| Index: chrome/browser/ssl/connection_security.h
|
| diff --git a/chrome/browser/ssl/connection_security.h b/chrome/browser/ssl/connection_security.h
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..50fc2b896b51e95fc6ffd8d1562336a4eb5ea33d
|
| --- /dev/null
|
| +++ b/chrome/browser/ssl/connection_security.h
|
| @@ -0,0 +1,121 @@
|
| +// Copyright 2015 The Chromium Authors. All rights reserved.
|
| +// Use of this source code is governed by a BSD-style license that can be
|
| +// found in the LICENSE file.
|
| +
|
| +#ifndef CHROME_BROWSER_SSL_CONNECTION_SECURITY_H_
|
| +#define CHROME_BROWSER_SSL_CONNECTION_SECURITY_H_
|
| +
|
| +#include "base/macros.h"
|
| +#include "content/public/common/security_style.h"
|
| +#include "net/cert/cert_status_flags.h"
|
| +
|
| +namespace content {
|
| +class WebContents;
|
| +} // namespace content
|
| +
|
| +// This namespace contains functions responsible for computing the
|
| +// connection security status of a page.
|
| +namespace connection_security {
|
| +
|
| +// These security styles describe the treatment given to pages that
|
| +// display and run mixed content. They are used to coordinate the
|
| +// treatment of mixed content with other security UI elements.
|
| +const content::SecurityStyle kDisplayedInsecureContentStyle =
|
| + content::SECURITY_STYLE_UNAUTHENTICATED;
|
| +const content::SecurityStyle kRanInsecureContentStyle =
|
| + content::SECURITY_STYLE_AUTHENTICATION_BROKEN;
|
| +
|
| +// TODO(wtc): unify this enum with SecurityStyle. We
|
| +// don't need two sets of security UI levels. SECURITY_STYLE_AUTHENTICATED
|
| +// needs to be refined into three levels: warning, standard, and EV.
|
| +// See crbug.com/425728
|
| +//
|
| +// If you reorder, add, or delete values from this enum, you must also
|
| +// update the UI icons in ToolbarModelImpl::GetIconForSecurityLevel.
|
| +//
|
| +// A Java counterpart will be generated for this enum.
|
| +// GENERATED_JAVA_ENUM_PACKAGE: org.chromium.chrome.browser.ssl
|
| +// GENERATED_JAVA_CLASS_NAME_OVERRIDE: ConnectionSecurityLevel
|
| +enum SecurityLevel {
|
| + // HTTP/no URL
|
| + NONE,
|
| +
|
| + // HTTPS with valid EV cert
|
| + EV_SECURE,
|
| +
|
| + // HTTPS (non-EV)
|
| + SECURE,
|
| +
|
| + // HTTPS, but unable to check certificate revocation status or with insecure
|
| + // content on the page
|
| + SECURITY_WARNING,
|
| +
|
| + // HTTPS, but the certificate verification chain is anchored on a
|
| + // certificate that was installed by the system administrator
|
| + SECURITY_POLICY_WARNING,
|
| +
|
| + // Attempted HTTPS and failed, page not authenticated
|
| + SECURITY_ERROR,
|
| +};
|
| +
|
| +// Describes how the SHA1 deprecation policy applies to an HTTPS
|
| +// connection.
|
| +enum SHA1DeprecationStatus {
|
| + // No SHA1 deprecation policy applies.
|
| + NO_DEPRECATED_SHA1,
|
| + // The connection used a certificate with a SHA1 signature in the
|
| + // chain, and policy says that the connection should be treated as
|
| + // broken HTTPS.
|
| + DEPRECATED_SHA1_BROKEN,
|
| + // The connection used a certificate with a SHA1 signature in the
|
| + // chain, and policy says that the connection should be treated with a
|
| + // warning.
|
| + DEPRECATED_SHA1_WARNING,
|
| +};
|
| +
|
| +// Describes the type of mixed content (if any) that a site
|
| +// displayed/ran.
|
| +enum MixedContentStatus {
|
| + NO_MIXED_CONTENT,
|
| + // The site displayed nonsecure resources (passive mixed content).
|
| + DISPLAYED_MIXED_CONTENT,
|
| + // The site ran nonsecure resources (active mixed content).
|
| + RAN_MIXED_CONTENT,
|
| + // The site both ran and displayed nonsecure resources.
|
| + RAN_AND_DISPLAYED_MIXED_CONTENT,
|
| +};
|
| +
|
| +// Contains information about a page's security status, including a
|
| +// SecurityStyle and the information that was used to decide which
|
| +// SecurityStyle to assign.
|
| +struct SecurityInfo {
|
| + content::SecurityStyle security_style;
|
| + SHA1DeprecationStatus sha1_deprecation_status;
|
| + MixedContentStatus mixed_content_status;
|
| + net::CertStatus cert_status;
|
| + int cert_id;
|
| + bool scheme_is_cryptographic;
|
| +};
|
| +
|
| +// Returns a security level describing the overall security state of
|
| +// the given |WebContents|.
|
| +SecurityLevel GetSecurityLevelForWebContents(
|
| + const content::WebContents* web_contents);
|
| +
|
| +// Populates |security_info| with information describing the given
|
| +// |web_contents|, including a content::SecurityStyle value and security
|
| +// properties that caused that value to be chosen.
|
| +//
|
| +// Note: This is a lossy operation. Not all of the policies
|
| +// that can be expressed by a SecurityLevel (a //chrome concept) can
|
| +// be expressed by a content::SecurityStyle.
|
| +// In general, code in //chrome should prefer to use
|
| +// GetSecurityLevelForWebContents() to determine security policy, and
|
| +// only use this function when policy needs to be supplied back to
|
| +// layers in //content.
|
| +void GetSecurityInfoForWebContents(const content::WebContents* web_contents,
|
| + SecurityInfo* security_info);
|
| +
|
| +} // namespace connection_security
|
| +
|
| +#endif // CHROME_BROWSER_SSL_CONNECTION_SECURITY_H_
|
|
|