Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(419)

Side by Side Diff: chrome/browser/safe_browsing/ping_manager.cc

Issue 1073913004: Revert of Encrypt certificate reports before uploading to HTTP URLs (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Created 5 years, 8 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « chrome/browser/net/certificate_error_reporter_unittest.cc ('k') | crypto/aead_openssl.h » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "chrome/browser/safe_browsing/ping_manager.h" 5 #include "chrome/browser/safe_browsing/ping_manager.h"
6 6
7 #include "base/logging.h" 7 #include "base/logging.h"
8 #include "base/stl_util.h" 8 #include "base/stl_util.h"
9 #include "base/strings/string_util.h" 9 #include "base/strings/string_util.h"
10 #include "base/strings/stringprintf.h" 10 #include "base/strings/stringprintf.h"
11 #include "chrome/browser/net/certificate_error_reporter.h" 11 #include "chrome/browser/net/certificate_error_reporter.h"
12 #include "chrome/common/env_vars.h" 12 #include "chrome/common/env_vars.h"
13 #include "content/public/browser/browser_thread.h" 13 #include "content/public/browser/browser_thread.h"
14 #include "google_apis/google_api_keys.h" 14 #include "google_apis/google_api_keys.h"
15 #include "net/base/escape.h" 15 #include "net/base/escape.h"
16 #include "net/base/load_flags.h" 16 #include "net/base/load_flags.h"
17 #include "net/ssl/ssl_info.h" 17 #include "net/ssl/ssl_info.h"
18 #include "net/url_request/url_fetcher.h" 18 #include "net/url_request/url_fetcher.h"
19 #include "net/url_request/url_request_context_getter.h" 19 #include "net/url_request/url_request_context_getter.h"
20 #include "net/url_request/url_request_status.h" 20 #include "net/url_request/url_request_status.h"
21 #include "url/gurl.h" 21 #include "url/gurl.h"
22 22
23 using chrome_browser_net::CertificateErrorReporter; 23 using chrome_browser_net::CertificateErrorReporter;
24 using content::BrowserThread; 24 using content::BrowserThread;
25 25
26 namespace { 26 namespace {
27 // URLs to upload invalid certificate chain reports. The HTTP URL is 27 // URL to upload invalid certificate chain reports
28 // preferred since a client seeing an invalid cert might not be able to 28 const char kExtendedReportingUploadUrl[] =
29 // make an HTTPS connection to report it.
30 // TODO(estark): insert the production HTTP URL when it's ready
31 const char kExtendedReportingUploadUrlInsecure[] = "";
32 const char kExtendedReportingUploadUrlSecure[] =
33 "https://sb-ssl.google.com/safebrowsing/clientreport/chrome-certs"; 29 "https://sb-ssl.google.com/safebrowsing/clientreport/chrome-certs";
34 } // namespace 30 } // namespace
35 31
36 // SafeBrowsingPingManager implementation ---------------------------------- 32 // SafeBrowsingPingManager implementation ----------------------------------
37 33
38 // static 34 // static
39 SafeBrowsingPingManager* SafeBrowsingPingManager::Create( 35 SafeBrowsingPingManager* SafeBrowsingPingManager::Create(
40 net::URLRequestContextGetter* request_context_getter, 36 net::URLRequestContextGetter* request_context_getter,
41 const SafeBrowsingProtocolConfig& config) { 37 const SafeBrowsingProtocolConfig& config) {
42 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO)); 38 DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
43 return new SafeBrowsingPingManager(request_context_getter, config); 39 return new SafeBrowsingPingManager(request_context_getter, config);
44 } 40 }
45 41
46 SafeBrowsingPingManager::SafeBrowsingPingManager( 42 SafeBrowsingPingManager::SafeBrowsingPingManager(
47 net::URLRequestContextGetter* request_context_getter, 43 net::URLRequestContextGetter* request_context_getter,
48 const SafeBrowsingProtocolConfig& config) 44 const SafeBrowsingProtocolConfig& config)
49 : client_name_(config.client_name), 45 : client_name_(config.client_name),
50 request_context_getter_(request_context_getter), 46 request_context_getter_(request_context_getter),
51 url_prefix_(config.url_prefix) { 47 url_prefix_(config.url_prefix),
48 certificate_error_reporter_(
49 request_context_getter
50 ? new CertificateErrorReporter(
51 request_context_getter->GetURLRequestContext(),
52 GURL(kExtendedReportingUploadUrl),
53 CertificateErrorReporter::SEND_COOKIES)
54 : nullptr) {
52 DCHECK(!url_prefix_.empty()); 55 DCHECK(!url_prefix_.empty());
53 56
54 if (request_context_getter) {
55 bool use_insecure_certificate_upload_url =
56 CertificateErrorReporter::IsHttpUploadUrlSupported() &&
57 strlen(kExtendedReportingUploadUrlInsecure) > 0;
58 GURL certificate_upload_url(use_insecure_certificate_upload_url
59 ? kExtendedReportingUploadUrlInsecure
60 : kExtendedReportingUploadUrlSecure);
61
62 certificate_error_reporter_.reset(new CertificateErrorReporter(
63 request_context_getter->GetURLRequestContext(), certificate_upload_url,
64 CertificateErrorReporter::SEND_COOKIES));
65 }
66
67 version_ = SafeBrowsingProtocolManagerHelper::Version(); 57 version_ = SafeBrowsingProtocolManagerHelper::Version();
68 } 58 }
69 59
70 SafeBrowsingPingManager::~SafeBrowsingPingManager() { 60 SafeBrowsingPingManager::~SafeBrowsingPingManager() {
71 // Delete in-progress safebrowsing reports (hits and details). 61 // Delete in-progress safebrowsing reports (hits and details).
72 STLDeleteContainerPointers(safebrowsing_reports_.begin(), 62 STLDeleteContainerPointers(safebrowsing_reports_.begin(),
73 safebrowsing_reports_.end()); 63 safebrowsing_reports_.end());
74 } 64 }
75 65
76 // net::URLFetcherDelegate implementation ---------------------------------- 66 // net::URLFetcherDelegate implementation ----------------------------------
(...skipping 108 matching lines...) Expand 10 before | Expand all | Expand 10 after
185 url_prefix_.c_str(), 175 url_prefix_.c_str(),
186 client_name_.c_str(), 176 client_name_.c_str(),
187 version_.c_str()); 177 version_.c_str());
188 std::string api_key = google_apis::GetAPIKey(); 178 std::string api_key = google_apis::GetAPIKey();
189 if (!api_key.empty()) { 179 if (!api_key.empty()) {
190 base::StringAppendF(&url, "&key=%s", 180 base::StringAppendF(&url, "&key=%s",
191 net::EscapeQueryParamValue(api_key, true).c_str()); 181 net::EscapeQueryParamValue(api_key, true).c_str());
192 } 182 }
193 return GURL(url); 183 return GURL(url);
194 } 184 }
OLDNEW
« no previous file with comments | « chrome/browser/net/certificate_error_reporter_unittest.cc ('k') | crypto/aead_openssl.h » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698