Implement new dangerous download reporting dialog for UNCOMMON_DOWNLOAD, in Views

chrome/browser/ui/views/download/download_item_view.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/views/download/download_item_view.h"
 
 #include <algorithm>
 #include <vector>
 
 #include "base/bind.h"
 #include "base/callback.h"
 #include "base/files/file_path.h"
 #include "base/i18n/break_iterator.h"
 #include "base/i18n/rtl.h"
 #include "base/metrics/histogram.h"
 #include "base/strings/string_util.h"
 #include "base/strings/stringprintf.h"
 #include "base/strings/sys_string_conversions.h"
 #include "base/strings/utf_string_conversions.h"
 #include "chrome/browser/browser_process.h"
 #include "chrome/browser/download/chrome_download_manager_delegate.h"
 #include "chrome/browser/download/download_item_model.h"
 #include "chrome/browser/download/download_stats.h"
 #include "chrome/browser/download/drag_download_item.h"
+#include "chrome/browser/prefs/pref_service_syncable.h"
 #include "chrome/browser/safe_browsing/download_feedback_service.h"
 #include "chrome/browser/safe_browsing/download_protection_service.h"
 #include "chrome/browser/safe_browsing/safe_browsing_service.h"
 #include "chrome/browser/themes/theme_properties.h"
+#include "chrome/browser/ui/views/download/download_feedback_dialog_view.h"
 #include "chrome/browser/ui/views/download/download_shelf_context_menu_view.h"
 #include "chrome/browser/ui/views/download/download_shelf_view.h"
 #include "content/public/browser/download_danger_type.h"
 #include "grit/generated_resources.h"
 #include "grit/theme_resources.h"
 #include "third_party/icu/source/common/unicode/uchar.h"
 #include "ui/base/accessibility/accessible_view_state.h"
 #include "ui/base/l10n/l10n_util.h"
 #include "ui/base/resource/resource_bundle.h"
 #include "ui/base/theme_provider.h"
@@ skipping 504 matching lines @@
     return;
   }
 
   // WARNING: all end states after this point delete |this|.
   DCHECK_EQ(discard_button_, sender);
   if (model_.IsMalicious()) {
     UMA_HISTOGRAM_LONG_TIMES("clickjacking.dismiss_download", warning_duration);
     shelf_->RemoveDownloadView(this);
     return;
   }
-  if (model_.ShouldAllowDownloadFeedback() && BeginDownloadFeedback())
+  UMA_HISTOGRAM_LONG_TIMES("clickjacking.discard_download", warning_duration);
+  if (model_.ShouldAllowDownloadFeedback()) {
+    const int pref_value = shelf_->browser()->profile()->GetPrefs()->GetInteger(
+        prefs::kSafeBrowsingDownloadReportingEnabled);
+    switch (static_cast<DownloadFeedbackDialogView::Response>(pref_value)) {
+      case DownloadFeedbackDialogView::kNeverShown: {

[Peter Kasting, 2014/02/04 21:56:33]

Nit: {} not necessary on any of these cases.

[felt, 2014/02/04 23:37:22]

Done, but doesn't the style guide say either with or without {} is fine?

[Peter Kasting, 2014/02/05 00:07:36]

Yes, either way is acceptable by the style guide.  That's why I said "not
necessary" rather than "banned, do not use".

+        DownloadFeedbackDialogView::Show(
+            shelf_->GetParentWindowView()->GetNativeWindow(),
+            shelf_->browser()->profile(),
+            base::Bind(&DownloadItemView::BeginDownloadFeedbackWrapper,
+                       weak_ptr_factory_.GetWeakPtr()));
+        break;
+      }
+      case DownloadFeedbackDialogView::kUserEnabled: {
+        BeginDownloadFeedbackWrapper(true);
+        break;
+      }
+      case DownloadFeedbackDialogView::kUserDisabled: {
+        BeginDownloadFeedbackWrapper(false);
+        break;
+      }
+      case DownloadFeedbackDialogView::kMaxValue:

[Peter Kasting, 2014/02/04 21:56:33]

Having this value buys you nothing over just having the "default:" case below. 
Eliminate this line and eliminate the value from the original enum.

[felt, 2014/02/04 23:37:22]

Switching to just "default", but I need kMaxValue so that it can be histogrammed
in a subsequent CL.

[Peter Kasting, 2014/02/05 00:07:36]

In that case, I would eliminate "default" and only have the kMaxValue case. 
Then the compiler should hopefully complain if someone introduces another value
without updating this switch statement.

[felt, 2014/02/05 02:08:53]

Done.

+      default: {
+        NOTREACHED();
+      }
+    }
     return;
-  UMA_HISTOGRAM_LONG_TIMES("clickjacking.discard_download", warning_duration);
+  }
   download()->Remove();
 }
 
 void DownloadItemView::AnimationProgressed(const gfx::Animation* animation) {
   // We don't care if what animation (body button/drop button/complete),
   // is calling back, as they all have to go through the same paint call.
   SchedulePaint();
 }
 
 void DownloadItemView::OnPaint(gfx::Canvas* canvas) {
@@ skipping 317 matching lines @@
 void DownloadItemView::OpenDownload() {
   DCHECK(!IsShowingWarningDialog());
   // We're interested in how long it takes users to open downloads.  If they
   // open downloads super quickly, we should be concerned about clickjacking.
   UMA_HISTOGRAM_LONG_TIMES("clickjacking.open_download",
                            base::Time::Now() - creation_time_);
   download()->OpenDownload();
   UpdateAccessibleName();
 }
 
+void DownloadItemView::BeginDownloadFeedbackWrapper(bool user_enabled) {

[Peter Kasting, 2014/02/04 21:56:33]

Nit: If you make the argument to this be the enum type instead of a bool, then
not only is the meaning of the argument slightly clearer, but you can slightly
simplify the switch statement above by doing:

  case DownloadFeedbackDialogView::kUserEnabled:
  case DownloadFeedbackDialogView::kUserDisabled:
    BeginDownloadFeedbackWrapper(pref_value);
    break;

[felt, 2014/02/05 02:08:53]

Done.

+  if (user_enabled && BeginDownloadFeedback())
+    return;
+  download()->Remove();
+  // WARNING: 'this' is deleted at this point. Don't access 'this'.

[Peter Kasting, 2014/02/04 21:56:33]

Nit: Shorter:

  if (!user_enabled || !BeginDownloadFeedback())
    download()->Remove();
  // WARNING: |this| is now deleted!

(This is also slightly clearer that BeginDownloadFeedback() will have deleted
|this| if it returns true.)

[felt, 2014/02/04 23:37:22]

Done.

+}
+
 bool DownloadItemView::BeginDownloadFeedback() {
 #if defined(FULL_SAFE_BROWSING)
   SafeBrowsingService* sb_service = g_browser_process->safe_browsing_service();
   if (!sb_service)
     return false;
   safe_browsing::DownloadProtectionService* download_protection_service =
       sb_service->download_protection_service();
   if (!download_protection_service)
     return false;
-  base::TimeDelta warning_duration = base::TimeDelta();
-  if (!time_download_warning_shown_.is_null())
-    warning_duration = base::Time::Now() - time_download_warning_shown_;
-  UMA_HISTOGRAM_LONG_TIMES("clickjacking.report_and_discard_download",
-                           warning_duration);
   download_protection_service->feedback_service()->BeginFeedbackForDownload(
       download());
   // WARNING: we are deleted at this point.  Don't access 'this'.
   return true;
 #else
   NOTREACHED();
   return false;
 #endif
 }
 
@@ skipping 217 matching lines @@
   body_state_ = NORMAL;
   drop_down_state_ = NORMAL;
   if (mode_ == DANGEROUS_MODE) {
     save_button_ = new views::LabelButton(
         this, model_.GetWarningConfirmButtonText());
     save_button_->SetStyle(views::Button::STYLE_BUTTON);
     AddChildView(save_button_);
   }
   int discard_button_message = model_.IsMalicious() ?
       IDS_DISMISS_DOWNLOAD : IDS_DISCARD_DOWNLOAD;
-  if (!model_.IsMalicious() && model_.ShouldAllowDownloadFeedback())
-    discard_button_message = IDS_REPORT_AND_DISCARD_DOWNLOAD;
   discard_button_ = new views::LabelButton(
       this, l10n_util::GetStringUTF16(discard_button_message));
   discard_button_->SetStyle(views::Button::STYLE_BUTTON);
   AddChildView(discard_button_);
 
   ui::ResourceBundle& rb = ui::ResourceBundle::GetSharedInstance();
   switch (danger_type) {
     case content::DOWNLOAD_DANGER_TYPE_DANGEROUS_URL:
     case content::DOWNLOAD_DANGER_TYPE_DANGEROUS_CONTENT:
     case content::DOWNLOAD_DANGER_TYPE_UNCOMMON_CONTENT:
@@ skipping 163 matching lines @@
 void DownloadItemView::AnimateStateTransition(State from, State to,
                                               gfx::SlideAnimation* animation) {
   if (from == NORMAL && to == HOT) {
     animation->Show();
   } else if (from == HOT && to == NORMAL) {
     animation->Hide();
   } else if (from != to) {
     animation->Reset((to == HOT) ? 1.0 : 0.0);
   }
 }