Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(135)

Unified Diff: chrome/browser/ssl/connection_security.h

Issue 1324293003: Revert of Refactor connection_security into SecurityStateModel (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Created 5 years, 3 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: chrome/browser/ssl/connection_security.h
diff --git a/chrome/browser/ssl/connection_security.h b/chrome/browser/ssl/connection_security.h
new file mode 100644
index 0000000000000000000000000000000000000000..50fc2b896b51e95fc6ffd8d1562336a4eb5ea33d
--- /dev/null
+++ b/chrome/browser/ssl/connection_security.h
@@ -0,0 +1,121 @@
+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CHROME_BROWSER_SSL_CONNECTION_SECURITY_H_
+#define CHROME_BROWSER_SSL_CONNECTION_SECURITY_H_
+
+#include "base/macros.h"
+#include "content/public/common/security_style.h"
+#include "net/cert/cert_status_flags.h"
+
+namespace content {
+class WebContents;
+} // namespace content
+
+// This namespace contains functions responsible for computing the
+// connection security status of a page.
+namespace connection_security {
+
+// These security styles describe the treatment given to pages that
+// display and run mixed content. They are used to coordinate the
+// treatment of mixed content with other security UI elements.
+const content::SecurityStyle kDisplayedInsecureContentStyle =
+ content::SECURITY_STYLE_UNAUTHENTICATED;
+const content::SecurityStyle kRanInsecureContentStyle =
+ content::SECURITY_STYLE_AUTHENTICATION_BROKEN;
+
+// TODO(wtc): unify this enum with SecurityStyle. We
+// don't need two sets of security UI levels. SECURITY_STYLE_AUTHENTICATED
+// needs to be refined into three levels: warning, standard, and EV.
+// See crbug.com/425728
+//
+// If you reorder, add, or delete values from this enum, you must also
+// update the UI icons in ToolbarModelImpl::GetIconForSecurityLevel.
+//
+// A Java counterpart will be generated for this enum.
+// GENERATED_JAVA_ENUM_PACKAGE: org.chromium.chrome.browser.ssl
+// GENERATED_JAVA_CLASS_NAME_OVERRIDE: ConnectionSecurityLevel
+enum SecurityLevel {
+ // HTTP/no URL
+ NONE,
+
+ // HTTPS with valid EV cert
+ EV_SECURE,
+
+ // HTTPS (non-EV)
+ SECURE,
+
+ // HTTPS, but unable to check certificate revocation status or with insecure
+ // content on the page
+ SECURITY_WARNING,
+
+ // HTTPS, but the certificate verification chain is anchored on a
+ // certificate that was installed by the system administrator
+ SECURITY_POLICY_WARNING,
+
+ // Attempted HTTPS and failed, page not authenticated
+ SECURITY_ERROR,
+};
+
+// Describes how the SHA1 deprecation policy applies to an HTTPS
+// connection.
+enum SHA1DeprecationStatus {
+ // No SHA1 deprecation policy applies.
+ NO_DEPRECATED_SHA1,
+ // The connection used a certificate with a SHA1 signature in the
+ // chain, and policy says that the connection should be treated as
+ // broken HTTPS.
+ DEPRECATED_SHA1_BROKEN,
+ // The connection used a certificate with a SHA1 signature in the
+ // chain, and policy says that the connection should be treated with a
+ // warning.
+ DEPRECATED_SHA1_WARNING,
+};
+
+// Describes the type of mixed content (if any) that a site
+// displayed/ran.
+enum MixedContentStatus {
+ NO_MIXED_CONTENT,
+ // The site displayed nonsecure resources (passive mixed content).
+ DISPLAYED_MIXED_CONTENT,
+ // The site ran nonsecure resources (active mixed content).
+ RAN_MIXED_CONTENT,
+ // The site both ran and displayed nonsecure resources.
+ RAN_AND_DISPLAYED_MIXED_CONTENT,
+};
+
+// Contains information about a page's security status, including a
+// SecurityStyle and the information that was used to decide which
+// SecurityStyle to assign.
+struct SecurityInfo {
+ content::SecurityStyle security_style;
+ SHA1DeprecationStatus sha1_deprecation_status;
+ MixedContentStatus mixed_content_status;
+ net::CertStatus cert_status;
+ int cert_id;
+ bool scheme_is_cryptographic;
+};
+
+// Returns a security level describing the overall security state of
+// the given |WebContents|.
+SecurityLevel GetSecurityLevelForWebContents(
+ const content::WebContents* web_contents);
+
+// Populates |security_info| with information describing the given
+// |web_contents|, including a content::SecurityStyle value and security
+// properties that caused that value to be chosen.
+//
+// Note: This is a lossy operation. Not all of the policies
+// that can be expressed by a SecurityLevel (a //chrome concept) can
+// be expressed by a content::SecurityStyle.
+// In general, code in //chrome should prefer to use
+// GetSecurityLevelForWebContents() to determine security policy, and
+// only use this function when policy needs to be supplied back to
+// layers in //content.
+void GetSecurityInfoForWebContents(const content::WebContents* web_contents,
+ SecurityInfo* security_info);
+
+} // namespace connection_security
+
+#endif // CHROME_BROWSER_SSL_CONNECTION_SECURITY_H_
« no previous file with comments | « chrome/browser/chromeos/login/ui/simple_web_view_dialog.cc ('k') | chrome/browser/ssl/connection_security.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698