Chromium Code Reviews| OLD | NEW |
|---|---|
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "chrome/browser/ssl/ssl_blocking_page.h" | 5 #include "chrome/browser/ssl/ssl_blocking_page.h" |
| 6 | 6 |
| 7 #include "base/bind.h" | 7 #include "base/bind.h" |
| 8 #include "base/bind_helpers.h" | 8 #include "base/bind_helpers.h" |
| 9 #include "base/build_time.h" | 9 #include "base/build_time.h" |
| 10 #include "base/callback_helpers.h" | 10 #include "base/callback_helpers.h" |
| 11 #include "base/command_line.h" | 11 #include "base/command_line.h" |
| 12 #include "base/i18n/rtl.h" | 12 #include "base/i18n/rtl.h" |
| 13 #include "base/i18n/time_formatting.h" | 13 #include "base/i18n/time_formatting.h" |
| 14 #include "base/metrics/field_trial.h" | 14 #include "base/metrics/field_trial.h" |
| 15 #include "base/metrics/histogram.h" | 15 #include "base/metrics/histogram.h" |
| 16 #include "base/prefs/pref_service.h" | 16 #include "base/prefs/pref_service.h" |
| 17 #include "base/process/launch.h" | 17 #include "base/process/launch.h" |
| 18 #include "base/rand_util.h" | 18 #include "base/rand_util.h" |
| 19 #include "base/strings/string_number_conversions.h" | 19 #include "base/strings/string_number_conversions.h" |
| 20 #include "base/strings/string_piece.h" | 20 #include "base/strings/string_piece.h" |
| 21 #include "base/strings/string_util.h" | 21 #include "base/strings/string_util.h" |
| 22 #include "base/strings/stringprintf.h" | 22 #include "base/strings/stringprintf.h" |
| 23 #include "base/strings/utf_string_conversions.h" | 23 #include "base/strings/utf_string_conversions.h" |
| 24 #include "base/time/time.h" | 24 #include "base/time/time.h" |
| 25 #include "base/values.h" | 25 #include "base/values.h" |
| 26 #include "chrome/browser/browser_process.h" | 26 #include "chrome/browser/browser_process.h" |
| 27 #include "chrome/browser/chrome_notification_types.h" | 27 #include "chrome/browser/chrome_notification_types.h" |
| 28 #include "chrome/browser/interstitials/security_interstitial_metrics_helper.h" | 28 #include "chrome/browser/interstitials/security_interstitial_metrics_helper.h" |
| 29 #include "chrome/browser/net/cert_logger.pb.h" | |
| 30 #include "chrome/browser/net/certificate_error_reporter.h" | |
| 29 #include "chrome/browser/profiles/profile.h" | 31 #include "chrome/browser/profiles/profile.h" |
| 30 #include "chrome/browser/renderer_preferences_util.h" | 32 #include "chrome/browser/renderer_preferences_util.h" |
| 31 #include "chrome/browser/ssl/ssl_cert_reporter.h" | 33 #include "chrome/browser/ssl/ssl_cert_reporter.h" |
| 32 #include "chrome/browser/ssl/ssl_error_classification.h" | 34 #include "chrome/browser/ssl/ssl_error_classification.h" |
| 33 #include "chrome/browser/ssl/ssl_error_info.h" | 35 #include "chrome/browser/ssl/ssl_error_info.h" |
| 34 #include "chrome/common/chrome_switches.h" | 36 #include "chrome/common/chrome_switches.h" |
| 35 #include "chrome/common/pref_names.h" | 37 #include "chrome/common/pref_names.h" |
| 36 #include "chrome/grit/chromium_strings.h" | 38 #include "chrome/grit/chromium_strings.h" |
| 37 #include "chrome/grit/generated_resources.h" | 39 #include "chrome/grit/generated_resources.h" |
| 38 #include "components/google/core/browser/google_util.h" | 40 #include "components/google/core/browser/google_util.h" |
| (...skipping 29 matching lines...) Expand all Loading... | |
| 68 #endif | 70 #endif |
| 69 | 71 |
| 70 #if defined(OS_CHROMEOS) | 72 #if defined(OS_CHROMEOS) |
| 71 #include "chrome/browser/profiles/profile_manager.h" | 73 #include "chrome/browser/profiles/profile_manager.h" |
| 72 #include "chrome/browser/ui/chrome_pages.h" | 74 #include "chrome/browser/ui/chrome_pages.h" |
| 73 #include "chrome/common/url_constants.h" | 75 #include "chrome/common/url_constants.h" |
| 74 #endif | 76 #endif |
| 75 | 77 |
| 76 using base::ASCIIToUTF16; | 78 using base::ASCIIToUTF16; |
| 77 using base::TimeTicks; | 79 using base::TimeTicks; |
| 80 using chrome_browser_net::CertificateErrorReporter; | |
| 78 using content::InterstitialPage; | 81 using content::InterstitialPage; |
| 79 using content::InterstitialPageDelegate; | 82 using content::InterstitialPageDelegate; |
| 80 using content::NavigationController; | 83 using content::NavigationController; |
| 81 using content::NavigationEntry; | 84 using content::NavigationEntry; |
| 82 | 85 |
| 83 // Constants for the HTTPSErrorReporter Finch experiment | 86 // Constants for the HTTPSErrorReporter Finch experiment |
| 84 const char kHTTPSErrorReporterFinchExperimentName[] = "ReportCertificateErrors"; | 87 const char kHTTPSErrorReporterFinchExperimentName[] = "ReportCertificateErrors"; |
| 85 const char kHTTPSErrorReporterFinchGroupShowPossiblySend[] = | 88 const char kHTTPSErrorReporterFinchGroupShowPossiblySend[] = |
| 86 "ShowAndPossiblySend"; | 89 "ShowAndPossiblySend"; |
| 87 const char kHTTPSErrorReporterFinchParamName[] = "sendingThreshold"; | 90 const char kHTTPSErrorReporterFinchParamName[] = "sendingThreshold"; |
| (...skipping 489 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
| 577 renderer_preferences_util::UpdateFromSystemSettings( | 580 renderer_preferences_util::UpdateFromSystemSettings( |
| 578 prefs, profile, web_contents()); | 581 prefs, profile, web_contents()); |
| 579 } | 582 } |
| 580 | 583 |
| 581 void SSLBlockingPage::OnProceed() { | 584 void SSLBlockingPage::OnProceed() { |
| 582 metrics_helper()->RecordUserDecision( | 585 metrics_helper()->RecordUserDecision( |
| 583 SecurityInterstitialMetricsHelper::PROCEED); | 586 SecurityInterstitialMetricsHelper::PROCEED); |
| 584 | 587 |
| 585 // Finish collecting information about invalid certificates, if the | 588 // Finish collecting information about invalid certificates, if the |
| 586 // user opted in to. | 589 // user opted in to. |
| 587 FinishCertCollection(); | 590 FinishCertCollection(true); |
|
Ryan Sleevi
2015/04/16 01:44:10
Suggestion: Reuse the enum (SecurityInterstitialMe
| |
| 588 | 591 |
| 589 RecordSSLExpirationPageEventState( | 592 RecordSSLExpirationPageEventState( |
| 590 expired_but_previously_allowed_, true, overridable_); | 593 expired_but_previously_allowed_, true, overridable_); |
| 591 // Accepting the certificate resumes the loading of the page. | 594 // Accepting the certificate resumes the loading of the page. |
| 592 NotifyAllowCertificate(); | 595 NotifyAllowCertificate(); |
| 593 } | 596 } |
| 594 | 597 |
| 595 void SSLBlockingPage::OnDontProceed() { | 598 void SSLBlockingPage::OnDontProceed() { |
| 596 metrics_helper()->RecordUserDecision( | 599 metrics_helper()->RecordUserDecision( |
| 597 SecurityInterstitialMetricsHelper::DONT_PROCEED); | 600 SecurityInterstitialMetricsHelper::DONT_PROCEED); |
| 598 | 601 |
| 599 // Finish collecting information about invalid certificates, if the | 602 // Finish collecting information about invalid certificates, if the |
| 600 // user opted in to. | 603 // user opted in to. |
| 601 FinishCertCollection(); | 604 FinishCertCollection(false); |
| 602 | 605 |
| 603 RecordSSLExpirationPageEventState( | 606 RecordSSLExpirationPageEventState( |
| 604 expired_but_previously_allowed_, false, overridable_); | 607 expired_but_previously_allowed_, false, overridable_); |
| 605 NotifyDenyCertificate(); | 608 NotifyDenyCertificate(); |
| 606 } | 609 } |
| 607 | 610 |
| 608 void SSLBlockingPage::NotifyDenyCertificate() { | 611 void SSLBlockingPage::NotifyDenyCertificate() { |
| 609 // It's possible that callback_ may not exist if the user clicks "Proceed" | 612 // It's possible that callback_ may not exist if the user clicks "Proceed" |
| 610 // followed by pressing the back button before the interstitial is hidden. | 613 // followed by pressing the back button before the interstitial is hidden. |
| 611 // In that case the certificate will still be treated as allowed. | 614 // In that case the certificate will still be treated as allowed. |
| (...skipping 28 matching lines...) Expand all Loading... | |
| 640 std::string SSLBlockingPage::GetSamplingEventName() const { | 643 std::string SSLBlockingPage::GetSamplingEventName() const { |
| 641 std::string event_name(kEventNameBase); | 644 std::string event_name(kEventNameBase); |
| 642 if (overridable_) | 645 if (overridable_) |
| 643 event_name.append(kEventOverridable); | 646 event_name.append(kEventOverridable); |
| 644 else | 647 else |
| 645 event_name.append(kEventNotOverridable); | 648 event_name.append(kEventNotOverridable); |
| 646 event_name.append(net::ErrorToString(cert_error_)); | 649 event_name.append(net::ErrorToString(cert_error_)); |
| 647 return event_name; | 650 return event_name; |
| 648 } | 651 } |
| 649 | 652 |
| 650 void SSLBlockingPage::FinishCertCollection() { | 653 void SSLBlockingPage::FinishCertCollection(bool proceeded) { |
| 651 if (!ShouldShowCertificateReporterCheckbox()) | 654 if (!ShouldShowCertificateReporterCheckbox()) |
| 652 return; | 655 return; |
| 653 | 656 |
| 654 const bool enabled = | 657 const bool enabled = |
| 655 IsPrefEnabled(prefs::kSafeBrowsingExtendedReportingEnabled); | 658 IsPrefEnabled(prefs::kSafeBrowsingExtendedReportingEnabled); |
| 656 | 659 |
| 657 if (!enabled) | 660 if (!enabled) |
| 658 return; | 661 return; |
| 659 | 662 |
| 660 metrics_helper()->RecordUserInteraction( | 663 metrics_helper()->RecordUserInteraction( |
| 661 SecurityInterstitialMetricsHelper::EXTENDED_REPORTING_IS_ENABLED); | 664 SecurityInterstitialMetricsHelper::EXTENDED_REPORTING_IS_ENABLED); |
| 662 | 665 |
| 663 if (ShouldReportCertificateError()) { | 666 if (ShouldReportCertificateError()) { |
| 664 ssl_cert_reporter_->ReportInvalidCertificateChain(request_url().host(), | 667 chrome_browser_net::CertLoggerRequest report; |
| 665 ssl_info_); | 668 CertificateErrorReporter::BuildReport( |
| 669 request_url().host(), ssl_info_, | |
| 670 SSLErrorInfo::NetErrorToErrorType(cert_error_), interstitial_reason_, | |
| 671 proceeded ? CertificateErrorReporter::USER_PROCEEDED | |
| 672 : CertificateErrorReporter::USER_DID_NOT_PROCEED, | |
| 673 overridable_ ? CertificateErrorReporter::OVERRIDABLE | |
| 674 : CertificateErrorReporter::NOT_OVERRIDABLE, | |
| 675 &report); | |
| 676 ssl_cert_reporter_->SendReport(report); | |
| 666 } | 677 } |
| 667 } | 678 } |
| 668 | 679 |
| 669 bool SSLBlockingPage::ShouldShowCertificateReporterCheckbox() { | 680 bool SSLBlockingPage::ShouldShowCertificateReporterCheckbox() { |
| 670 // Only show the checkbox iff the user is part of the respective Finch group | 681 // Only show the checkbox iff the user is part of the respective Finch group |
| 671 // and the window is not incognito and the feature is not disabled by policy. | 682 // and the window is not incognito and the feature is not disabled by policy. |
| 672 const bool in_incognito = | 683 const bool in_incognito = |
| 673 web_contents()->GetBrowserContext()->IsOffTheRecord(); | 684 web_contents()->GetBrowserContext()->IsOffTheRecord(); |
| 674 return base::FieldTrialList::FindFullName( | 685 return base::FieldTrialList::FindFullName( |
| 675 kHTTPSErrorReporterFinchExperimentName) == | 686 kHTTPSErrorReporterFinchExperimentName) == |
| (...skipping 18 matching lines...) Expand all Loading... | |
| 694 } | 705 } |
| 695 } | 706 } |
| 696 return false; | 707 return false; |
| 697 } | 708 } |
| 698 | 709 |
| 699 // static | 710 // static |
| 700 bool SSLBlockingPage::IsOptionsOverridable(int options_mask) { | 711 bool SSLBlockingPage::IsOptionsOverridable(int options_mask) { |
| 701 return (options_mask & SSLBlockingPage::OVERRIDABLE) && | 712 return (options_mask & SSLBlockingPage::OVERRIDABLE) && |
| 702 !(options_mask & SSLBlockingPage::STRICT_ENFORCEMENT); | 713 !(options_mask & SSLBlockingPage::STRICT_ENFORCEMENT); |
| 703 } | 714 } |
| OLD | NEW |