Move error classification into the ssl_errors component

chrome/browser/ssl/ssl_error_classification.h

Index: chrome/browser/ssl/ssl_error_classification.h
diff --git a/chrome/browser/ssl/ssl_error_classification.h b/chrome/browser/ssl/ssl_error_classification.h
deleted file mode 100644
index e273365dc55dd84ec79367f39177e06fa525d43b..0000000000000000000000000000000000000000
--- a/chrome/browser/ssl/ssl_error_classification.h
+++ /dev/null
@@ -1,127 +0,0 @@
-// Copyright 2014 The Chromium Authors. All rights reserved.
-// Use of this source code is governed by a BSD-style license that can be
-// found in the LICENSE file.
-
-#ifndef CHROME_BROWSER_SSL_SSL_ERROR_CLASSIFICATION_H_
-#define CHROME_BROWSER_SSL_SSL_ERROR_CLASSIFICATION_H_
-
-#include <string>
-#include <vector>
-
-#include "base/gtest_prod_util.h"
-#include "base/time/time.h"
-#include "net/cert/x509_certificate.h"
-#include "url/gurl.h"
-
-class SSLErrorClassification {
- public:
-  SSLErrorClassification(const base::Time& current_time,
-                         const GURL& url,
-                         int cert_error,
-                         const net::X509Certificate& cert);
-  ~SSLErrorClassification();
-
-  // Returns true if the system time is in the past.
-  static bool IsUserClockInThePast(const base::Time& time_now);
-
-  // Returns true if the system time is too far in the future or the user is
-  // using a version of Chrome which is more than 1 year old.
-  static bool IsUserClockInTheFuture(const base::Time& time_now);
-
-  // Sets a clock for browser tests that check the build time. Used by
-  // IsUserClockInThePast and IsUserClockInTheFuture.
-  static void SetBuildTimeForTesting(const base::Time& testing_time);
-
-  // Returns true if the Windows platform is likely to not have SHA-256 support.
-  // On other platforms, returns false always.
-  static bool MaybeWindowsLacksSHA256Support();
-
-  // Returns true if the site's hostname differs from one of the DNS
-  // names in the certificate (CN or SANs) only by the presence or
-  // absence of the single-label prefix "www". E.g.: (The first domain
-  // is hostname and the second domain is a DNS name in the certificate)
-  //
-  //     www.example.com ~ example.com -> true
-  //     example.com ~ www.example.com -> true
-  //     www.food.example.com ~ example.com -> false
-  //     mail.example.com ~ example.com -> false
-  static bool GetWWWSubDomainMatch(const std::string& host_name,
-                                   const std::vector<std::string>& dns_names,
-                                   std::string* www_match_host_name);
-
-  void RecordUMAStatistics(bool overridable) const;
-
- private:
-  FRIEND_TEST_ALL_PREFIXES(SSLErrorClassificationTest, TestDateInvalidScore);
-  FRIEND_TEST_ALL_PREFIXES(SSLErrorClassificationTest, TestNameMismatch);
-  FRIEND_TEST_ALL_PREFIXES(SSLErrorClassificationTest,
-                           TestHostNameHasKnownTLD);
-  FRIEND_TEST_ALL_PREFIXES(SSLErrorClassificationTest, TestPrivateURL);
-
-  typedef std::vector<std::string> Tokens;
-
-  // Returns true if the hostname has a known Top Level Domain.
-  static bool IsHostNameKnownTLD(const std::string& host_name);
-
-  // Returns true if any one of the following conditions hold:
-  // 1.|hostname| is an IP Address in an IANA-reserved range.
-  // 2.|hostname| is a not-yet-assigned by ICANN gTLD.
-  // 3.|hostname| is a dotless domain.
-  static bool IsHostnameNonUniqueOrDotless(const std::string& hostname);
-
-  // Returns true if GetWWWSubDomainMatch finds a www mismatch.
-  bool IsWWWSubDomainMatch() const;
-
-  // Returns true if |child| is a subdomain of any of the |potential_parents|.
-  bool NameUnderAnyNames(const Tokens& child,
-                        const std::vector<Tokens>& potential_parents) const;
-
-  // Returns true if any of the |potential_children| is a subdomain of the
-  // |parent|. The inverse case should be treated carefully as this is most
-  // likely a MITM attack. We don't want foo.appspot.com to be able to MITM for
-  // appspot.com.
-  bool AnyNamesUnderName(const std::vector<Tokens>& potential_children,
-                        const Tokens& parent) const;
-
-  // Returns true if |hostname| is too broad for the scope of a wildcard
-  // certificate. E.g.:
-  //
-  //     a.b.example.com ~ *.example.com --> true
-  //     b.example.com ~ *.example.com --> false
-  bool IsSubDomainOutsideWildcard(const Tokens& hostname) const;
-
-  // Returns true if the certificate is a shared certificate. Note - This
-  // function should be used with caution (only for UMA histogram) as an
-  // attacker could easily get a certificate with more than 5 names in the SAN
-  // fields.
-  bool IsCertLikelyFromMultiTenantHosting() const;
-
-  // Returns true if the hostname in |request_url_| has the same domain
-  // (effective TLD + 1 label) as at least one of the subject
-  // alternative names in |cert_|.
-  bool IsCertLikelyFromSameDomain() const;
-
-  static std::vector<Tokens> GetTokenizedDNSNames(
-      const std::vector<std::string>& dns_names);
-
-  // If |potential_subdomain| is a subdomain of |parent|, returns the
-  // number of DNS labels by which |potential_subdomain| is under
-  // |parent|. Otherwise, returns 0.
-  //
-  // For example,
-  //
-  //   FindSubDomainDifference(Tokenize("a.b.example.com"),
-  //                           Tokenize("example.com"))
-  // --> 2.
-  size_t FindSubDomainDifference(const Tokens& potential_subdomain,
-                                 const Tokens& parent) const;
-
-  static Tokens Tokenize(const std::string& name);
-
-  base::Time current_time_;
-  const GURL request_url_;
-  int cert_error_;
-  const net::X509Certificate& cert_;
-};
-
-#endif  // CHROME_BROWSER_SSL_SSL_ERROR_CLASSIFICATION_H_