Thwart clickjacking in autofill popups by ignoring double clicks

chrome/browser/ui/views/autofill/autofill_popup_base_view_browsertest.cc

 // Copyright 2014 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ui/views/autofill/autofill_popup_base_view.h"
 
 #include "chrome/browser/ui/autofill/autofill_popup_view_delegate.h"
 #include "chrome/browser/ui/browser.h"
 #include "chrome/browser/ui/browser_window.h"
 #include "chrome/test/base/in_process_browser_test.h"
@@ skipping 52 matching lines @@
                             ui::EventTimeForNow(),
                             ui::GestureEventDetails(type, 0, 0),
                             0);
   }
 
   void SimulateGesture(ui::GestureEvent* event) {
     view_->OnGestureEvent(event);
   }
 
  protected:
-  MockAutofillPopupViewDelegate mock_delegate_;
+  testing::NiceMock<MockAutofillPopupViewDelegate> mock_delegate_;
   AutofillPopupBaseView* view_;
 };
 
 // Flaky on Win only.  http://crbug.com/376299
 #if defined(OS_WIN)
 #define MAYBE_GestureTest DISABLED_GestureTest
 #else
 #define MAYBE_GestureTest GestureTest
 #endif
 
@@ skipping 21 matching lines @@
   // Tapping will accept the selection.
   ui::GestureEvent tap_event = CreateGestureEvent(ui::ET_GESTURE_TAP, point);
   SimulateGesture(&tap_event);
 
   // Tapping outside the bounds clears any selection.
   ui::GestureEvent outside_tap = CreateGestureEvent(ui::ET_GESTURE_TAP,
                                                     gfx::Point(100, 100));
   SimulateGesture(&outside_tap);
 }
 
+IN_PROC_BROWSER_TEST_F(AutofillPopupBaseViewTest, DoubleClickTest) {
+  gfx::Rect bounds(0, 0, 5, 5);
+  gfx::Point point = bounds.CenterPoint();
+  EXPECT_CALL(mock_delegate_, popup_bounds()).WillRepeatedly(ReturnRef(bounds));
+
+  ShowView();
+
+  ui::MouseEvent mouse_down(ui::ET_MOUSE_PRESSED,
+                            gfx::Point(0, 0),
+                            gfx::Point(0, 0),
+                            0, 0);
+  EXPECT_TRUE(static_cast<views::View*>(view_)->OnMousePressed(mouse_down));
+
+  // Ignore double clicks.
+  mouse_down.SetClickCount(2);
+  EXPECT_FALSE(static_cast<views::View*>(view_)->OnMousePressed(mouse_down));
+}
+
 }  // namespace autofill