Submit a sample of notification images to Safe Browsing

chrome/common/safe_browsing/csd.proto

Index: chrome/common/safe_browsing/csd.proto
diff --git a/chrome/common/safe_browsing/csd.proto b/chrome/common/safe_browsing/csd.proto
index c98152aae1a51efa35eeddf5e3f7a75f5d311e0b..349b74f2cedaf52c359f7d73e59090db122a3e68 100644
--- a/chrome/common/safe_browsing/csd.proto
+++ b/chrome/common/safe_browsing/csd.proto
@@ -835,3 +835,29 @@ message ClientSafeBrowsingReportRequest {
   // DANGEROUS_DOWNLOAD_BY_API.
   optional bytes token = 15;
 }
+
+// Canonical representation of raster image data.
+message ImageData {
+  // Image bitmap encoded as PNG, after downscaling to <= 512x512.
+  optional bytes png_data = 1;

[Nathan Parker, 2017/01/19 01:22:09]

awoz@ has requested that this be "data" and that we add back a mime type.  If we
don't have an mime type, we can just set it to "image/png" since that's what
we're filling in.

This way the proto can support other types in the future.

See
https://critique.corp.google.com/#review/143594840/depot/google3/quality/trus...

[harkness, 2017/01/19 16:20:55]

I added in mime_type as a field, and it's hard coded to "image/png" in the
notification image reporter. 

+
+  message Dimensions {
+    optional int32 width = 1;
+    optional int32 height = 2;
+  }
+
+  optional Dimensions dimensions = 2;
+  optional Dimensions original_dimensions = 3;  // iff downscaled
+}
+
+// Reporting protobuf for an image served as part of a browser notification.
+// There is no response (an empty body) to this request.
+message NotificationImageReportRequest {
+  optional string notification_origin = 1;  // Src-origin of the notification.
+  optional ImageData image = 2;             // The bitmap of the image.
+
+  // Note that the image URL is deliberately omitted as it would be untrusted,
+  // since the notification image fetch may be intercepted by a Service Worker
+  // (even if the image URL is cross-origin). Otherwise a website could mislead
+  // Safe Browsing into associating phishing image bitmaps with safe image URLs.
+}