Add download pings for: .rels, .msg, .eml. Add UMA for .rtf.

chrome/browser/download/download_extensions.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <set>
 #include <string>
 
 #include "chrome/browser/download/download_extensions.h"
 
 #include "base/macros.h"
@@ skipping 53 matching lines @@
     {"swf", DANGEROUS, DISALLOW_AUTO_OPEN},
     {"spl", DANGEROUS, DISALLOW_AUTO_OPEN},
 
     // Chrome extensions should be obtained through the web store. Allowed to
     // open automatically because Chrome displays a prompt prior to
     // installation.
     {"crx", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     // Included for parity with kSafeBrowsingFileTypes.
     {"bin", NOT_DANGEROUS, ALLOW_AUTO_OPEN},
+    {"rtf", NOT_DANGEROUS, ALLOW_AUTO_OPEN},
 
     // Archive file types. Not inherently dangerous, but could contain dangerous
     // files. Included for parity with kSafeBrowsingFileTypes.
     {"001", NOT_DANGEROUS, ALLOW_AUTO_OPEN},
     {"7z", NOT_DANGEROUS, ALLOW_AUTO_OPEN},
     {"ace", NOT_DANGEROUS, ALLOW_AUTO_OPEN},
     {"arc", NOT_DANGEROUS, ALLOW_AUTO_OPEN},
     {"arj", NOT_DANGEROUS, ALLOW_AUTO_OPEN},
     {"b64", NOT_DANGEROUS, ALLOW_AUTO_OPEN},
     {"balz", NOT_DANGEROUS, ALLOW_AUTO_OPEN},
@@ skipping 142 matching lines @@
 
     // Control panel tool. Executable.
     {"cpl", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     // Signed certificate file.
     {"crt", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     // Windows executables.
     {"dll", DANGEROUS, DISALLOW_AUTO_OPEN},
     {"drv", DANGEROUS, DISALLOW_AUTO_OPEN},
+
+    // Opens in Outlook. Not common, but could be exploited (CVE-2015-6172)
+    {"eml", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
+
+    // Windows executable
     {"exe", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     // Font file, uses Portable Executable or New Executable format. Not
     // supposed to contain executable code.
     {"fon", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     // Microsoft FoxPro Compiled Source.
     {"fxp", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     // Windows Sidebar Gadget (Vista & Win 7). ZIP archive containing html + js.
@@ skipping 63 matching lines @@
     // Multipart HTML.
     {"mht", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
     {"mhtml", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     {"mmc", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
     {"mof", DANGEROUS, ALLOW_AUTO_OPEN},
 
     // Microsoft Management Console Snap-in. Contains executable code.
     {"msc", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
+    // Opens in Outlook. Not common, but could be exploited (CVE-2015-6172)
+    {"msg", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
+
     // Microsoft Shell.
     {"msh", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"msh1", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"msh2", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"mshxml", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"msh1xml", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"msh2xml", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     // Windows Installer.
     {"msi", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"msp", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"mst", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     // ActiveX Control.
     {"ocx", DANGEROUS, DISALLOW_AUTO_OPEN},
 
     // Microsoft Office Profile Settings File.
     {"ops", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     // Portable Application Installer File.
     {"paf", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     // Extensions that will open in IE even when chrome is set as default
     // browser.
     {"partial", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"xrm-ms", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
+    {"rels", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"svg", NOT_DANGEROUS, ALLOW_AUTO_OPEN},
     {"xml", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
     {"xsl", ALLOW_ON_USER_GESTURE, DISALLOW_AUTO_OPEN},
 
     // Microsoft Visual Test.
     {"pcd", ALLOW_ON_USER_GESTURE, ALLOW_AUTO_OPEN},
 
     // Program Information File. Originally intended to configure execution
     // environment for legacy DOS files. They aren't meant to contain executable
     // code. But Windows may execute a PIF file that is sniffed as a PE file.
@@ skipping 187 matching lines @@
 
 DownloadDangerLevel GetFileDangerLevel(const base::FilePath& path) {
   return GetFileType(path).danger_level;
 }
 
 bool IsAllowedToOpenAutomatically(const base::FilePath& path) {
   return GetFileType(path).auto_open_hint == ALLOW_AUTO_OPEN;
 }
 
 }  // namespace download_util