[Downloads] Prevent dangerous files from being opened automatically.

chrome/browser/download/download_prefs_unittest.cc

+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include "chrome/browser/download/download_prefs.h"
+
+#include "base/files/file_path.h"
+#include "base/prefs/pref_service.h"
+#include "chrome/browser/download/download_extensions.h"
+#include "chrome/common/pref_names.h"
+#include "chrome/test/base/testing_profile.h"
+#include "content/public/test/test_browser_thread_bundle.h"
+#include "testing/gtest/include/gtest/gtest.h"
+
+TEST(DownloadPrefsTest, Prerequisites) {
+  // Most of the tests below are based on the assumption that .swf files are not
+  // allowed to open automatically. If this assumption changes, then we need to
+  // update the tests to match.
+  ASSERT_FALSE(download_util::IsAllowedToOpenAutomatically(
+      base::FilePath(FILE_PATH_LITERAL("a.swf"))));
+}
+
+TEST(DownloadPrefsTest, NoAutoOpenForExecutables) {
+  const base::FilePath kDangerousFilePath(FILE_PATH_LITERAL("/b/very-bad.swf"));
+  const base::FilePath kFileWithNoExtension(FILE_PATH_LITERAL("abcd"));

[Randy Smith (Not in Mondays), 2015/06/09 21:29:25]

This doesn't look like it's used in this test (I'm a bit confused the compiler
didn't warn you about that).

[asanka, 2015/06/12 20:12:52]

Removed.

+
+  content::TestBrowserThreadBundle threads_are_required_for_testing_profile;
+  TestingProfile profile;
+  DownloadPrefs prefs(&profile);
+
+  EXPECT_FALSE(prefs.EnableAutoOpenBasedOnExtension(kDangerousFilePath));
+  EXPECT_FALSE(prefs.IsAutoOpenEnabledBasedOnExtension(kDangerousFilePath));

[Randy Smith (Not in Mondays), 2015/06/09 21:29:25]

This looks like it's just testing .swf files, but that doesn't seem to match the
comment before the test; am I confused?

[asanka, 2015/06/12 20:12:52]

I don't quite follow. Which comment?

[Randy Smith (Not in Mondays), 2015/06/15 19:19:17]

Whoops, sorry, I meant the test name, not the comment. 
"NoAutoOpenForExecutables" implies to me that the test is either for all
executable files or in some way for the class of files that is executables. 
This is testing either just .swf files or the set of dangerous files.  I think
you've changed the name in the latest PS, so feel free to ignore this comment.

+}
+
+TEST(DownloadPrefsTest, NoAutoOpenForFilesWithNoExtension) {
+  const base::FilePath kFileWithNoExtension(FILE_PATH_LITERAL("abcd"));
+
+  content::TestBrowserThreadBundle threads_are_required_for_testing_profile;
+  TestingProfile profile;
+  DownloadPrefs prefs(&profile);
+
+  EXPECT_FALSE(prefs.EnableAutoOpenBasedOnExtension(kFileWithNoExtension));
+  EXPECT_FALSE(prefs.IsAutoOpenEnabledBasedOnExtension(kFileWithNoExtension));
+}
+
+TEST(DownloadPrefsTest, AutoOpenForSafeFiles) {
+  const base::FilePath kSafeFilePath(
+      FILE_PATH_LITERAL("/good/nothing-wrong.txt"));
+  const base::FilePath kAnotherSafeFilePath(
+      FILE_PATH_LITERAL("/ok/not-bad.txt"));
+
+  content::TestBrowserThreadBundle threads_are_required_for_testing_profile;
+  TestingProfile profile;
+  DownloadPrefs prefs(&profile);
+
+  EXPECT_TRUE(prefs.EnableAutoOpenBasedOnExtension(kSafeFilePath));
+  EXPECT_TRUE(prefs.IsAutoOpenEnabledBasedOnExtension(kSafeFilePath));
+  EXPECT_TRUE(prefs.IsAutoOpenEnabledBasedOnExtension(kAnotherSafeFilePath));
+}
+
+TEST(DownloadPrefsTest, AutoOpenPrefSkipsDangerousFileTypesInPrefs) {
+  const base::FilePath kDangerousFilePath(FILE_PATH_LITERAL("/b/very-bad.swf"));
+  const base::FilePath kSafeFilePath(
+      FILE_PATH_LITERAL("/good/nothing-wrong.txt"));
+
+  content::TestBrowserThreadBundle threads_are_required_for_testing_profile;
+  TestingProfile profile;
+  // This sets .swf files and .txt files as auto-open file types.
+  profile.GetPrefs()->SetString(prefs::kDownloadExtensionsToOpen, "swf:txt");
+  DownloadPrefs prefs(&profile);
+
+  EXPECT_FALSE(prefs.IsAutoOpenEnabledBasedOnExtension(kDangerousFilePath));
+  EXPECT_TRUE(prefs.IsAutoOpenEnabledBasedOnExtension(kSafeFilePath));
+}
+
+TEST(DownloadPrefsTest, PrefsInitializationSkipsInvalidFileTypes) {
+  content::TestBrowserThreadBundle threads_are_required_for_testing_profile;
+  TestingProfile profile;
+  profile.GetPrefs()->SetString(prefs::kDownloadExtensionsToOpen,
+                                "swf:txt::.foo:baz");
+  DownloadPrefs prefs(&profile);
+  prefs.DisableAutoOpenBasedOnExtension(
+      base::FilePath(FILE_PATH_LITERAL("x.baz")));
+
+  EXPECT_FALSE(prefs.IsAutoOpenEnabledBasedOnExtension(
+      base::FilePath(FILE_PATH_LITERAL("x.swf"))));
+  EXPECT_TRUE(prefs.IsAutoOpenEnabledBasedOnExtension(
+      base::FilePath(FILE_PATH_LITERAL("x.txt"))));
+  EXPECT_FALSE(prefs.IsAutoOpenEnabledBasedOnExtension(
+      base::FilePath(FILE_PATH_LITERAL("x.foo"))));
+
+  // .swf is skipped because it's not an allowed auto-open file type.
+  // The empty entry and .foo are skipped because they are malformed.
+  // "baz" is removed by the DisableAutoOpenBasedOnExtension() call.
+  // The only entry that should be remaining is 'txt'.
+  EXPECT_STREQ(
+      "txt",
+      profile.GetPrefs()->GetString(prefs::kDownloadExtensionsToOpen).c_str());
+}
+
+TEST(DownloadPrefsTest, AutoOpenCheckIsCaseInsensitive) {
+  content::TestBrowserThreadBundle threads_are_required_for_testing_profile;
+  TestingProfile profile;
+  profile.GetPrefs()->SetString(prefs::kDownloadExtensionsToOpen,
+                                "txt:Foo:BAR");
+  DownloadPrefs prefs(&profile);
+
+  EXPECT_TRUE(prefs.IsAutoOpenEnabledBasedOnExtension(
+      base::FilePath(FILE_PATH_LITERAL("x.txt"))));
+  EXPECT_TRUE(prefs.IsAutoOpenEnabledBasedOnExtension(
+      base::FilePath(FILE_PATH_LITERAL("x.TXT"))));
+  EXPECT_TRUE(prefs.IsAutoOpenEnabledBasedOnExtension(
+      base::FilePath(FILE_PATH_LITERAL("x.foo"))));
+  EXPECT_TRUE(prefs.IsAutoOpenEnabledBasedOnExtension(
+      base::FilePath(FILE_PATH_LITERAL("x.Bar"))));
+}