| Index: content/browser/frame_host/mixed_content_navigation_throttle.h
|
| diff --git a/content/browser/frame_host/mixed_content_navigation_throttle.h b/content/browser/frame_host/mixed_content_navigation_throttle.h
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..7d7ca60b643aa9c620b1ba90555ee1af1318d3eb
|
| --- /dev/null
|
| +++ b/content/browser/frame_host/mixed_content_navigation_throttle.h
|
| @@ -0,0 +1,99 @@
|
| +// Copyright 2016 The Chromium Authors. All rights reserved.
|
| +// Use of this source code is governed by a BSD-style license that can be
|
| +// found in the LICENSE file.
|
| +
|
| +#ifndef CONTENT_BROWSER_FRAME_HOST_MIXED_CONTENT_NAVIGATION_THROTTLE_H_
|
| +#define CONTENT_BROWSER_FRAME_HOST_MIXED_CONTENT_NAVIGATION_THROTTLE_H_
|
| +
|
| +#include <set>
|
| +
|
| +#include "base/gtest_prod_util.h"
|
| +#include "base/macros.h"
|
| +#include "content/common/content_export.h"
|
| +#include "content/public/browser/navigation_handle.h"
|
| +#include "content/public/browser/navigation_throttle.h"
|
| +#include "content/public/common/request_context_type.h"
|
| +#include "third_party/WebKit/public/platform/WebMixedContent.h"
|
| +
|
| +namespace content {
|
| +
|
| +class FrameTreeNode;
|
| +struct WebPreferences;
|
| +
|
| +using ThrottleCheckResult = NavigationThrottle::ThrottleCheckResult;
|
| +
|
| +// Responsible for browser process side mixed-content security. It checks only
|
| +// for frame-level resource loads (aka navigation loads); fetching of
|
| +// sub-resources are checked in the renderer process by MixedContentChecker.
|
| +// Changes to this class might need to be reflected on its renderer counterpart.
|
| +//
|
| +// Current mixed content draft that drives this implementation:
|
| +// https://w3c.github.io/webappsec-mixed-content/
|
| +class MixedContentNavigationThrottle : public NavigationThrottle {
|
| + public:
|
| + MixedContentNavigationThrottle(NavigationHandle* navigation_handle);
|
| + ~MixedContentNavigationThrottle() override;
|
| +
|
| + ThrottleCheckResult WillStartRequest() override;
|
| +
|
| + ThrottleCheckResult WillRedirectRequest() override;
|
| +
|
| + ThrottleCheckResult WillProcessResponse() override;
|
| +
|
| + private:
|
| + FRIEND_TEST_ALL_PREFIXES(MixedContentNavigationThrottleTest, IsMixedContent);
|
| +
|
| + // Copy of all mixed content related values from the blink::UseCounter enum.
|
| + enum UseCounterFeature {
|
| + MixedContentFormsSubmitted = 441,
|
| + MixedContentPrivateHostnameInPublicHostname = 530,
|
| + MixedContentPresent = 609,
|
| + MixedContentBlockable = 610,
|
| + MixedContentAudio = 611,
|
| + MixedContentDownload = 612,
|
| + MixedContentFavicon = 613,
|
| + MixedContentImage = 614,
|
| + MixedContentInternal = 615,
|
| + MixedContentPlugin = 616,
|
| + MixedContentPrefetch = 617,
|
| + MixedContentVideo = 618,
|
| + MixedContentInNonHTTPSFrameThatRestrictsMixedContent = 661,
|
| + MixedContentInSecureFrameThatDoesNotRestrictMixedContent = 662,
|
| + MixedContentWebSocket = 663,
|
| + MixedContentFormPresent = 665,
|
| + MixedContentBlockableAllowed = 896,
|
| + BlockableMixedContentInSubframeBlocked = 966,
|
| + };
|
| +
|
| + // Checks if a navigation should be blocked or not due to mixed content.
|
| + bool ShouldBlockNavigation(bool for_redirect);
|
| +
|
| + // Returns the parent frame where mixed content exists for the provided data
|
| + // or null if there is no mixed content.
|
| + FrameTreeNode* InWhichFrameIsContentMixed(FrameTreeNode* node,
|
| + const GURL& url);
|
| +
|
| + // Updates the renderer if any Blink features were used.
|
| + void MaybeSendBlinkFeatureUsageReport();
|
| +
|
| + // Reports basic mixed content features when any kinds of mixed is found.
|
| + void ReportBasicMixedContentFeatures(
|
| + RequestContextType request_context_type,
|
| + blink::WebMixedContent::ContextType mixed_content_context_type,
|
| + const WebPreferences& prefs);
|
| +
|
| + static bool CONTENT_EXPORT IsMixedContentForTesting(const GURL& origin_url,
|
| + const GURL& url);
|
| +
|
| + // Keeps track of mixed content features (as defined in UseCounter)
|
| + // encountered while running one of the navigation throttling steps. These
|
| + // values are reported to the respective renderer process once mixed content
|
| + // checking is finished.
|
| + std::set<int> mixed_content_features_;
|
| +
|
| + DISALLOW_COPY_AND_ASSIGN(MixedContentNavigationThrottle);
|
| +};
|
| +
|
| +} // namespace content
|
| +
|
| +#endif // CONTENT_BROWSER_FRAME_HOST_MIXED_CONTENT_NAVIGATION_THROTTLE_H_
|
|
|