| OLD | NEW | 
|---|
| 1 // Copyright 2017 The Chromium Authors. All rights reserved. | 1 // Copyright 2017 The Chromium Authors. All rights reserved. | 
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be | 
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. | 
| 4 | 4 | 
| 5 #include "components/safe_browsing/base_blocking_page.h" | 5 #include "components/safe_browsing/base_blocking_page.h" | 
| 6 | 6 | 
| 7 #include "base/bind.h" | 7 #include "base/bind.h" | 
| 8 #include "base/lazy_instance.h" | 8 #include "base/lazy_instance.h" | 
| 9 #include "base/memory/ptr_util.h" | 9 #include "base/memory/ptr_util.h" | 
| 10 #include "base/strings/string_number_conversions.h" | 10 #include "base/strings/string_number_conversions.h" | 
| 11 #include "base/time/time.h" | 11 #include "base/time/time.h" | 
| 12 #include "components/safe_browsing_db/safe_browsing_prefs.h" | 12 #include "components/safe_browsing_db/safe_browsing_prefs.h" | 
| 13 #include "components/security_interstitials/content/security_interstitial_contro
     ller_client.h" | 13 #include "components/security_interstitials/content/security_interstitial_contro
     ller_client.h" | 
| 14 #include "components/security_interstitials/core/metrics_helper.h" | 14 #include "components/security_interstitials/core/metrics_helper.h" | 
| 15 #include "content/public/browser/interstitial_page.h" | 15 #include "content/public/browser/interstitial_page.h" | 
| 16 #include "content/public/browser/navigation_entry.h" | 16 #include "content/public/browser/navigation_entry.h" | 
| 17 #include "content/public/browser/user_metrics.h" | 17 #include "content/public/browser/user_metrics.h" | 
| 18 #include "content/public/browser/web_contents.h" | 18 #include "content/public/browser/web_contents.h" | 
| 19 | 19 | 
| 20 using base::UserMetricsAction; | 20 using base::UserMetricsAction; | 
| 21 using content::InterstitialPage; | 21 using content::InterstitialPage; | 
| 22 using content::WebContents; | 22 using content::WebContents; | 
| 23 using security_interstitials::SafeBrowsingErrorUI; | 23 using security_interstitials::SafeBrowsingErrorUI; | 
| 24 using security_interstitials::SecurityInterstitialControllerClient; | 24 using security_interstitials::SecurityInterstitialControllerClient; | 
| 25 | 25 | 
| 26 namespace safe_browsing { | 26 namespace safe_browsing { | 
| 27 | 27 | 
| 28 namespace { | 28 namespace { | 
| 29 | 29 | 
|  | 30 // After a safe browsing interstitial where the user opted-in to the report | 
|  | 31 // but clicked "proceed anyway", we delay the call to | 
|  | 32 // ThreatDetails::FinishCollection() by this much time (in | 
|  | 33 // milliseconds). | 
|  | 34 const int64_t kThreatDetailsProceedDelayMilliSeconds = 3000; | 
|  | 35 | 
| 30 base::LazyInstance<BaseBlockingPage::UnsafeResourceMap>::Leaky | 36 base::LazyInstance<BaseBlockingPage::UnsafeResourceMap>::Leaky | 
| 31     g_unsafe_resource_map = LAZY_INSTANCE_INITIALIZER; | 37     g_unsafe_resource_map = LAZY_INSTANCE_INITIALIZER; | 
| 32 | 38 | 
| 33 }  // namespace | 39 }  // namespace | 
| 34 | 40 | 
| 35 BaseBlockingPage::BaseBlockingPage( | 41 BaseBlockingPage::BaseBlockingPage( | 
| 36     BaseUIManager* ui_manager, | 42     BaseUIManager* ui_manager, | 
| 37     WebContents* web_contents, | 43     WebContents* web_contents, | 
| 38     const GURL& main_frame_url, | 44     const GURL& main_frame_url, | 
| 39     const UnsafeResourceList& unsafe_resources, | 45     const UnsafeResourceList& unsafe_resources, | 
| 40     std::unique_ptr<SecurityInterstitialControllerClient> controller_client, | 46     std::unique_ptr<SecurityInterstitialControllerClient> controller_client, | 
| 41     const SafeBrowsingErrorUI::SBErrorDisplayOptions& display_options) | 47     const SafeBrowsingErrorUI::SBErrorDisplayOptions& display_options) | 
| 42     : SecurityInterstitialPage(web_contents, | 48     : SecurityInterstitialPage(web_contents, | 
| 43                                unsafe_resources[0].url, | 49                                unsafe_resources[0].url, | 
| 44                                std::move(controller_client)), | 50                                std::move(controller_client)), | 
| 45       ui_manager_(ui_manager), | 51       ui_manager_(ui_manager), | 
| 46       main_frame_url_(main_frame_url), | 52       main_frame_url_(main_frame_url), | 
| 47       navigation_entry_index_to_remove_( | 53       navigation_entry_index_to_remove_( | 
| 48           IsMainPageLoadBlocked(unsafe_resources) ? | 54           IsMainPageLoadBlocked(unsafe_resources) | 
| 49               -1 : | 55               ? -1 | 
| 50               web_contents->GetController().GetLastCommittedEntryIndex()), | 56               : web_contents->GetController().GetLastCommittedEntryIndex()), | 
| 51       unsafe_resources_(unsafe_resources), | 57       unsafe_resources_(unsafe_resources), | 
| 52       sb_error_ui_(base::MakeUnique<SafeBrowsingErrorUI>( | 58       sb_error_ui_(base::MakeUnique<SafeBrowsingErrorUI>( | 
| 53                        unsafe_resources_[0].url, main_frame_url_, | 59           unsafe_resources_[0].url, | 
| 54                        GetInterstitialReason(unsafe_resources_), | 60           main_frame_url_, | 
| 55                        display_options, | 61           GetInterstitialReason(unsafe_resources_), | 
| 56                        ui_manager->app_locale(), | 62           display_options, | 
| 57                        base::Time::NowFromSystemTime(), | 63           ui_manager->app_locale(), | 
| 58                        controller())), | 64           base::Time::NowFromSystemTime(), | 
| 59       proceeded_(false) {} | 65           controller())), | 
|  | 66       proceeded_(false), | 
|  | 67       threat_details_proceed_delay_ms_(kThreatDetailsProceedDelayMilliSeconds) { | 
|  | 68 } | 
| 60 | 69 | 
| 61 BaseBlockingPage::~BaseBlockingPage() {} | 70 BaseBlockingPage::~BaseBlockingPage() {} | 
| 62 | 71 | 
| 63 // static | 72 // static | 
| 64 const SafeBrowsingErrorUI::SBErrorDisplayOptions | 73 const SafeBrowsingErrorUI::SBErrorDisplayOptions | 
| 65 BaseBlockingPage::CreateDefaultDisplayOptions() { | 74 BaseBlockingPage::CreateDefaultDisplayOptions() { | 
| 66   return SafeBrowsingErrorUI::SBErrorDisplayOptions( | 75   return SafeBrowsingErrorUI::SBErrorDisplayOptions( | 
| 67       true,    // IsMainPageLoadBlocked() | 76       true,    // IsMainPageLoadBlocked() | 
| 68       false,   // kSafeBrowsingExtendedReportingOptInAllowed | 77       false,   // kSafeBrowsingExtendedReportingOptInAllowed | 
| 69       false,   // is_off_the_record | 78       false,   // is_off_the_record | 
| 70       false,   // is_extended_reporting | 79       false,   // is_extended_reporting | 
| 71       false,   // is_scout | 80       false,   // is_scout | 
| 72       false);  // kSafeBrowsingProceedAnywayDisabled | 81       false);  // kSafeBrowsingProceedAnywayDisabled | 
| 73 } | 82 } | 
| 74 | 83 | 
| 75 // static | 84 // static | 
| 76 void BaseBlockingPage::ShowBlockingPage( | 85 void BaseBlockingPage::ShowBlockingPage( | 
| 77     BaseUIManager* ui_manager, | 86     BaseUIManager* ui_manager, | 
| 78     const UnsafeResource& unsafe_resource) { | 87     const UnsafeResource& unsafe_resource) { | 
| 79   WebContents* web_contents = unsafe_resource.web_contents_getter.Run(); | 88   WebContents* web_contents = unsafe_resource.web_contents_getter.Run(); | 
| 80 | 89 | 
| 81   if (!InterstitialPage::GetInterstitialPage(web_contents) || | 90   if (InterstitialPage::GetInterstitialPage(web_contents) && | 
| 82       !unsafe_resource.is_subresource) { | 91       unsafe_resource.is_subresource) { | 
|  | 92     // This is an interstitial for a page's resource, let's queue it. | 
|  | 93     UnsafeResourceMap* unsafe_resource_map = GetUnsafeResourcesMap(); | 
|  | 94     (*unsafe_resource_map)[web_contents].push_back(unsafe_resource); | 
|  | 95   } else { | 
| 83     // There is no interstitial currently showing in that tab, or we are about | 96     // There is no interstitial currently showing in that tab, or we are about | 
| 84     // to display a new one for the main frame. If there is already an | 97     // to display a new one for the main frame. If there is already an | 
| 85     // interstitial, showing the new one will automatically hide the old one. | 98     // interstitial, showing the new one will automatically hide the old one. | 
| 86     content::NavigationEntry* entry = | 99     content::NavigationEntry* entry = | 
| 87         unsafe_resource.GetNavigationEntryForResource(); | 100         unsafe_resource.GetNavigationEntryForResource(); | 
| 88     const UnsafeResourceList resources{unsafe_resource}; | 101     const UnsafeResourceList unsafe_resources{unsafe_resource}; | 
| 89     BaseBlockingPage* blocking_page = | 102     BaseBlockingPage* blocking_page = new BaseBlockingPage( | 
| 90         new BaseBlockingPage( | 103         ui_manager, web_contents, entry ? entry->GetURL() : GURL(), | 
| 91             ui_manager, web_contents, | 104         unsafe_resources, | 
| 92             entry ? entry->GetURL() : GURL(), | 105         CreateControllerClient(web_contents, unsafe_resources, ui_manager), | 
| 93             resources, | 106         CreateDefaultDisplayOptions()); | 
| 94             CreateControllerClient( |  | 
| 95                 web_contents, resources, |  | 
| 96                 ui_manager->history_service(web_contents), |  | 
| 97                 ui_manager->app_locale(), |  | 
| 98                 ui_manager->default_safe_page()), |  | 
| 99                 CreateDefaultDisplayOptions()); |  | 
| 100     blocking_page->Show(); | 107     blocking_page->Show(); | 
| 101     return; |  | 
| 102   } | 108   } | 
| 103 |  | 
| 104   // This is an interstitial for a page's resource, let's queue it. |  | 
| 105   UnsafeResourceMap* unsafe_resource_map = GetUnsafeResourcesMap(); |  | 
| 106   (*unsafe_resource_map)[web_contents].push_back(unsafe_resource); |  | 
| 107 } | 109 } | 
| 108 | 110 | 
| 109 // static | 111 // static | 
| 110 bool BaseBlockingPage::IsMainPageLoadBlocked( | 112 bool BaseBlockingPage::IsMainPageLoadBlocked( | 
| 111     const UnsafeResourceList& unsafe_resources) { | 113     const UnsafeResourceList& unsafe_resources) { | 
| 112   // If there is more than one unsafe resource, the main page load must not be | 114   // If there is more than one unsafe resource, the main page load must not be | 
| 113   // blocked. Otherwise, check if the one resource is. | 115   // blocked. Otherwise, check if the one resource is. | 
| 114   return unsafe_resources.size() == 1 && | 116   return unsafe_resources.size() == 1 && | 
| 115          unsafe_resources[0].IsMainPageLoadBlocked(); | 117          unsafe_resources[0].IsMainPageLoadBlocked(); | 
| 116 } | 118 } | 
| 117 | 119 | 
| 118 void BaseBlockingPage::OnProceed() { | 120 void BaseBlockingPage::OnProceed() { | 
| 119   proceeded_ = true; | 121   set_proceeded(true); | 
|  | 122   UpdateMetricsAfterSecurityInterstitial(); | 
|  | 123 | 
|  | 124   // Send the threat details, if we opted to. | 
|  | 125   FinishThreatDetails( | 
|  | 126       base::TimeDelta::FromMilliseconds(threat_details_proceed_delay_ms_), | 
|  | 127       true, /* did_proceed */ | 
|  | 128       controller()->metrics_helper()->NumVisits()); | 
| 120 | 129 | 
| 121   ui_manager_->OnBlockingPageDone(unsafe_resources_, true /* proceed */, | 130   ui_manager_->OnBlockingPageDone(unsafe_resources_, true /* proceed */, | 
| 122                                   web_contents(), main_frame_url_); | 131                                   web_contents(), main_frame_url_); | 
|  | 132 | 
|  | 133   HandleSubresourcesAfterProceed(); | 
|  | 134 } | 
|  | 135 | 
|  | 136 void BaseBlockingPage::HandleSubresourcesAfterProceed() {} | 
|  | 137 | 
|  | 138 void BaseBlockingPage::SetThreatDetailsProceedDelayForTesting(int64_t delay) { | 
|  | 139   threat_details_proceed_delay_ms_ = delay; | 
| 123 } | 140 } | 
| 124 | 141 | 
| 125 void BaseBlockingPage::OnDontProceed() { | 142 void BaseBlockingPage::OnDontProceed() { | 
| 126   // We could have already called Proceed(), in which case we must not notify | 143   // We could have already called Proceed(), in which case we must not notify | 
| 127   // the SafeBrowsingUIManager again, as the client has been deleted. | 144   // the SafeBrowsingUIManager again, as the client has been deleted. | 
| 128   if (proceeded_) | 145   if (proceeded_) | 
| 129     return; | 146     return; | 
| 130 | 147 | 
| 131   UpdateMetricsAfterSecurityInterstitial(); | 148   UpdateMetricsAfterSecurityInterstitial(); | 
| 132   if (!sb_error_ui_->is_proceed_anyway_disabled()) { | 149   if (!sb_error_ui_->is_proceed_anyway_disabled()) { | 
| (...skipping 160 matching lines...) Expand 10 before | Expand all | Expand 10 after  Loading... | 
| 293 | 310 | 
| 294 SafeBrowsingErrorUI* BaseBlockingPage::sb_error_ui() const { | 311 SafeBrowsingErrorUI* BaseBlockingPage::sb_error_ui() const { | 
| 295   return sb_error_ui_.get(); | 312   return sb_error_ui_.get(); | 
| 296 } | 313 } | 
| 297 | 314 | 
| 298 void BaseBlockingPage::set_proceeded(bool proceeded) { | 315 void BaseBlockingPage::set_proceeded(bool proceeded) { | 
| 299   proceeded_ = proceeded; | 316   proceeded_ = proceeded; | 
| 300 } | 317 } | 
| 301 | 318 | 
| 302 // static | 319 // static | 
|  | 320 security_interstitials::MetricsHelper::ReportDetails | 
|  | 321 BaseBlockingPage::GetReportingInfo(const UnsafeResourceList& unsafe_resources) { | 
|  | 322   SafeBrowsingErrorUI::SBInterstitialReason interstitial_reason = | 
|  | 323       GetInterstitialReason(unsafe_resources); | 
|  | 324 | 
|  | 325   security_interstitials::MetricsHelper::ReportDetails reporting_info; | 
|  | 326   reporting_info.metric_prefix = | 
|  | 327       GetMetricPrefix(unsafe_resources, interstitial_reason); | 
|  | 328   reporting_info.extra_suffix = GetExtraMetricsSuffix(unsafe_resources); | 
|  | 329   return reporting_info; | 
|  | 330 } | 
|  | 331 | 
|  | 332 // static | 
| 303 std::unique_ptr<SecurityInterstitialControllerClient> | 333 std::unique_ptr<SecurityInterstitialControllerClient> | 
| 304 BaseBlockingPage::CreateControllerClient( | 334 BaseBlockingPage::CreateControllerClient( | 
| 305     content::WebContents* web_contents, | 335     content::WebContents* web_contents, | 
| 306     const UnsafeResourceList& unsafe_resources, | 336     const UnsafeResourceList& unsafe_resources, | 
| 307     history::HistoryService* history_service, | 337     BaseUIManager* ui_manager) { | 
| 308     const std::string& app_locale, | 338   history::HistoryService* history_service = | 
| 309     const GURL& default_safe_page) { | 339       ui_manager->history_service(web_contents); | 
| 310   SafeBrowsingErrorUI::SBInterstitialReason interstitial_reason = |  | 
| 311       GetInterstitialReason(unsafe_resources); |  | 
| 312   security_interstitials::MetricsHelper::ReportDetails reporting_info; |  | 
| 313   reporting_info.metric_prefix = |  | 
| 314       GetMetricPrefix(unsafe_resources, interstitial_reason); |  | 
| 315   reporting_info.extra_suffix = GetExtraMetricsSuffix(unsafe_resources); |  | 
| 316 | 340 | 
| 317   std::unique_ptr<security_interstitials::MetricsHelper> metrics_helper = | 341   std::unique_ptr<security_interstitials::MetricsHelper> metrics_helper = | 
| 318       base::MakeUnique<security_interstitials::MetricsHelper>( | 342       base::MakeUnique<security_interstitials::MetricsHelper>( | 
| 319           unsafe_resources[0].url, reporting_info, history_service); | 343           unsafe_resources[0].url, GetReportingInfo(unsafe_resources), | 
|  | 344           history_service); | 
| 320 | 345 | 
| 321   return base::MakeUnique<SecurityInterstitialControllerClient>( | 346   return base::MakeUnique<SecurityInterstitialControllerClient>( | 
| 322       web_contents, std::move(metrics_helper), nullptr, app_locale, | 347       web_contents, std::move(metrics_helper), nullptr, /* prefs */ | 
| 323       default_safe_page); | 348       ui_manager->app_locale(), ui_manager->default_safe_page()); | 
| 324 } | 349 } | 
| 325 | 350 | 
| 326 }  // namespace safe_browsing | 351 }  // namespace safe_browsing | 
| OLD | NEW | 
|---|