OLD | NEW |
| (Empty) |
1 // Copyright (c) 2010 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef CHROME_BROWSER_SSL_SSL_POLICY_H_ | |
6 #define CHROME_BROWSER_SSL_SSL_POLICY_H_ | |
7 #pragma once | |
8 | |
9 #include <string> | |
10 | |
11 #include "chrome/browser/ssl/ssl_blocking_page.h" | |
12 #include "webkit/glue/resource_type.h" | |
13 | |
14 class NavigationEntry; | |
15 class SSLCertErrorHandler; | |
16 class SSLPolicyBackend; | |
17 class SSLRequestInfo; | |
18 | |
19 // SSLPolicy | |
20 // | |
21 // This class is responsible for making the security decisions that concern the | |
22 // SSL trust indicators. It relies on the SSLPolicyBackend to actually enact | |
23 // the decisions it reaches. | |
24 // | |
25 class SSLPolicy : public SSLBlockingPage::Delegate { | |
26 public: | |
27 explicit SSLPolicy(SSLPolicyBackend* backend); | |
28 | |
29 // An error occurred with the certificate in an SSL connection. | |
30 void OnCertError(SSLCertErrorHandler* handler); | |
31 | |
32 void DidRunInsecureContent(NavigationEntry* entry, | |
33 const std::string& security_origin); | |
34 | |
35 // We have started a resource request with the given info. | |
36 void OnRequestStarted(SSLRequestInfo* info); | |
37 | |
38 // Update the SSL information in |entry| to match the current state. | |
39 // |tab_contents| is the TabContents associated with this entry. | |
40 void UpdateEntry(NavigationEntry* entry, TabContents* tab_contents); | |
41 | |
42 SSLPolicyBackend* backend() const { return backend_; } | |
43 | |
44 // SSLBlockingPage::Delegate methods. | |
45 virtual SSLErrorInfo GetSSLErrorInfo(SSLCertErrorHandler* handler); | |
46 virtual void OnDenyCertificate(SSLCertErrorHandler* handler); | |
47 virtual void OnAllowCertificate(SSLCertErrorHandler* handler); | |
48 | |
49 private: | |
50 // Helper method for derived classes handling certificate errors. | |
51 // If the error can be overridden by the user, show a blocking page that | |
52 // lets the user continue or cancel the request. | |
53 // For fatal certificate errors, show a blocking page that only lets the | |
54 // user cancel the request. | |
55 void OnCertErrorInternal(SSLCertErrorHandler* handler, | |
56 SSLBlockingPage::ErrorLevel error_level); | |
57 | |
58 // If the security style of |entry| has not been initialized, then initialize | |
59 // it with the default style for its URL. | |
60 void InitializeEntryIfNeeded(NavigationEntry* entry); | |
61 | |
62 // Mark |origin| as having run insecure content in the process with ID |pid|. | |
63 void OriginRanInsecureContent(const std::string& origin, int pid); | |
64 | |
65 // The backend we use to enact our decisions. | |
66 SSLPolicyBackend* backend_; | |
67 | |
68 DISALLOW_COPY_AND_ASSIGN(SSLPolicy); | |
69 }; | |
70 | |
71 #endif // CHROME_BROWSER_SSL_SSL_POLICY_H_ | |
OLD | NEW |