Chromium Code Reviews| OLD | NEW |
|---|---|
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 // | 4 // |
| 5 // Implementation of the ThreatDetails class. | 5 // Implementation of the ThreatDetails class. |
| 6 | 6 |
| 7 #include "chrome/browser/safe_browsing/threat_details.h" | 7 #include "chrome/browser/safe_browsing/threat_details.h" |
| 8 | 8 |
| 9 #include <stdint.h> | 9 #include <stdint.h> |
| 10 | 10 |
| 11 #include "base/bind.h" | 11 #include "base/bind.h" |
| 12 #include "base/lazy_instance.h" | 12 #include "base/lazy_instance.h" |
| 13 #include "base/md5.h" | 13 #include "base/md5.h" |
| 14 #include "base/strings/string_util.h" | 14 #include "base/strings/string_util.h" |
| 15 #include "chrome/browser/safe_browsing/safe_browsing_service.h" | 15 #include "chrome/browser/safe_browsing/safe_browsing_service.h" |
| 16 #include "chrome/browser/safe_browsing/threat_details_cache.h" | 16 #include "chrome/browser/safe_browsing/threat_details_cache.h" |
| 17 #include "chrome/common/safe_browsing/csd.pb.h" | 17 #include "chrome/common/safe_browsing/csd.pb.h" |
| 18 #include "components/data_use_measurement/core/data_use_user_data.h" | 18 #include "components/data_use_measurement/core/data_use_user_data.h" |
| 19 #include "content/public/browser/browser_thread.h" | 19 #include "content/public/browser/browser_thread.h" |
| 20 #include "net/base/host_port_pair.h" | 20 #include "net/base/host_port_pair.h" |
| 21 #include "net/base/load_flags.h" | 21 #include "net/base/load_flags.h" |
| 22 #include "net/base/net_errors.h" | 22 #include "net/base/net_errors.h" |
| 23 #include "net/http/http_response_headers.h" | 23 #include "net/http/http_response_headers.h" |
| 24 #include "net/traffic_annotation/network_traffic_annotation.h" | |
| 24 #include "net/url_request/url_fetcher.h" | 25 #include "net/url_request/url_fetcher.h" |
| 25 #include "net/url_request/url_request_context_getter.h" | 26 #include "net/url_request/url_request_context_getter.h" |
| 26 #include "net/url_request/url_request_status.h" | 27 #include "net/url_request/url_request_status.h" |
| 27 | 28 |
| 28 using content::BrowserThread; | 29 using content::BrowserThread; |
| 29 | 30 |
| 30 // Only send small files for now, a better strategy would use the size | 31 // Only send small files for now, a better strategy would use the size |
| 31 // of the whole report and the user's bandwidth. | 32 // of the whole report and the user's bandwidth. |
| 32 static const uint32_t kMaxBodySizeBytes = 1024; | 33 static const uint32_t kMaxBodySizeBytes = 1024; |
| 33 | 34 |
| (...skipping 40 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
| 74 AllDone(true); | 75 AllDone(true); |
| 75 return; | 76 return; |
| 76 } | 77 } |
| 77 | 78 |
| 78 if (!request_context_getter_.get()) { | 79 if (!request_context_getter_.get()) { |
| 79 DVLOG(1) << "Missing request context getter"; | 80 DVLOG(1) << "Missing request context getter"; |
| 80 AllDone(false); | 81 AllDone(false); |
| 81 return; | 82 return; |
| 82 } | 83 } |
| 83 | 84 |
| 84 current_fetch_ = net::URLFetcher::Create(GURL(resources_it_->first), | 85 net::NetworkTrafficAnnotationTag traffic_annotation = |
| 85 net::URLFetcher::GET, this); | 86 net::DefineNetworkTrafficAnnotation("safe_browsing_cache_collector", R"( |
| 87 semantics { | |
| 88 sender: "Threat Details Cache Collector" | |
| 89 description: | |
| 90 "This request fetches differnt items from safe browsing cache " | |
| 91 "and DOES NOT make an actual network request." | |
| 92 trigger: | |
| 93 "When safe browsing extended report is collecting data." | |
| 94 data: | |
| 95 "None" | |
| 96 destination: OTHER | |
| 97 } | |
| 98 policy { | |
| 99 cookies_allowed: false | |
| 100 setting: | |
| 101 "Users can enable or disable this feature by stopping sending " | |
| 102 "security incident reports to Google via disabling 'Automatically " | |
| 103 "report details of possible security incdients to Google.' in " | |
| 104 "Chrome's settings under Advanced Settings, Privacy. The feature " | |
| 105 "is enabled by default." | |
|
Nathan Parker
2017/03/06 17:48:54
is disabled by default
Ramin Halavati
2017/03/07 08:24:47
Done.
| |
| 106 policy { | |
| 107 SafeBrowsingExtendedReportingOptInAllowed { | |
| 108 policy_options {mode: MANDATORY} | |
| 109 value: false | |
|
Nathan Parker
2017/03/06 17:48:54
I'm not sure what "false" means in this context.
Ramin Halavati
2017/03/07 08:24:47
Here we need the value that disables the feature,
| |
| 110 } | |
| 111 } | |
| 112 })"); | |
| 113 | |
| 114 current_fetch_ = | |
| 115 net::URLFetcher::Create(GURL(resources_it_->first), net::URLFetcher::GET, | |
| 116 this, traffic_annotation); | |
| 86 data_use_measurement::DataUseUserData::AttachToFetcher( | 117 data_use_measurement::DataUseUserData::AttachToFetcher( |
| 87 current_fetch_.get(), | 118 current_fetch_.get(), |
| 88 data_use_measurement::DataUseUserData::SAFE_BROWSING); | 119 data_use_measurement::DataUseUserData::SAFE_BROWSING); |
| 89 current_fetch_->SetRequestContext(request_context_getter_.get()); | 120 current_fetch_->SetRequestContext(request_context_getter_.get()); |
| 90 // Only from cache, and don't save cookies. | 121 // Only from cache, and don't save cookies. |
| 91 current_fetch_->SetLoadFlags(net::LOAD_ONLY_FROM_CACHE | | 122 current_fetch_->SetLoadFlags(net::LOAD_ONLY_FROM_CACHE | |
| 92 net::LOAD_SKIP_CACHE_VALIDATION | | 123 net::LOAD_SKIP_CACHE_VALIDATION | |
| 93 net::LOAD_DO_NOT_SAVE_COOKIES); | 124 net::LOAD_DO_NOT_SAVE_COOKIES); |
| 94 current_fetch_->SetAutomaticallyRetryOn5xx(false); // No retries. | 125 current_fetch_->SetAutomaticallyRetryOn5xx(false); // No retries. |
| 95 current_fetch_->Start(); // OnURLFetchComplete will be called when done. | 126 current_fetch_->Start(); // OnURLFetchComplete will be called when done. |
| (...skipping 108 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
| 204 | 235 |
| 205 void ThreatDetailsCacheCollector::AllDone(bool success) { | 236 void ThreatDetailsCacheCollector::AllDone(bool success) { |
| 206 DVLOG(1) << "AllDone"; | 237 DVLOG(1) << "AllDone"; |
| 207 DCHECK_CURRENTLY_ON(BrowserThread::IO); | 238 DCHECK_CURRENTLY_ON(BrowserThread::IO); |
| 208 *result_ = success; | 239 *result_ = success; |
| 209 BrowserThread::PostTask(BrowserThread::IO, FROM_HERE, callback_); | 240 BrowserThread::PostTask(BrowserThread::IO, FROM_HERE, callback_); |
| 210 callback_.Reset(); | 241 callback_.Reset(); |
| 211 } | 242 } |
| 212 | 243 |
| 213 } // namespace safe_browsing | 244 } // namespace safe_browsing |
| OLD | NEW |