| OLD | NEW |
| (Empty) |
| 1 // Copyright (c) 2010 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #ifndef CHROME_BROWSER_SSL_SSL_POLICY_H_ | |
| 6 #define CHROME_BROWSER_SSL_SSL_POLICY_H_ | |
| 7 #pragma once | |
| 8 | |
| 9 #include <string> | |
| 10 | |
| 11 #include "chrome/browser/ssl/ssl_blocking_page.h" | |
| 12 #include "webkit/glue/resource_type.h" | |
| 13 | |
| 14 class NavigationEntry; | |
| 15 class SSLCertErrorHandler; | |
| 16 class SSLPolicyBackend; | |
| 17 class SSLRequestInfo; | |
| 18 | |
| 19 // SSLPolicy | |
| 20 // | |
| 21 // This class is responsible for making the security decisions that concern the | |
| 22 // SSL trust indicators. It relies on the SSLPolicyBackend to actually enact | |
| 23 // the decisions it reaches. | |
| 24 // | |
| 25 class SSLPolicy : public SSLBlockingPage::Delegate { | |
| 26 public: | |
| 27 explicit SSLPolicy(SSLPolicyBackend* backend); | |
| 28 | |
| 29 // An error occurred with the certificate in an SSL connection. | |
| 30 void OnCertError(SSLCertErrorHandler* handler); | |
| 31 | |
| 32 void DidRunInsecureContent(NavigationEntry* entry, | |
| 33 const std::string& security_origin); | |
| 34 | |
| 35 // We have started a resource request with the given info. | |
| 36 void OnRequestStarted(SSLRequestInfo* info); | |
| 37 | |
| 38 // Update the SSL information in |entry| to match the current state. | |
| 39 // |tab_contents| is the TabContents associated with this entry. | |
| 40 void UpdateEntry(NavigationEntry* entry, TabContents* tab_contents); | |
| 41 | |
| 42 SSLPolicyBackend* backend() const { return backend_; } | |
| 43 | |
| 44 // SSLBlockingPage::Delegate methods. | |
| 45 virtual SSLErrorInfo GetSSLErrorInfo(SSLCertErrorHandler* handler); | |
| 46 virtual void OnDenyCertificate(SSLCertErrorHandler* handler); | |
| 47 virtual void OnAllowCertificate(SSLCertErrorHandler* handler); | |
| 48 | |
| 49 private: | |
| 50 // Helper method for derived classes handling certificate errors. | |
| 51 // If the error can be overridden by the user, show a blocking page that | |
| 52 // lets the user continue or cancel the request. | |
| 53 // For fatal certificate errors, show a blocking page that only lets the | |
| 54 // user cancel the request. | |
| 55 void OnCertErrorInternal(SSLCertErrorHandler* handler, | |
| 56 SSLBlockingPage::ErrorLevel error_level); | |
| 57 | |
| 58 // If the security style of |entry| has not been initialized, then initialize | |
| 59 // it with the default style for its URL. | |
| 60 void InitializeEntryIfNeeded(NavigationEntry* entry); | |
| 61 | |
| 62 // Mark |origin| as having run insecure content in the process with ID |pid|. | |
| 63 void OriginRanInsecureContent(const std::string& origin, int pid); | |
| 64 | |
| 65 // The backend we use to enact our decisions. | |
| 66 SSLPolicyBackend* backend_; | |
| 67 | |
| 68 DISALLOW_COPY_AND_ASSIGN(SSLPolicy); | |
| 69 }; | |
| 70 | |
| 71 #endif // CHROME_BROWSER_SSL_SSL_POLICY_H_ | |
| OLD | NEW |