Trigger protected password entry request on password reuse event.

components/safe_browsing/password_protection/password_protection_request.cc

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 #include "components/safe_browsing/password_protection/password_protection_request.h"
 
 #include "base/memory/ptr_util.h"
 #include "base/memory/weak_ptr.h"
 #include "base/metrics/histogram_macros.h"
 #include "components/data_use_measurement/core/data_use_user_data.h"
 #include "components/safe_browsing_db/database_manager.h"
 #include "net/base/escape.h"
 #include "net/base/load_flags.h"
 #include "net/base/url_util.h"
 #include "net/http/http_status_code.h"
 
 using content::BrowserThread;
 
 namespace safe_browsing {
 
 PasswordProtectionRequest::PasswordProtectionRequest(
     const GURL& main_frame_url,
     const GURL& password_form_action,
     const GURL& password_form_frame_url,
+    const std::string& saved_domain,
     LoginReputationClientRequest::TriggerType type,
     PasswordProtectionService* pps,
     int request_timeout_in_ms)
     : main_frame_url_(main_frame_url),
       password_form_action_(password_form_action),
       password_form_frame_url_(password_form_frame_url),
+      saved_domain_(saved_domain),
       request_type_(type),
       password_protection_service_(pps),
       database_manager_(password_protection_service_->database_manager()),
       request_timeout_in_ms_(request_timeout_in_ms),
       weakptr_factory_(this) {
   DCHECK_CURRENTLY_ON(BrowserThread::UI);
 }
 
 PasswordProtectionRequest::~PasswordProtectionRequest() {
   weakptr_factory_.InvalidateWeakPtrs();
 }
 
 void PasswordProtectionRequest::Start() {
   DCHECK_CURRENTLY_ON(BrowserThread::UI);
   CheckWhitelistOnUIThread();
 }
 
 void PasswordProtectionRequest::CheckWhitelistOnUIThread() {
   DCHECK_CURRENTLY_ON(BrowserThread::UI);
   bool* match_whitelist = new bool(false);
+  // TODO(jialiul): Move CheckCsdWhitelistOnIOThread to
+  // PasswordProtectionRequest class, since PasswordProtectionService no longer
+  // need it.
   tracker_.PostTaskAndReply(
       BrowserThread::GetTaskRunnerForThread(BrowserThread::IO).get(), FROM_HERE,
       base::Bind(&PasswordProtectionService::CheckCsdWhitelistOnIOThread,
                  base::Unretained(password_protection_service_),
                  main_frame_url_, match_whitelist),
       base::Bind(&PasswordProtectionRequest::OnWhitelistCheckDone, this,
                  base::Owned(match_whitelist)));
 }
 
 void PasswordProtectionRequest::OnWhitelistCheckDone(
@@ skipping 30 matching lines @@
   password_protection_service_->FillUserPopulation(request_type_,
                                                    request_proto_.get());
   request_proto_->set_stored_verdict_cnt(
       password_protection_service_->GetStoredVerdictCount());
   LoginReputationClientRequest::Frame* main_frame =
       request_proto_->add_frames();
   main_frame->set_url(main_frame_url_.spec());
   main_frame->set_frame_index(0 /* main frame */);
   password_protection_service_->FillReferrerChain(
       main_frame_url_, -1 /* tab id not available */, main_frame);
-  LoginReputationClientRequest::Frame::Form* password_form;
-  if (password_form_frame_url_ == main_frame_url_) {
-    main_frame->set_has_password_field(true);
-    password_form = main_frame->add_forms();
-  } else {
-    LoginReputationClientRequest::Frame* password_frame =
-        request_proto_->add_frames();
-    password_frame->set_url(password_form_frame_url_.spec());
-    password_frame->set_has_password_field(true);
-    // TODO(jialiul): Add referrer chain for subframes later.
-    password_form = password_frame->add_forms();
+
+  switch (request_type_) {
+    case LoginReputationClientRequest::UNFAMILIAR_LOGIN_PAGE: {
+      LoginReputationClientRequest::Frame::Form* password_form;
+      if (password_form_frame_url_ == main_frame_url_) {
+        main_frame->set_has_password_field(true);
+        password_form = main_frame->add_forms();
+      } else {
+        LoginReputationClientRequest::Frame* password_frame =
+            request_proto_->add_frames();
+        password_frame->set_url(password_form_frame_url_.spec());
+        password_frame->set_has_password_field(true);
+        // TODO(jialiul): Add referrer chain for subframes later.
+        password_form = password_frame->add_forms();
+      }
+      password_form->set_action_url(password_form_action_.spec());
+      // TODO(jialiul): Fill more frame specific info when Safe Browsing backend
+      // is ready to handle these pieces of information.
+      break;
+    }
+    case LoginReputationClientRequest::PASSWORD_REUSE_EVENT: {
+      if (password_protection_service_->IsExtendedReporting() &&
+          !password_protection_service_->IsIncognito()) {
+        LoginReputationClientRequest::PasswordReuseEvent* password_reuse =
+            request_proto_->mutable_password_reuse_event();
+        password_reuse->add_password_reused_original_origins(saved_domain_);
+      }
+      // TODO(jialiul): Fill more password_reuse information.
+      break;
+    }
+    default:
+      NOTREACHED();
   }
-  password_form->set_action_url(password_form_action_.spec());
-  password_form->set_has_password_field(true);
-  // TODO(jialiul): Fill more frame specific info when Safe Browsing backend
-  // is ready to handle these pieces of information.
 }
 
 void PasswordProtectionRequest::SendRequest() {
   DCHECK_CURRENTLY_ON(BrowserThread::UI);
   FillRequestProto();
 
   std::string serialized_request;
   if (!request_proto_->SerializeToString(&serialized_request)) {
     Finish(PasswordProtectionService::REQUEST_MALFORMED, nullptr);
     return;
@@ skipping 99 matching lines @@
 void PasswordProtectionRequest::Cancel(bool timed_out) {
   DCHECK_CURRENTLY_ON(BrowserThread::UI);
   fetcher_.reset();
 
   Finish(timed_out ? PasswordProtectionService::TIMEDOUT
                    : PasswordProtectionService::CANCELED,
          nullptr);
 }
 
 }  // namespace safe_browsing