OLD | NEW |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2015 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef CONTENT_CHILD_SITE_ISOLATION_POLICY_H_ | 5 #ifndef CONTENT_COMMON_CROSS_SITE_DOCUMENT_CLASSIFIER_H_ |
6 #define CONTENT_CHILD_SITE_ISOLATION_POLICY_H_ | 6 #define CONTENT_COMMON_CROSS_SITE_DOCUMENT_CLASSIFIER_H_ |
7 | 7 |
8 #include <map> | 8 #include "base/basictypes.h" |
9 #include <utility> | |
10 | |
11 #include "base/gtest_prod_util.h" | |
12 #include "base/memory/linked_ptr.h" | |
13 #include "base/strings/string_piece.h" | 9 #include "base/strings/string_piece.h" |
14 #include "content/common/content_export.h" | 10 #include "content/common/content_export.h" |
15 #include "content/public/common/resource_type.h" | |
16 #include "url/gurl.h" | 11 #include "url/gurl.h" |
17 | 12 |
18 namespace content { | 13 namespace content { |
19 | 14 |
20 struct ResourceResponseInfo; | |
21 | |
22 // CrossSiteDocumentClassifier implements the cross-site document blocking | 15 // CrossSiteDocumentClassifier implements the cross-site document blocking |
23 // policy (XSDP) for Site Isolation. XSDP will monitor network responses to a | 16 // policy (XSDP) for Site Isolation. XSDP will monitor network responses to a |
24 // renderer and block illegal responses so that a compromised renderer cannot | 17 // renderer and block illegal responses so that a compromised renderer cannot |
25 // steal private information from other sites. | 18 // steal private information from other sites. |
26 // | |
27 // SiteIsolationStatsGatherer monitors responses to gather various UMA stats to | |
28 // see the compatibility impact of actual deployment of the policy. The UMA stat | |
29 // categories SiteIsolationStatsGatherer gathers are as follows: | |
30 // | |
31 // SiteIsolation.AllResponses : # of all network responses. | |
32 // SiteIsolation.XSD.DataLength : the length of the first packet of a response. | |
33 // SiteIsolation.XSD.MimeType (enum): | |
34 // # of responses from other sites, tagged with a document mime type. | |
35 // 0:HTML, 1:XML, 2:JSON, 3:Plain, 4:Others | |
36 // SiteIsolation.XSD.[%MIMETYPE].Blocked : | |
37 // blocked # of cross-site document responses grouped by sniffed MIME type. | |
38 // SiteIsolation.XSD.[%MIMETYPE].Blocked.RenderableStatusCode : | |
39 // # of responses with renderable status code, | |
40 // out of SiteIsolation.XSD.[%MIMETYPE].Blocked. | |
41 // SiteIsolation.XSD.[%MIMETYPE].Blocked.NonRenderableStatusCode : | |
42 // # of responses with non-renderable status code, | |
43 // out of SiteIsolation.XSD.[%MIMETYPE].Blocked. | |
44 // SiteIsolation.XSD.[%MIMETYPE].NoSniffBlocked.RenderableStatusCode : | |
45 // # of responses failed to be sniffed for its MIME type, but blocked by | |
46 // "X-Content-Type-Options: nosniff" header, and with renderable status code | |
47 // out of SiteIsolation.XSD.[%MIMETYPE].Blocked. | |
48 // SiteIsolation.XSD.[%MIMETYPE].NoSniffBlocked.NonRenderableStatusCode : | |
49 // # of responses failed to be sniffed for its MIME type, but blocked by | |
50 // "X-Content-Type-Options: nosniff" header, and with non-renderable status | |
51 // code out of SiteIsolation.XSD.[%MIMETYPE].Blocked. | |
52 // SiteIsolation.XSD.[%MIMETYPE].NotBlocked : | |
53 // # of responses, but not blocked due to failure of mime sniffing. | |
54 // SiteIsolation.XSD.[%MIMETYPE].NotBlocked.MaybeJS : | |
55 // # of responses that are plausibly sniffed to be JavaScript. | |
56 | 19 |
57 enum CrossSiteDocumentMimeType { | 20 enum CrossSiteDocumentMimeType { |
58 // Note that these values are used in histograms, and must not change. | 21 // Note that these values are used in histograms, and must not change. |
59 CROSS_SITE_DOCUMENT_MIME_TYPE_HTML = 0, | 22 CROSS_SITE_DOCUMENT_MIME_TYPE_HTML = 0, |
60 CROSS_SITE_DOCUMENT_MIME_TYPE_XML = 1, | 23 CROSS_SITE_DOCUMENT_MIME_TYPE_XML = 1, |
61 CROSS_SITE_DOCUMENT_MIME_TYPE_JSON = 2, | 24 CROSS_SITE_DOCUMENT_MIME_TYPE_JSON = 2, |
62 CROSS_SITE_DOCUMENT_MIME_TYPE_PLAIN = 3, | 25 CROSS_SITE_DOCUMENT_MIME_TYPE_PLAIN = 3, |
63 CROSS_SITE_DOCUMENT_MIME_TYPE_OTHERS = 4, | 26 CROSS_SITE_DOCUMENT_MIME_TYPE_OTHERS = 4, |
64 CROSS_SITE_DOCUMENT_MIME_TYPE_MAX, | 27 CROSS_SITE_DOCUMENT_MIME_TYPE_MAX, |
65 }; | 28 }; |
66 | 29 |
67 struct SiteIsolationResponseMetaData { | |
68 SiteIsolationResponseMetaData(); | |
69 | |
70 std::string frame_origin; | |
71 GURL response_url; | |
72 ResourceType resource_type; | |
73 CrossSiteDocumentMimeType canonical_mime_type; | |
74 int http_status_code; | |
75 bool no_sniff; | |
76 }; | |
77 | |
78 // TODO(nick): Move this class into its own file. | |
79 class CONTENT_EXPORT SiteIsolationStatsGatherer { | |
80 public: | |
81 // Set activation flag for the UMA data collection for this renderer process. | |
82 static void SetEnabled(bool enabled); | |
83 | |
84 // Returns any bookkeeping data about the HTTP header information for the | |
85 // request identified by |request_id|. Any data returned should then be | |
86 // passed to OnReceivedFirstChunk() with the first data chunk. | |
87 static linked_ptr<SiteIsolationResponseMetaData> OnReceivedResponse( | |
88 const GURL& frame_origin, | |
89 const GURL& response_url, | |
90 ResourceType resource_type, | |
91 int origin_pid, | |
92 const ResourceResponseInfo& info); | |
93 | |
94 // Examines the first chunk of network data in case response_url is registered | |
95 // as a cross-site document by OnReceivedResponse(). This records various | |
96 // kinds of UMA data stats. This function is called only if the length of | |
97 // received data is non-zero. | |
98 static bool OnReceivedFirstChunk( | |
99 const linked_ptr<SiteIsolationResponseMetaData>& resp_data, | |
100 const char* payload, | |
101 int length); | |
102 private: | |
103 FRIEND_TEST_ALL_PREFIXES(SiteIsolationStatsGathererTest, SniffForJS); | |
104 | |
105 SiteIsolationStatsGatherer(); // Not instantiable. | |
106 | |
107 // Imprecise JS sniffing; only appropriate for collecting UMA stat. | |
108 static bool SniffForJS(base::StringPiece data); | |
109 | |
110 DISALLOW_COPY_AND_ASSIGN(SiteIsolationStatsGatherer); | |
111 }; | |
112 | |
113 // TODO(nick): Move this class into its own file. | |
114 class CONTENT_EXPORT CrossSiteDocumentClassifier { | 30 class CONTENT_EXPORT CrossSiteDocumentClassifier { |
115 public: | 31 public: |
116 // Returns the representative mime type enum value of the mime type of | 32 // Returns the representative mime type enum value of the mime type of |
117 // response. For example, this returns the same value for all text/xml mime | 33 // response. For example, this returns the same value for all text/xml mime |
118 // type families such as application/xml, application/rss+xml. | 34 // type families such as application/xml, application/rss+xml. |
119 static CrossSiteDocumentMimeType GetCanonicalMimeType( | 35 static CrossSiteDocumentMimeType GetCanonicalMimeType( |
120 const std::string& mime_type); | 36 const std::string& mime_type); |
121 | 37 |
122 // Returns whether this scheme is a target of cross-site document | 38 // Returns whether this scheme is a target of cross-site document |
123 // policy(XSDP). This returns true only for http://* and https://* urls. | 39 // policy(XSDP). This returns true only for http://* and https://* urls. |
(...skipping 19 matching lines...) Expand all Loading... |
143 static bool SniffForJSON(base::StringPiece data); | 59 static bool SniffForJSON(base::StringPiece data); |
144 | 60 |
145 private: | 61 private: |
146 CrossSiteDocumentClassifier(); // Not instantiable. | 62 CrossSiteDocumentClassifier(); // Not instantiable. |
147 | 63 |
148 DISALLOW_COPY_AND_ASSIGN(CrossSiteDocumentClassifier); | 64 DISALLOW_COPY_AND_ASSIGN(CrossSiteDocumentClassifier); |
149 }; | 65 }; |
150 | 66 |
151 } // namespace content | 67 } // namespace content |
152 | 68 |
153 #endif // CONTENT_CHILD_SITE_ISOLATION_POLICY_H_ | 69 #endif // CONTENT_COMMON_CROSS_SITE_DOCUMENT_CLASSIFIER_H_ |
OLD | NEW |