Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(330)

Side by Side Diff: chrome/common/win_safe_util.cc

Issue 7388002: Move dependencies of download\base_file from chrome to content. These are all trivial file moves. (Closed) Base URL: svn://chrome-svn/chrome/trunk/src/
Patch Set: '' Created 9 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « chrome/common/win_safe_util.h ('k') | content/browser/download/base_file.h » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
(Empty)
1 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #include <shlobj.h>
6 #include <shobjidl.h>
7
8 #include "chrome/common/win_safe_util.h"
9
10 #include "base/file_path.h"
11 #include "base/logging.h"
12 #include "base/path_service.h"
13 #include "base/string_util.h"
14 #include "base/win/scoped_comptr.h"
15 #include "ui/base/win/shell.h"
16
17 namespace {
18
19 // This GUID is associated with any 'don't ask me again' settings that the
20 // user can select for different file types.
21 // {2676A9A2-D919-4fee-9187-152100393AB2}
22 static const GUID kClientID = { 0x2676a9a2, 0xd919, 0x4fee,
23 { 0x91, 0x87, 0x15, 0x21, 0x0, 0x39, 0x3a, 0xb2 } };
24
25 // Directly writes the ZoneIdentifier stream, without using the
26 // IAttachmentExecute service.
27 bool SetInternetZoneIdentifierDirectly(const FilePath& full_path) {
28 const DWORD kShare = FILE_SHARE_READ | FILE_SHARE_WRITE | FILE_SHARE_DELETE;
29 std::wstring path = full_path.value() + L":Zone.Identifier";
30 HANDLE file = CreateFile(path.c_str(), GENERIC_WRITE, kShare, NULL,
31 OPEN_ALWAYS, FILE_ATTRIBUTE_NORMAL, NULL);
32 if (INVALID_HANDLE_VALUE == file)
33 return false;
34
35 static const char kIdentifier[] = "[ZoneTransfer]\r\nZoneId=3\r\n";
36 // Don't include trailing null in data written.
37 static const DWORD kIdentifierSize = arraysize(kIdentifier) - 1;
38 DWORD written = 0;
39 BOOL result = WriteFile(file, kIdentifier, kIdentifierSize, &written,
40 NULL);
41 BOOL flush_result = FlushFileBuffers(file);
42 CloseHandle(file);
43
44 if (!result || !flush_result || written != kIdentifierSize) {
45 NOTREACHED();
46 return false;
47 }
48
49 return true;
50 }
51
52 }
53
54 namespace win_util {
55
56 // This function implementation is based on the attachment execution
57 // services functionally deployed with IE6 or Service pack 2. This
58 // functionality is exposed in the IAttachmentExecute COM interface.
59 // more information at:
60 // http://msdn2.microsoft.com/en-us/library/ms647048.aspx
61 bool SaferOpenItemViaShell(HWND hwnd, const std::wstring& window_title,
62 const FilePath& full_path,
63 const std::wstring& source_url) {
64 base::win::ScopedComPtr<IAttachmentExecute> attachment_services;
65 HRESULT hr = attachment_services.CreateInstance(CLSID_AttachmentServices);
66 if (FAILED(hr)) {
67 // We don't have Attachment Execution Services, it must be a pre-XP.SP2
68 // Windows installation, or the thread does not have COM initialized.
69 if (hr == CO_E_NOTINITIALIZED) {
70 NOTREACHED();
71 return false;
72 }
73 return ui::win::OpenItemViaShell(full_path);
74 }
75
76 attachment_services->SetClientGuid(kClientID);
77
78 if (!window_title.empty())
79 attachment_services->SetClientTitle(window_title.c_str());
80
81 // To help windows decide if the downloaded file is dangerous we can provide
82 // what the documentation calls evidence. Which we provide now:
83 //
84 // Set the file itself as evidence.
85 hr = attachment_services->SetLocalPath(full_path.value().c_str());
86 if (FAILED(hr))
87 return false;
88 // Set the origin URL as evidence.
89 hr = attachment_services->SetSource(source_url.c_str());
90 if (FAILED(hr))
91 return false;
92
93 // Now check the windows policy.
94 if (attachment_services->CheckPolicy() != S_OK) {
95 // It is possible that the above call returns an undocumented result
96 // equal to 0x800c000e which seems to indicate that the URL failed the
97 // the security check. If you proceed with the Prompt() call the
98 // Shell might show a dialog that says:
99 // "windows found that this file is potentially harmful. To help protect
100 // your computer, Windows has blocked access to this file."
101 // Upon dismissal of the dialog windows will delete the file (!!).
102 // So, we can 'return' in that case but maybe is best to let it happen to
103 // fail on the safe side.
104
105 ATTACHMENT_ACTION action;
106 // We cannot control what the prompt says or does directly but it
107 // is a pretty decent dialog; for example, if an executable is signed it can
108 // decode and show the publisher and the certificate.
109 hr = attachment_services->Prompt(hwnd, ATTACHMENT_PROMPT_EXEC, &action);
110 if (FAILED(hr) || (ATTACHMENT_ACTION_CANCEL == action)) {
111 // The user has declined opening the item.
112 return false;
113 }
114 }
115 return ui::win::OpenItemViaShellNoZoneCheck(full_path);
116 }
117
118 bool SetInternetZoneIdentifier(const FilePath& full_path,
119 const std::wstring& source_url) {
120 base::win::ScopedComPtr<IAttachmentExecute> attachment_services;
121 HRESULT hr = attachment_services.CreateInstance(CLSID_AttachmentServices);
122
123 if (FAILED(hr)) {
124 // We don't have Attachment Execution Services, it must be a pre-XP.SP2
125 // Windows installation, or the thread does not have COM initialized.
126 if (hr == CO_E_NOTINITIALIZED) {
127 NOTREACHED();
128 return false;
129 }
130
131 // Write the ZoneIdentifier file directly.
132 return SetInternetZoneIdentifierDirectly(full_path);
133 }
134
135 hr = attachment_services->SetClientGuid(kClientID);
136 if (FAILED(hr))
137 return false;
138
139 hr = attachment_services->SetLocalPath(full_path.value().c_str());
140 if (FAILED(hr))
141 return false;
142
143 // Source is necessary for files ending in ".tmp" to avoid error 0x800c000e.
144 hr = attachment_services->SetSource(source_url.c_str());
145 if (FAILED(hr))
146 return false;
147
148 hr = attachment_services->Save();
149 if (FAILED(hr))
150 return false;
151
152 return true;
153 }
154
155 } // namespace win_util
OLDNEW
« no previous file with comments | « chrome/common/win_safe_util.h ('k') | content/browser/download/base_file.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698