| Index: components/safe_browsing_db/util.cc
|
| diff --git a/components/safe_browsing_db/util.cc b/components/safe_browsing_db/util.cc
|
| deleted file mode 100644
|
| index 8d95b9c849f023118976d63f79e53d5cf542edcf..0000000000000000000000000000000000000000
|
| --- a/components/safe_browsing_db/util.cc
|
| +++ /dev/null
|
| @@ -1,371 +0,0 @@
|
| -// Copyright (c) 2015 The Chromium Authors. All rights reserved.
|
| -// Use of this source code is governed by a BSD-style license that can be
|
| -// found in the LICENSE file.
|
| -
|
| -#include "components/safe_browsing_db/util.h"
|
| -
|
| -#include "base/strings/string_util.h"
|
| -#include "crypto/sha2.h"
|
| -#include "net/base/escape.h"
|
| -#include "url/gurl.h"
|
| -#include "url/url_util.h"
|
| -
|
| -// Utility functions -----------------------------------------------------------
|
| -
|
| -namespace {
|
| -bool IsKnownList(const std::string& name) {
|
| - for (size_t i = 0; i < arraysize(safe_browsing::kAllLists); ++i) {
|
| - if (!strcmp(safe_browsing::kAllLists[i], name.c_str())) {
|
| - return true;
|
| - }
|
| - }
|
| - return false;
|
| -}
|
| -} // namespace
|
| -
|
| -
|
| -// SBCachedFullHashResult ------------------------------------------------------
|
| -
|
| -SBCachedFullHashResult::SBCachedFullHashResult() {}
|
| -
|
| -SBCachedFullHashResult::SBCachedFullHashResult(
|
| - const base::Time& in_expire_after)
|
| - : expire_after(in_expire_after) {}
|
| -
|
| -SBCachedFullHashResult::~SBCachedFullHashResult() {}
|
| -
|
| -
|
| -namespace safe_browsing {
|
| -
|
| -// Listnames that browser can process.
|
| -const char kMalwareList[] = "goog-malware-shavar";
|
| -const char kPhishingList[] = "goog-phish-shavar";
|
| -const char kBinUrlList[] = "goog-badbinurl-shavar";
|
| -const char kCsdWhiteList[] = "goog-csdwhite-sha256";
|
| -const char kDownloadWhiteList[] = "goog-downloadwhite-digest256";
|
| -const char kExtensionBlacklist[] = "goog-badcrxids-digestvar";
|
| -const char kIPBlacklist[] = "goog-badip-digest256";
|
| -const char kUnwantedUrlList[] = "goog-unwanted-shavar";
|
| -const char kInclusionWhitelist[] = "goog-csdinclusionwhite-sha256";
|
| -
|
| -const char* kAllLists[9] = {
|
| - kMalwareList,
|
| - kPhishingList,
|
| - kBinUrlList,
|
| - kCsdWhiteList,
|
| - kDownloadWhiteList,
|
| - kExtensionBlacklist,
|
| - kIPBlacklist,
|
| - kUnwantedUrlList,
|
| - kInclusionWhitelist,
|
| -};
|
| -
|
| -ListType GetListId(const base::StringPiece& name) {
|
| - ListType id;
|
| - if (name == kMalwareList) {
|
| - id = MALWARE;
|
| - } else if (name == kPhishingList) {
|
| - id = PHISH;
|
| - } else if (name == kBinUrlList) {
|
| - id = BINURL;
|
| - } else if (name == kCsdWhiteList) {
|
| - id = CSDWHITELIST;
|
| - } else if (name == kDownloadWhiteList) {
|
| - id = DOWNLOADWHITELIST;
|
| - } else if (name == kExtensionBlacklist) {
|
| - id = EXTENSIONBLACKLIST;
|
| - } else if (name == kIPBlacklist) {
|
| - id = IPBLACKLIST;
|
| - } else if (name == kUnwantedUrlList) {
|
| - id = UNWANTEDURL;
|
| - } else if (name == kInclusionWhitelist) {
|
| - id = INCLUSIONWHITELIST;
|
| - } else {
|
| - id = INVALID;
|
| - }
|
| - return id;
|
| -}
|
| -
|
| -bool GetListName(ListType list_id, std::string* list) {
|
| - switch (list_id) {
|
| - case MALWARE:
|
| - *list = kMalwareList;
|
| - break;
|
| - case PHISH:
|
| - *list = kPhishingList;
|
| - break;
|
| - case BINURL:
|
| - *list = kBinUrlList;
|
| - break;
|
| - case CSDWHITELIST:
|
| - *list = kCsdWhiteList;
|
| - break;
|
| - case DOWNLOADWHITELIST:
|
| - *list = kDownloadWhiteList;
|
| - break;
|
| - case EXTENSIONBLACKLIST:
|
| - *list = kExtensionBlacklist;
|
| - break;
|
| - case IPBLACKLIST:
|
| - *list = kIPBlacklist;
|
| - break;
|
| - case UNWANTEDURL:
|
| - *list = kUnwantedUrlList;
|
| - break;
|
| - case INCLUSIONWHITELIST:
|
| - *list = kInclusionWhitelist;
|
| - break;
|
| - default:
|
| - return false;
|
| - }
|
| - DCHECK(IsKnownList(*list));
|
| - return true;
|
| -}
|
| -
|
| -
|
| -SBFullHash SBFullHashForString(const base::StringPiece& str) {
|
| - SBFullHash h;
|
| - crypto::SHA256HashString(str, &h.full_hash, sizeof(h.full_hash));
|
| - return h;
|
| -}
|
| -
|
| -SBFullHash StringToSBFullHash(const std::string& hash_in) {
|
| - DCHECK_EQ(crypto::kSHA256Length, hash_in.size());
|
| - SBFullHash hash_out;
|
| - memcpy(hash_out.full_hash, hash_in.data(), crypto::kSHA256Length);
|
| - return hash_out;
|
| -}
|
| -
|
| -std::string SBFullHashToString(const SBFullHash& hash) {
|
| - DCHECK_EQ(crypto::kSHA256Length, sizeof(hash.full_hash));
|
| - return std::string(hash.full_hash, sizeof(hash.full_hash));
|
| -}
|
| -
|
| -
|
| -std::string Unescape(const std::string& url) {
|
| - std::string unescaped_str(url);
|
| - std::string old_unescaped_str;
|
| - const int kMaxLoopIterations = 1024;
|
| - int loop_var = 0;
|
| - do {
|
| - old_unescaped_str = unescaped_str;
|
| - unescaped_str = net::UnescapeURLComponent(
|
| - old_unescaped_str, net::UnescapeRule::SPOOFING_AND_CONTROL_CHARS |
|
| - net::UnescapeRule::SPACES |
|
| - net::UnescapeRule::URL_SPECIAL_CHARS);
|
| - } while (unescaped_str != old_unescaped_str && ++loop_var <=
|
| - kMaxLoopIterations);
|
| -
|
| - return unescaped_str;
|
| -}
|
| -
|
| -std::string Escape(const std::string& url) {
|
| - std::string escaped_str;
|
| - const char* kHexString = "0123456789ABCDEF";
|
| - for (size_t i = 0; i < url.length(); i++) {
|
| - unsigned char c = static_cast<unsigned char>(url[i]);
|
| - if (c <= ' ' || c > '~' || c == '#' || c == '%') {
|
| - escaped_str.push_back('%');
|
| - escaped_str.push_back(kHexString[c >> 4]);
|
| - escaped_str.push_back(kHexString[c & 0xf]);
|
| - } else {
|
| - escaped_str.push_back(c);
|
| - }
|
| - }
|
| -
|
| - return escaped_str;
|
| -}
|
| -
|
| -std::string RemoveConsecutiveChars(const std::string& str, const char c) {
|
| - std::string output(str);
|
| - std::string string_to_find;
|
| - std::string::size_type loc = 0;
|
| - string_to_find.append(2, c);
|
| - while ((loc = output.find(string_to_find, loc)) != std::string::npos) {
|
| - output.erase(loc, 1);
|
| - }
|
| -
|
| - return output;
|
| -}
|
| -
|
| -// Canonicalizes url as per Google Safe Browsing Specification.
|
| -// See section 6.1 in
|
| -// http://code.google.com/p/google-safe-browsing/wiki/Protocolv2Spec.
|
| -void CanonicalizeUrl(const GURL& url,
|
| - std::string* canonicalized_hostname,
|
| - std::string* canonicalized_path,
|
| - std::string* canonicalized_query) {
|
| - DCHECK(url.is_valid());
|
| -
|
| - // We only canonicalize "normal" URLs.
|
| - if (!url.IsStandard())
|
| - return;
|
| -
|
| - // Following canonicalization steps are excluded since url parsing takes care
|
| - // of those :-
|
| - // 1. Remove any tab (0x09), CR (0x0d), and LF (0x0a) chars from url.
|
| - // (Exclude escaped version of these chars).
|
| - // 2. Normalize hostname to 4 dot-seperated decimal values.
|
| - // 3. Lowercase hostname.
|
| - // 4. Resolve path sequences "/../" and "/./".
|
| -
|
| - // That leaves us with the following :-
|
| - // 1. Remove fragment in URL.
|
| - GURL url_without_fragment;
|
| - GURL::Replacements f_replacements;
|
| - f_replacements.ClearRef();
|
| - f_replacements.ClearUsername();
|
| - f_replacements.ClearPassword();
|
| - url_without_fragment = url.ReplaceComponents(f_replacements);
|
| -
|
| - // 2. Do URL unescaping until no more hex encoded characters exist.
|
| - std::string url_unescaped_str(Unescape(url_without_fragment.spec()));
|
| - url::Parsed parsed;
|
| - url::ParseStandardURL(url_unescaped_str.data(), url_unescaped_str.length(),
|
| - &parsed);
|
| -
|
| - // 3. In hostname, remove all leading and trailing dots.
|
| - const std::string host =
|
| - (parsed.host.len > 0)
|
| - ? url_unescaped_str.substr(parsed.host.begin, parsed.host.len)
|
| - : std::string();
|
| - std::string host_without_end_dots;
|
| - base::TrimString(host, ".", &host_without_end_dots);
|
| -
|
| - // 4. In hostname, replace consecutive dots with a single dot.
|
| - std::string host_without_consecutive_dots(RemoveConsecutiveChars(
|
| - host_without_end_dots, '.'));
|
| -
|
| - // 5. In path, replace runs of consecutive slashes with a single slash.
|
| - std::string path =
|
| - (parsed.path.len > 0)
|
| - ? url_unescaped_str.substr(parsed.path.begin, parsed.path.len)
|
| - : std::string();
|
| - std::string path_without_consecutive_slash(RemoveConsecutiveChars(path, '/'));
|
| -
|
| - url::Replacements<char> hp_replacements;
|
| - hp_replacements.SetHost(
|
| - host_without_consecutive_dots.data(),
|
| - url::Component(0, host_without_consecutive_dots.length()));
|
| - hp_replacements.SetPath(
|
| - path_without_consecutive_slash.data(),
|
| - url::Component(0, path_without_consecutive_slash.length()));
|
| -
|
| - std::string url_unescaped_with_can_hostpath;
|
| - url::StdStringCanonOutput output(&url_unescaped_with_can_hostpath);
|
| - url::Parsed temp_parsed;
|
| - url::ReplaceComponents(url_unescaped_str.data(),
|
| - url_unescaped_str.length(),
|
| - parsed,
|
| - hp_replacements,
|
| - NULL,
|
| - &output,
|
| - &temp_parsed);
|
| - output.Complete();
|
| -
|
| - // 6. Step needed to revert escaping done in url::ReplaceComponents.
|
| - url_unescaped_with_can_hostpath = Unescape(url_unescaped_with_can_hostpath);
|
| -
|
| - // 7. After performing all above steps, percent-escape all chars in url which
|
| - // are <= ASCII 32, >= 127, #, %. Escapes must be uppercase hex characters.
|
| - std::string escaped_canon_url_str(Escape(url_unescaped_with_can_hostpath));
|
| - url::Parsed final_parsed;
|
| - url::ParseStandardURL(escaped_canon_url_str.data(),
|
| - escaped_canon_url_str.length(),
|
| - &final_parsed);
|
| -
|
| - if (canonicalized_hostname && final_parsed.host.len > 0) {
|
| - *canonicalized_hostname =
|
| - escaped_canon_url_str.substr(final_parsed.host.begin,
|
| - final_parsed.host.len);
|
| - }
|
| - if (canonicalized_path && final_parsed.path.len > 0) {
|
| - *canonicalized_path = escaped_canon_url_str.substr(final_parsed.path.begin,
|
| - final_parsed.path.len);
|
| - }
|
| - if (canonicalized_query && final_parsed.query.len > 0) {
|
| - *canonicalized_query = escaped_canon_url_str.substr(
|
| - final_parsed.query.begin, final_parsed.query.len);
|
| - }
|
| -}
|
| -
|
| -void GenerateHostsToCheck(const GURL& url, std::vector<std::string>* hosts) {
|
| - hosts->clear();
|
| -
|
| - std::string canon_host;
|
| - CanonicalizeUrl(url, &canon_host, NULL, NULL);
|
| -
|
| - const std::string host = canon_host; // const sidesteps GCC bugs below!
|
| - if (host.empty())
|
| - return;
|
| -
|
| - // Per the Safe Browsing Protocol v2 spec, we try the host, and also up to 4
|
| - // hostnames formed by starting with the last 5 components and successively
|
| - // removing the leading component. The last component isn't examined alone,
|
| - // since it's the TLD or a subcomponent thereof.
|
| - //
|
| - // Note that we don't need to be clever about stopping at the "real" eTLD --
|
| - // the data on the server side has been filtered to ensure it will not
|
| - // blacklist a whole TLD, and it's not significantly slower on our side to
|
| - // just check too much.
|
| - //
|
| - // Also note that because we have a simple blacklist, not some sort of complex
|
| - // whitelist-in-blacklist or vice versa, it doesn't matter what order we check
|
| - // these in.
|
| - const size_t kMaxHostsToCheck = 4;
|
| - bool skipped_last_component = false;
|
| - for (std::string::const_reverse_iterator i(host.rbegin());
|
| - i != host.rend() && hosts->size() < kMaxHostsToCheck; ++i) {
|
| - if (*i == '.') {
|
| - if (skipped_last_component)
|
| - hosts->push_back(std::string(i.base(), host.end()));
|
| - else
|
| - skipped_last_component = true;
|
| - }
|
| - }
|
| - hosts->push_back(host);
|
| -}
|
| -
|
| -void GeneratePathsToCheck(const GURL& url, std::vector<std::string>* paths) {
|
| - paths->clear();
|
| -
|
| - std::string canon_path;
|
| - std::string canon_query;
|
| - CanonicalizeUrl(url, NULL, &canon_path, &canon_query);
|
| -
|
| - const std::string path = canon_path; // const sidesteps GCC bugs below!
|
| - const std::string query = canon_query;
|
| - if (path.empty())
|
| - return;
|
| -
|
| - // Per the Safe Browsing Protocol v2 spec, we try the exact path with/without
|
| - // the query parameters, and also up to 4 paths formed by starting at the root
|
| - // and adding more path components.
|
| - //
|
| - // As with the hosts above, it doesn't matter what order we check these in.
|
| - const size_t kMaxPathsToCheck = 4;
|
| - for (std::string::const_iterator i(path.begin());
|
| - i != path.end() && paths->size() < kMaxPathsToCheck; ++i) {
|
| - if (*i == '/')
|
| - paths->push_back(std::string(path.begin(), i + 1));
|
| - }
|
| -
|
| - if (!paths->empty() && paths->back() != path)
|
| - paths->push_back(path);
|
| -
|
| - if (!query.empty())
|
| - paths->push_back(path + "?" + query);
|
| -}
|
| -
|
| -void GeneratePatternsToCheck(const GURL& url, std::vector<std::string>* urls) {
|
| - std::vector<std::string> hosts, paths;
|
| - GenerateHostsToCheck(url, &hosts);
|
| - GeneratePathsToCheck(url, &paths);
|
| - for (size_t h = 0; h < hosts.size(); ++h) {
|
| - for (size_t p = 0; p < paths.size(); ++p) {
|
| - urls->push_back(hosts[h] + paths[p]);
|
| - }
|
| - }
|
| -}
|
| -
|
| -} // namespace safe_browsing
|
|
|