) : WebUI(contents) {
   AddMessageHandler((new NetInternalsMessageHandler())->Attach(this));
 
   NetInternalsHTMLSource* html_source = new NetInternalsHTMLSource();
 
   // Set up the chrome://net-internals/ source.
   contents->profile()->GetChromeURLDataManager()->AddDataSource(html_source);
 }