Network traffic annotation added to install_signer.

chrome/browser/extensions/install_signer.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/extensions/install_signer.h"
 
 #include <stddef.h>
 #include <stdint.h>
 #include <utility>
 
@@ skipping 12 matching lines @@
 #include "base/strings/string_split.h"
 #include "base/strings/string_util.h"
 #include "base/time/time.h"
 #include "base/values.h"
 #include "build/build_config.h"
 #include "chrome/common/chrome_switches.h"
 #include "crypto/random.h"
 #include "crypto/secure_hash.h"
 #include "crypto/sha2.h"
 #include "crypto/signature_verifier.h"
+#include "net/traffic_annotation/network_traffic_annotation.h"
 #include "net/url_request/url_fetcher.h"
 #include "net/url_request/url_fetcher_delegate.h"
 #include "net/url_request/url_request_context_getter.h"
 #include "net/url_request/url_request_status.h"
 #include "rlz/features/features.h"
 #include "url/gurl.h"
 
 #if BUILDFLAG(ENABLE_RLZ)
 #include "rlz/lib/machine_id.h"
 #endif
@@ skipping 323 matching lines @@
 
   if (!context_getter_) {
     ReportErrorViaCallback();
     return;
   }
 
   base::Closure closure = base::Bind(&InstallSigner::ParseFetchResponse,
                                      base::Unretained(this));
 
   delegate_.reset(new FetcherDelegate(closure));
+  net::NetworkTrafficAnnotationTag traffic_annotation =
+      net::DefineNetworkTrafficAnnotation("...", R"(
+        semantics {
+          sender: "..."

[Devlin, 2017/04/19 20:27:07]

extension install signer

[Ramin Halavati, 2017/04/21 05:50:40]

Done.

+          description: "..."

[Devlin, 2017/04/19 20:27:07]

Fetches the signatures for installed extensions

[Ramin Halavati, 2017/04/21 05:50:41]

Done.

+          trigger: "..."

[Devlin, 2017/04/19 20:27:07]

Chrome detects an extension that requires installation verification.

[Ramin Halavati, 2017/04/21 05:50:41]

Done.

+          data: "..."

[Devlin, 2017/04/19 20:27:07]

The ids of the extensions that need to be verified, as well as a salted hash of
the user's machine id.

[Ramin Halavati, 2017/04/21 05:50:41]

Done.

+          destination: WEBSITE/GOOGLE_OWNED_SERVICE/OTHER

[Devlin, 2017/04/19 20:27:07]

GOOGLE_OWNED_SERVICE

[Ramin Halavati, 2017/04/21 05:50:40]

Done.

+        }
+        policy {
+          cookies_allowed: false/true
+          cookies_store: "..."
+          setting: "..."
+          chrome_policy {

[Devlin, 2017/04/19 20:27:07]

This setting can be disabled by not installing any extensions. 
 ExtensionInstallBlacklist: '*'

[Ramin Halavati, 2017/04/21 05:50:41]

Done.

+            [POLICY_NAME] {
+              policy_options {mode: MANDATORY/RECOMMENDED/UNSET}
+              [POLICY_NAME]: ... //(value to disable it)
+            }
+          }
+          policy_exception_justification: "..."
+        })");
   url_fetcher_ = net::URLFetcher::Create(GetBackendUrl(), net::URLFetcher::POST,
-                                         delegate_.get());
+                                         delegate_.get(), traffic_annotation);
   url_fetcher_->SetRequestContext(context_getter_);
 
   // The request protocol is JSON of the form:
   // {
   //   "protocol_version": "1",
   //   "hash": "<base64-encoded hash value here>",
   //   "ids": [ "<id1>", "id2" ]
   // }
   base::DictionaryValue dictionary;
   dictionary.SetInteger(kProtocolVersionKey, 1);
@@ skipping 117 matching lines @@
     if (!verified)
       result.reset();
   }
 
   if (!callback_.is_null())
     callback_.Run(std::move(result));
 }
 
 
 }  // namespace extensions