| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "chrome/browser/safe_browsing/ping_manager.h" | 5 #include "chrome/browser/safe_browsing/ping_manager.h" |
| 6 | 6 |
| 7 #include "base/logging.h" | 7 #include "base/logging.h" |
| 8 #include "base/stl_util.h" | 8 #include "base/stl_util.h" |
| 9 #include "base/strings/string_util.h" | 9 #include "base/strings/string_util.h" |
| 10 #include "base/strings/stringprintf.h" | 10 #include "base/strings/stringprintf.h" |
| 11 #include "chrome/browser/net/certificate_error_reporter.h" | 11 #include "chrome/browser/net/certificate_error_reporter.h" |
| 12 #include "chrome/common/env_vars.h" | 12 #include "chrome/common/env_vars.h" |
| 13 #include "content/public/browser/browser_thread.h" | 13 #include "content/public/browser/browser_thread.h" |
| 14 #include "google_apis/google_api_keys.h" | 14 #include "google_apis/google_api_keys.h" |
| 15 #include "net/base/escape.h" | 15 #include "net/base/escape.h" |
| 16 #include "net/base/load_flags.h" | 16 #include "net/base/load_flags.h" |
| 17 #include "net/ssl/ssl_info.h" | 17 #include "net/ssl/ssl_info.h" |
| 18 #include "net/url_request/url_fetcher.h" | 18 #include "net/url_request/url_fetcher.h" |
| 19 #include "net/url_request/url_request_context_getter.h" | 19 #include "net/url_request/url_request_context_getter.h" |
| 20 #include "net/url_request/url_request_status.h" | 20 #include "net/url_request/url_request_status.h" |
| 21 #include "url/gurl.h" | 21 #include "url/gurl.h" |
| 22 | 22 |
| 23 using chrome_browser_net::CertificateErrorReporter; | 23 using chrome_browser_net::CertificateErrorReporter; |
| 24 using content::BrowserThread; | 24 using content::BrowserThread; |
| 25 | 25 |
| 26 namespace { | 26 namespace { |
| 27 // URL to upload invalid certificate chain reports | 27 // URLs to upload invalid certificate chain reports. The HTTP URL is |
| 28 const char kExtendedReportingUploadUrl[] = | 28 // preferred since a client seeing an invalid cert might not be able to |
| 29 // make an HTTPS connection to report it. |
| 30 // TODO(estark): insert the production HTTP URL when it's ready |
| 31 const char kExtendedReportingUploadUrlInsecure[] = ""; |
| 32 const char kExtendedReportingUploadUrlSecure[] = |
| 29 "https://sb-ssl.google.com/safebrowsing/clientreport/chrome-certs"; | 33 "https://sb-ssl.google.com/safebrowsing/clientreport/chrome-certs"; |
| 30 } // namespace | 34 } // namespace |
| 31 | 35 |
| 32 // SafeBrowsingPingManager implementation ---------------------------------- | 36 // SafeBrowsingPingManager implementation ---------------------------------- |
| 33 | 37 |
| 34 // static | 38 // static |
| 35 SafeBrowsingPingManager* SafeBrowsingPingManager::Create( | 39 SafeBrowsingPingManager* SafeBrowsingPingManager::Create( |
| 36 net::URLRequestContextGetter* request_context_getter, | 40 net::URLRequestContextGetter* request_context_getter, |
| 37 const SafeBrowsingProtocolConfig& config) { | 41 const SafeBrowsingProtocolConfig& config) { |
| 38 DCHECK_CURRENTLY_ON(BrowserThread::IO); | 42 DCHECK_CURRENTLY_ON(BrowserThread::IO); |
| 39 return new SafeBrowsingPingManager(request_context_getter, config); | 43 return new SafeBrowsingPingManager(request_context_getter, config); |
| 40 } | 44 } |
| 41 | 45 |
| 42 SafeBrowsingPingManager::SafeBrowsingPingManager( | 46 SafeBrowsingPingManager::SafeBrowsingPingManager( |
| 43 net::URLRequestContextGetter* request_context_getter, | 47 net::URLRequestContextGetter* request_context_getter, |
| 44 const SafeBrowsingProtocolConfig& config) | 48 const SafeBrowsingProtocolConfig& config) |
| 45 : client_name_(config.client_name), | 49 : client_name_(config.client_name), |
| 46 request_context_getter_(request_context_getter), | 50 request_context_getter_(request_context_getter), |
| 47 url_prefix_(config.url_prefix), | 51 url_prefix_(config.url_prefix) { |
| 48 certificate_error_reporter_( | |
| 49 request_context_getter | |
| 50 ? new CertificateErrorReporter( | |
| 51 request_context_getter->GetURLRequestContext(), | |
| 52 GURL(kExtendedReportingUploadUrl), | |
| 53 CertificateErrorReporter::SEND_COOKIES) | |
| 54 : nullptr) { | |
| 55 DCHECK(!url_prefix_.empty()); | 52 DCHECK(!url_prefix_.empty()); |
| 56 | 53 |
| 54 if (request_context_getter) { |
| 55 bool use_insecure_certificate_upload_url = |
| 56 CertificateErrorReporter::IsHttpUploadUrlSupported() && |
| 57 strlen(kExtendedReportingUploadUrlInsecure) > 0; |
| 58 GURL certificate_upload_url(use_insecure_certificate_upload_url |
| 59 ? kExtendedReportingUploadUrlInsecure |
| 60 : kExtendedReportingUploadUrlSecure); |
| 61 |
| 62 certificate_error_reporter_.reset(new CertificateErrorReporter( |
| 63 request_context_getter->GetURLRequestContext(), certificate_upload_url, |
| 64 CertificateErrorReporter::SEND_COOKIES)); |
| 65 } |
| 66 |
| 57 version_ = SafeBrowsingProtocolManagerHelper::Version(); | 67 version_ = SafeBrowsingProtocolManagerHelper::Version(); |
| 58 } | 68 } |
| 59 | 69 |
| 60 SafeBrowsingPingManager::~SafeBrowsingPingManager() { | 70 SafeBrowsingPingManager::~SafeBrowsingPingManager() { |
| 61 // Delete in-progress safebrowsing reports (hits and details). | 71 // Delete in-progress safebrowsing reports (hits and details). |
| 62 STLDeleteContainerPointers(safebrowsing_reports_.begin(), | 72 STLDeleteContainerPointers(safebrowsing_reports_.begin(), |
| 63 safebrowsing_reports_.end()); | 73 safebrowsing_reports_.end()); |
| 64 } | 74 } |
| 65 | 75 |
| 66 // net::URLFetcherDelegate implementation ---------------------------------- | 76 // net::URLFetcherDelegate implementation ---------------------------------- |
| (...skipping 108 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 175 url_prefix_.c_str(), | 185 url_prefix_.c_str(), |
| 176 client_name_.c_str(), | 186 client_name_.c_str(), |
| 177 version_.c_str()); | 187 version_.c_str()); |
| 178 std::string api_key = google_apis::GetAPIKey(); | 188 std::string api_key = google_apis::GetAPIKey(); |
| 179 if (!api_key.empty()) { | 189 if (!api_key.empty()) { |
| 180 base::StringAppendF(&url, "&key=%s", | 190 base::StringAppendF(&url, "&key=%s", |
| 181 net::EscapeQueryParamValue(api_key, true).c_str()); | 191 net::EscapeQueryParamValue(api_key, true).c_str()); |
| 182 } | 192 } |
| 183 return GURL(url); | 193 return GURL(url); |
| 184 } | 194 } |
| OLD | NEW |