Add origin of settings reset request to feedback reports.

chrome/browser/ui/startup/startup_browser_creator.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/startup/startup_browser_creator.h"
 
 #include <stddef.h>
 
 #include <algorithm>  // For max().
 #include <memory>
@@ skipping 12 matching lines @@
 #include "base/logging.h"
 #include "base/macros.h"
 #include "base/metrics/histogram_macros.h"
 #include "base/metrics/statistics_recorder.h"
 #include "base/metrics/user_metrics.h"
 #include "base/metrics/user_metrics_action.h"
 #include "base/strings/string_number_conversions.h"
 #include "base/strings/string_split.h"
 #include "base/strings/string_tokenizer.h"
 #include "base/strings/string_util.h"
+#include "base/strings/stringprintf.h"
 #include "base/strings/utf_string_conversions.h"
 #include "base/threading/thread_restrictions.h"
 #include "base/trace_event/trace_event.h"
 #include "build/build_config.h"
 #include "chrome/browser/app_mode/app_mode_utils.h"
 #include "chrome/browser/browser_process.h"
 #include "chrome/browser/chrome_notification_types.h"
 #include "chrome/browser/custom_handlers/protocol_handler_registry.h"
 #include "chrome/browser/extensions/startup_helper.h"
 #include "chrome/browser/extensions/unpacked_installer.h"
@@ skipping 475 matching lines @@
     // URL, otherwise we will look in the current directory for a file named
     // 'about' if the browser was started with a about:foo argument.
     if (!url.is_valid()) {
       base::ThreadRestrictions::ScopedAllowIO allow_io;
       url = url_formatter::FixupRelativeFile(cur_dir, param);
     }
     // Exclude dangerous schemes.
     if (!url.is_valid())
       continue;
 
+#if !defined(OS_CHROMEOS)
+    static const char kCctHash[] = "CCT";

[robertshield, 2016/08/10 20:35:42]

Do you need a # before the CCT?

[alito, 2016/08/10 21:06:33]

Argh. The hash fell off during cleanup. Good catch!

+    const std::string reset_settings_url =
+        base::StringPrintf("%s%s", chrome::kChromeUISettingsURL,
+                           chrome::kResetProfileSettingsSubPage);
+#endif
+
     ChildProcessSecurityPolicy* policy =
         ChildProcessSecurityPolicy::GetInstance();
     if (policy->IsWebSafeScheme(url.scheme()) ||
         url.SchemeIs(url::kFileScheme) ||
 #if defined(OS_CHROMEOS)
         // In ChromeOS, allow any settings page to be specified on the command
         // line. See ExistingUserController::OnLoginSuccess.
         base::StartsWith(url.spec(), chrome::kChromeUISettingsURL,
                          base::CompareCase::SENSITIVE) ||
 #else
         // Exposed for external cleaners to offer a settings reset to the
-        // user. So the URL must match exactly, without any param or prefix.
-        (url.spec() ==
-         std::string(chrome::kChromeUISettingsURL) +
-             chrome::kResetProfileSettingsSubPage) ||
+        // user. The allowed URLs must match exactly.
+        (url.spec() == reset_settings_url) ||
+        (url.spec() == reset_settings_url + kCctHash) ||
 #endif
         (url.spec().compare(url::kAboutBlankURL) == 0)) {
       urls.push_back(url);
     }
   }
   return urls;
 }
 
 bool StartupBrowserCreator::ProcessCmdLineImpl(
     const base::CommandLine& command_line,
@@ skipping 400 matching lines @@
     if (!entry->IsSigninRequired()) {
       Profile* profile = profile_manager->GetProfile(entry->GetPath());
       if (profile)
         return profile;
     }
   }
 
   return nullptr;
 }
 #endif  // !defined(OS_CHROMEOS) && !defined(OS_ANDROID)