Network traffic annotation added to chromium_url_request.

remoting/protocol/http_ice_config_request.cc

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "remoting/protocol/http_ice_config_request.h"
 
 #include "base/bind.h"
 #include "base/callback_helpers.h"
 #include "base/json/json_reader.h"
 #include "base/strings/string_number_conversions.h"
 #include "base/strings/string_util.h"
 #include "base/values.h"
 #include "net/base/url_util.h"
+#include "net/traffic_annotation/network_traffic_annotation.h"
 #include "remoting/protocol/ice_config.h"
 
 namespace remoting {
 namespace protocol {
 
 namespace {
 
 // Ensure ICE config is correct at least one hour after session starts.
 const int kMinimumConfigLifetimeSeconds = 3600;
 
@@ skipping 66 matching lines @@
 
   return true;
 }
 
 }  // namespace
 
 HttpIceConfigRequest::HttpIceConfigRequest(
     UrlRequestFactory* url_request_factory,
     const std::string& url)
     : url_(url) {
-  url_request_ =
-      url_request_factory->CreateUrlRequest(UrlRequest::Type::POST, url_);
+  net::NetworkTrafficAnnotationTag traffic_annotation =
+      net::DefineNetworkTrafficAnnotation("CRD_ice_config_request", R"(
+        semantics {
+          sender: "Chrome Remote Desktop"
+          description:
+            "Request is used by Chrome Remote Desktop to fetch ICE "
+            "configuration which contains list of STUN & TURN servers and TURN "
+            "credentials."
+          trigger: "Chrome Remote Desktop usage."
+          data: "None."
+          destination: GOOGLE_OWNED_SERVICE
+        }
+        policy {
+          cookies_allowed: false/true
+          cookies_store: "..."
+          setting:
+            "This feature cannot be disabled by settings. You can block Chrome "
+            "Remote Desktop as specified here: "
+            "https://support.google.com/chrome/a/answer/2799701?hl=en"
+          chrome_policy {
+            RemoteAccessHostFirewallTraversal {
+              policy_options {mode: MANDATORY}
+              RemoteAccessHostFirewallTraversal: false
+            }
+          }
+          policy_exception_justification:
+            "Above specified policy is only applicable on the host side and "
+            "doesn't have effect in Android and iOS client apps. The product "
+            "is shipped separately from Chromium, except on Chrome OS."
+        })");
+  url_request_ = url_request_factory->CreateUrlRequest(
+      UrlRequest::Type::POST, url_, traffic_annotation);
   url_request_->SetPostData("application/json", "");
 }
 
 HttpIceConfigRequest::~HttpIceConfigRequest() {}
 
 void HttpIceConfigRequest::Send(const OnIceConfigCallback& callback) {
   DCHECK(on_ice_config_callback_.is_null());
   DCHECK(!callback.is_null());
 
   on_ice_config_callback_ = callback;
@@ skipping 90 matching lines @@
   if (errors_found || ice_config.stun_servers.empty() ||
       ice_config.turn_servers.empty()) {
     ice_config.expiration_time = base::Time::Now();
   }
 
   base::ResetAndReturn(&on_ice_config_callback_).Run(ice_config);
 }
 
 }  // namespace protocol
 }  // namespace remoting