Network traffic annotation added to URLFetcher.

net/url_request/report_sender.cc

 // Copyright 2015 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/url_request/report_sender.h"
 
 #include <utility>
 
 #include "base/memory/ptr_util.h"
 #include "net/base/elements_upload_data_stream.h"
 #include "net/base/load_flags.h"
 #include "net/base/request_priority.h"
 #include "net/base/upload_bytes_element_reader.h"
+#include "net/traffic_annotation/network_traffic_annotation.h"
 #include "net/url_request/url_request_context.h"
 #include "net/url_request/url_request_status.h"
 
 namespace {
 const void* const kUserDataKey = &kUserDataKey;
 
 class CallbackInfo : public base::SupportsUserData::Data {
  public:
   CallbackInfo(const net::ReportSender::SuccessCallback& success_callback,
                const net::ReportSender::ErrorCallback& error_callback)
@@ skipping 23 matching lines @@
 
 ReportSender::~ReportSender() {
 }
 
 void ReportSender::Send(const GURL& report_uri,
                         base::StringPiece content_type,
                         base::StringPiece report,
                         const SuccessCallback& success_callback,
                         const ErrorCallback& error_callback) {
   DCHECK(!content_type.empty());
-  std::unique_ptr<URLRequest> url_request =
-      request_context_->CreateRequest(report_uri, DEFAULT_PRIORITY, this);
+  net::NetworkTrafficAnnotationTag traffic_annotation =
+      net::DefineNetworkTrafficAnnotation("...", R"(
+        semantics {
+          sender: "..."
+          description: "..."
+          trigger: "..."
+          data: "..."
+          destination: WEBSITE/GOOGLE_OWNED_SERVICE/OTHER/LOCAL
+        }
+        policy {
+          cookies_allowed: false/true
+          cookies_store: "..."
+          setting: "..."
+          chrome_policy {
+            [POLICY_NAME] {
+              policy_options {mode: MANDATORY/RECOMMENDED/UNSET}
+              [POLICY_NAME]: ... //(value to disable it)
+            }
+          }
+          policy_exception_justification: "..."
+        })");
+  std::unique_ptr<URLRequest> url_request = request_context_->CreateRequest(
+      report_uri, DEFAULT_PRIORITY, this, traffic_annotation);

[meacer, 2017/04/27 17:55:28]

* sender: "Safe Browsing Extended Reporting"

However I'm not sure if SBER is the only user. estark: Do pinning failures also
use SBER?

* description: "Sends an anonymous report to a Google server about security
issues".

Or we can point them to the whitepaper:
https://www.google.com/chrome/browser/privacy/whitepaper.html?hl=en-US#extend...

* trigger: "A request can be sent when an SSL certificate error is encountered
or SafeBrowsing detects a threat on a website"

* data: "For SSL reports: the certificate that caused the error, hostname, user
agent, et.c. For SafeBrowsing reports, .... For more information, see
https://www.google.com/chrome/browser/privacy/whitepaper.html?hl=en-US#extend...

* destination: GOOGLE_OWNED_SERVICE

* cookies_allowed: false
Needs to be confirmed: https://crbug.com/716098

* setting: "Users can disable these requests by unchecking 'Automatically report
details of possible security incidents to Google' in the settings page or on SSL
and SafeBrowsing error pages"

* policy_exception_justification: "Not implemented"

Not sure about this. estark, jialiul: Can you please confirm?

[Jialiu Lin, 2017/04/27 18:04:53]

I think the annotation should be added to each of its sub-classes. ReportSender
is just a base class. It will be super confusing to elaborate on each case here.

[estark, 2017/04/28 05:18:28]

Yeah, I agree with Jialiu that it's infeasible to document every user of this
class. net/ doesn't know anything about Safe Browsing, for example; it breaks
layering to have it documented here.

   url_request->SetUserData(
       &kUserDataKey,
       base::MakeUnique<CallbackInfo>(success_callback, error_callback));
 
   int load_flags =
       LOAD_BYPASS_CACHE | LOAD_DISABLE_CACHE | LOAD_DO_NOT_SEND_AUTH_DATA;
   if (cookies_preference_ != SEND_COOKIES) {
     load_flags |= LOAD_DO_NOT_SEND_COOKIES | LOAD_DO_NOT_SAVE_COOKIES;
   }
   url_request->SetLoadFlags(load_flags);
@@ skipping 30 matching lines @@
   }
 
   CHECK_GT(inflight_requests_.erase(request), 0u);
 }
 
 void ReportSender::OnReadCompleted(URLRequest* request, int bytes_read) {
   NOTREACHED();
 }
 
 }  // namespace net