Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(213)

Side by Side Diff: chrome/browser/safe_browsing/safe_browsing_blocking_page.cc

Issue 319193002: Update the malware interstitial to have the new layout (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: Renamed command Created 6 years, 6 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 // 4 //
5 // Implementation of the SafeBrowsingBlockingPage class. 5 // Implementation of the SafeBrowsingBlockingPage class.
6 6
7 #include "chrome/browser/safe_browsing/safe_browsing_blocking_page.h" 7 #include "chrome/browser/safe_browsing/safe_browsing_blocking_page.h"
8 8
9 #include <string> 9 #include <string>
10 10
11 #include "base/bind.h" 11 #include "base/bind.h"
12 #include "base/command_line.h"
12 #include "base/i18n/rtl.h" 13 #include "base/i18n/rtl.h"
13 #include "base/lazy_instance.h" 14 #include "base/lazy_instance.h"
14 #include "base/metrics/field_trial.h" 15 #include "base/metrics/field_trial.h"
15 #include "base/metrics/histogram.h" 16 #include "base/metrics/histogram.h"
16 #include "base/prefs/pref_service.h" 17 #include "base/prefs/pref_service.h"
17 #include "base/strings/string_number_conversions.h" 18 #include "base/strings/string_number_conversions.h"
18 #include "base/strings/string_piece.h" 19 #include "base/strings/string_piece.h"
19 #include "base/strings/stringprintf.h" 20 #include "base/strings/stringprintf.h"
20 #include "base/strings/utf_string_conversions.h" 21 #include "base/strings/utf_string_conversions.h"
21 #include "base/time/time.h" 22 #include "base/time/time.h"
22 #include "base/values.h" 23 #include "base/values.h"
23 #include "chrome/browser/browser_process.h" 24 #include "chrome/browser/browser_process.h"
24 #include "chrome/browser/google/google_util.h" 25 #include "chrome/browser/google/google_util.h"
25 #include "chrome/browser/history/history_service_factory.h" 26 #include "chrome/browser/history/history_service_factory.h"
26 #include "chrome/browser/profiles/profile.h" 27 #include "chrome/browser/profiles/profile.h"
27 #include "chrome/browser/renderer_preferences_util.h" 28 #include "chrome/browser/renderer_preferences_util.h"
28 #include "chrome/browser/safe_browsing/malware_details.h" 29 #include "chrome/browser/safe_browsing/malware_details.h"
29 #include "chrome/browser/safe_browsing/ui_manager.h" 30 #include "chrome/browser/safe_browsing/ui_manager.h"
30 #include "chrome/browser/tab_contents/tab_util.h" 31 #include "chrome/browser/tab_contents/tab_util.h"
32 #include "chrome/common/chrome_switches.h"
31 #include "chrome/common/pref_names.h" 33 #include "chrome/common/pref_names.h"
32 #include "chrome/common/url_constants.h" 34 #include "chrome/common/url_constants.h"
33 #include "content/public/browser/browser_thread.h" 35 #include "content/public/browser/browser_thread.h"
34 #include "content/public/browser/interstitial_page.h" 36 #include "content/public/browser/interstitial_page.h"
35 #include "content/public/browser/navigation_controller.h" 37 #include "content/public/browser/navigation_controller.h"
36 #include "content/public/browser/user_metrics.h" 38 #include "content/public/browser/user_metrics.h"
37 #include "content/public/browser/web_contents.h" 39 #include "content/public/browser/web_contents.h"
38 #include "grit/browser_resources.h" 40 #include "grit/browser_resources.h"
39 #include "grit/chromium_strings.h" 41 #include "grit/chromium_strings.h"
40 #include "grit/generated_resources.h" 42 #include "grit/generated_resources.h"
(...skipping 45 matching lines...) Expand 10 before | Expand all | Expand 10 after
86 "<a id=\"privacy-link\" href=\"\" onclick=\"sendCommand('showPrivacy'); " 88 "<a id=\"privacy-link\" href=\"\" onclick=\"sendCommand('showPrivacy'); "
87 "return false;\" onmousedown=\"return false;\">%s</a>"; 89 "return false;\" onmousedown=\"return false;\">%s</a>";
88 90
89 // After a malware interstitial where the user opted-in to the report 91 // After a malware interstitial where the user opted-in to the report
90 // but clicked "proceed anyway", we delay the call to 92 // but clicked "proceed anyway", we delay the call to
91 // MalwareDetails::FinishCollection() by this much time (in 93 // MalwareDetails::FinishCollection() by this much time (in
92 // milliseconds). 94 // milliseconds).
93 const int64 kMalwareDetailsProceedDelayMilliSeconds = 3000; 95 const int64 kMalwareDetailsProceedDelayMilliSeconds = 3000;
94 96
95 // The commands returned by the page when the user performs an action. 97 // The commands returned by the page when the user performs an action.
96 const char kShowDiagnosticCommand[] = "showDiagnostic"; 98 const char kBoxChecked[] = "boxchecked";
97 const char kReportErrorCommand[] = "reportError"; 99 const char kDisplayCheckBox[] = "displaycheckbox";
100 const char kDoReportCommand[] = "doReport";
101 const char kDontReportCommand[] = "dontReport";
102 const char kExpandedSeeMore[] = "expandedSeeMore";
98 const char kLearnMoreCommand[] = "learnMore"; 103 const char kLearnMoreCommand[] = "learnMore";
99 const char kLearnMoreCommandV2[] = "learnMore2"; 104 const char kLearnMoreCommandV2[] = "learnMore2";
105 const char kProceedCommand[] = "proceed";
106 const char kReportErrorCommand[] = "reportError";
107 const char kShowDiagnosticCommand[] = "showDiagnostic";
100 const char kShowPrivacyCommand[] = "showPrivacy"; 108 const char kShowPrivacyCommand[] = "showPrivacy";
101 const char kProceedCommand[] = "proceed";
102 const char kTakeMeBackCommand[] = "takeMeBack"; 109 const char kTakeMeBackCommand[] = "takeMeBack";
103 const char kDoReportCommand[] = "doReport";
104 const char kDontReportCommand[] = "dontReport";
105 const char kDisplayCheckBox[] = "displaycheckbox";
106 const char kBoxChecked[] = "boxchecked";
107 const char kExpandedSeeMore[] = "expandedSeeMore";
Bernhard Bauer 2014/06/09 17:17:10 Note that this one actually *is* a command.
felt 2014/06/10 05:21:02 Renamed to kExpandedSeeMoreCommand.
108 // Special command that we use when the user navigated away from the 110 // Special command that we use when the user navigated away from the
109 // page. E.g., closed the tab or the window. This is only used by 111 // page. E.g., closed the tab or the window. This is only used by
110 // RecordUserReactionTime. 112 // RecordUserReactionTime.
111 const char kNavigatedAwayMetaCommand[] = "closed"; 113 const char kNavigatedAwayMetaCommand[] = "closed";
112 114
113 base::LazyInstance<SafeBrowsingBlockingPage::UnsafeResourceMap> 115 base::LazyInstance<SafeBrowsingBlockingPage::UnsafeResourceMap>
114 g_unsafe_resource_map = LAZY_INSTANCE_INITIALIZER; 116 g_unsafe_resource_map = LAZY_INSTANCE_INITIALIZER;
115 117
116 // These are the conditions for the summer 2013 Finch experiment. 118 // These are the conditions for the summer 2013 Finch experiment.
117 // TODO(felt): Get rid of these now that experiment has ended. 119 // TODO(felt): Get rid of these now that experiment has ended.
(...skipping 21 matching lines...) Expand all
139 PHISHING_PROCEED_CROSS_SITE, 141 PHISHING_PROCEED_CROSS_SITE,
140 MAX_DETAILED_ACTION 142 MAX_DETAILED_ACTION
141 }; 143 };
142 144
143 void RecordDetailedUserAction(DetailedDecision decision) { 145 void RecordDetailedUserAction(DetailedDecision decision) {
144 UMA_HISTOGRAM_ENUMERATION("SB2.InterstitialActionDetails", 146 UMA_HISTOGRAM_ENUMERATION("SB2.InterstitialActionDetails",
145 decision, 147 decision,
146 MAX_DETAILED_ACTION); 148 MAX_DETAILED_ACTION);
147 } 149 }
148 150
151 bool Version3Enabled() {
152 if (CommandLine::ForCurrentProcess()->HasSwitch(
153 switches::kMalwareInterstitialVersionV3)) {
154 return true;
155 }
156 if (base::FieldTrialList::FindFullName("MalwareInterstitialVersion")
157 == "V3") {
158 return true;
159 }
160 return false;
161 }
162
163 class SafeBrowsingBlockingPageV3 : public SafeBrowsingBlockingPage {
164 public:
165 SafeBrowsingBlockingPageV3(SafeBrowsingUIManager* ui_manager,
166 content::WebContents* web_contents,
167 const UnsafeResourceList& unsafe_resources);
168
169 // InterstitialPageDelegate method:
170 virtual std::string GetHTMLContents() OVERRIDE;
171
172 private:
173 // Fills the passed dictionary with the values to be passed to the template
174 // when creating the HTML.
175 void PopulateMalwareLoadTimeData(base::DictionaryValue* load_time_data);
176 void PopulatePhishingLoadTimeData(base::DictionaryValue* load_time_data);
177
178 DISALLOW_COPY_AND_ASSIGN(SafeBrowsingBlockingPageV3);
179 };
180
149 } // namespace 181 } // namespace
150 182
151 // static 183 // static
152 SafeBrowsingBlockingPageFactory* SafeBrowsingBlockingPage::factory_ = NULL; 184 SafeBrowsingBlockingPageFactory* SafeBrowsingBlockingPage::factory_ = NULL;
153 185
154 // The default SafeBrowsingBlockingPageFactory. Global, made a singleton so we 186 // The default SafeBrowsingBlockingPageFactory. Global, made a singleton so we
155 // don't leak it. 187 // don't leak it.
156 class SafeBrowsingBlockingPageFactoryImpl 188 class SafeBrowsingBlockingPageFactoryImpl
157 : public SafeBrowsingBlockingPageFactory { 189 : public SafeBrowsingBlockingPageFactory {
158 public: 190 public:
159 virtual SafeBrowsingBlockingPage* CreateSafeBrowsingPage( 191 virtual SafeBrowsingBlockingPage* CreateSafeBrowsingPage(
160 SafeBrowsingUIManager* ui_manager, 192 SafeBrowsingUIManager* ui_manager,
161 WebContents* web_contents, 193 WebContents* web_contents,
162 const SafeBrowsingBlockingPage::UnsafeResourceList& unsafe_resources) 194 const SafeBrowsingBlockingPage::UnsafeResourceList& unsafe_resources)
163 OVERRIDE { 195 OVERRIDE {
164 // Only use the V2 page if the interstitial is for a single malware or 196 // Only use the V2 page if the interstitial is for a single malware or
165 // phishing resource, the multi-threat interstitial has not been updated to 197 // phishing resource, the multi-threat interstitial has not been updated to
166 // V2 yet. 198 // V2 yet.
167 if (unsafe_resources.size() == 1 && 199 if (unsafe_resources.size() == 1 &&
168 (unsafe_resources[0].threat_type == SB_THREAT_TYPE_URL_MALWARE || 200 (unsafe_resources[0].threat_type == SB_THREAT_TYPE_URL_MALWARE ||
169 unsafe_resources[0].threat_type == 201 unsafe_resources[0].threat_type ==
170 SB_THREAT_TYPE_CLIENT_SIDE_MALWARE_URL || 202 SB_THREAT_TYPE_CLIENT_SIDE_MALWARE_URL ||
171 unsafe_resources[0].threat_type == SB_THREAT_TYPE_URL_PHISHING || 203 unsafe_resources[0].threat_type == SB_THREAT_TYPE_URL_PHISHING ||
172 unsafe_resources[0].threat_type == 204 unsafe_resources[0].threat_type ==
173 SB_THREAT_TYPE_CLIENT_SIDE_PHISHING_URL)) { 205 SB_THREAT_TYPE_CLIENT_SIDE_PHISHING_URL)) {
174 return new SafeBrowsingBlockingPageV2(ui_manager, web_contents, 206 if (Version3Enabled()) {
175 unsafe_resources); 207 return new SafeBrowsingBlockingPageV3(ui_manager, web_contents,
208 unsafe_resources);
209 } else {
210 return new SafeBrowsingBlockingPageV2(ui_manager, web_contents,
211 unsafe_resources);
212 }
176 } 213 }
177 return new SafeBrowsingBlockingPageV1(ui_manager, web_contents, 214 return new SafeBrowsingBlockingPageV1(ui_manager, web_contents,
178 unsafe_resources); 215 unsafe_resources);
179 } 216 }
180 217
181 private: 218 private:
182 friend struct base::DefaultLazyInstanceTraits< 219 friend struct base::DefaultLazyInstanceTraits<
183 SafeBrowsingBlockingPageFactoryImpl>; 220 SafeBrowsingBlockingPageFactoryImpl>;
184 221
185 SafeBrowsingBlockingPageFactoryImpl() { } 222 SafeBrowsingBlockingPageFactoryImpl() { }
(...skipping 999 matching lines...) Expand 10 before | Expand all | Expand 10 after
1185 strings->SetString("details", std::string()); 1222 strings->SetString("details", std::string());
1186 strings->SetString("confirm_text", std::string()); 1223 strings->SetString("confirm_text", std::string());
1187 strings->SetString(kBoxChecked, std::string()); 1224 strings->SetString(kBoxChecked, std::string());
1188 strings->SetString( 1225 strings->SetString(
1189 "report_error", 1226 "report_error",
1190 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_PHISHING_V2_REPORT_ERROR)); 1227 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_PHISHING_V2_REPORT_ERROR));
1191 strings->SetBoolean(kDisplayCheckBox, false); 1228 strings->SetBoolean(kDisplayCheckBox, false);
1192 strings->SetString("learnMore", 1229 strings->SetString("learnMore",
1193 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_MALWARE_V2_LEARN_MORE)); 1230 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_MALWARE_V2_LEARN_MORE));
1194 } 1231 }
1232
1233 SafeBrowsingBlockingPageV3::SafeBrowsingBlockingPageV3(
1234 SafeBrowsingUIManager* ui_manager,
1235 WebContents* web_contents,
1236 const UnsafeResourceList& unsafe_resources)
1237 : SafeBrowsingBlockingPage(ui_manager, web_contents, unsafe_resources) {
1238 }
1239
1240 std::string SafeBrowsingBlockingPageV3::GetHTMLContents() {
1241 if (unsafe_resources_.empty() || unsafe_resources_.size() > 1) {
1242 // TODO(felt): Implement new multi-threat interstitial. crbug.com/160336
1243 NOTIMPLEMENTED();
1244 return std::string();
1245 }
1246
1247 // Fill in the shared values.
1248 base::DictionaryValue load_time_data;
1249 webui::SetFontAndTextDirection(&load_time_data);
1250 load_time_data.SetBoolean("ssl", false);
1251 load_time_data.SetString(
1252 "openDetails",
1253 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_MALWARE_V2_SEE_MORE));
1254 load_time_data.SetString(
1255 "closeDetails",
1256 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_MALWARE_V2_SEE_MORE));
1257 load_time_data.SetString(
1258 "primaryButtonText",
1259 l10n_util::GetStringUTF16(IDS_SSL_OVERRIDABLE_SAFETY_BUTTON));
1260 load_time_data.SetString(
1261 "proceedText",
1262 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_MALWARE_V2_PROCEED_LINK));
1263 load_time_data.SetBoolean(
1264 "overridable",
1265 !IsPrefEnabled(prefs::kSafeBrowsingProceedAnywayDisabled));
1266
1267 // Fill in the values that are specific to malware or phishing.
1268 SBThreatType threat_type = unsafe_resources_[0].threat_type;
1269 switch (threat_type) {
1270 case SB_THREAT_TYPE_URL_MALWARE:
1271 case SB_THREAT_TYPE_CLIENT_SIDE_MALWARE_URL:
1272 PopulateMalwareLoadTimeData(&load_time_data);
1273 break;
1274 case SB_THREAT_TYPE_URL_PHISHING:
1275 case SB_THREAT_TYPE_CLIENT_SIDE_PHISHING_URL:
1276 PopulatePhishingLoadTimeData(&load_time_data);
1277 break;
1278 case SB_THREAT_TYPE_SAFE:
1279 case SB_THREAT_TYPE_BINARY_MALWARE_URL:
1280 case SB_THREAT_TYPE_EXTENSION:
1281 NOTREACHED();
1282 }
1283
1284 interstitial_show_time_ = base::TimeTicks::Now();
1285
1286 base::StringPiece html(
1287 ResourceBundle::GetSharedInstance().GetRawDataResource(
1288 IRD_SSL_INTERSTITIAL_V2_HTML));
1289 webui::UseVersion2 version;
1290 return webui::GetI18nTemplateHtml(html, &load_time_data);
1291 }
1292
1293 void SafeBrowsingBlockingPageV3::PopulateMalwareLoadTimeData(
1294 base::DictionaryValue* load_time_data) {
1295 load_time_data->SetBoolean("phishing", false);
1296 load_time_data->SetString(
1297 "tabTitle",
1298 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_MALWARE_V2_TITLE));
1299 load_time_data->SetString(
1300 "heading",
1301 l10n_util::GetStringUTF16(is_main_frame_load_blocked_ ?
1302 IDS_SAFE_BROWSING_MALWARE_V2_HEADLINE :
1303 IDS_SAFE_BROWSING_MALWARE_V2_HEADLINE_SUBRESOURCE));
1304 load_time_data->SetString(
1305 "primaryParagraph",
1306 l10n_util::GetStringFUTF16(
1307 is_main_frame_load_blocked_ ?
1308 IDS_SAFE_BROWSING_MALWARE_V2_DESCRIPTION1 :
1309 IDS_SAFE_BROWSING_MALWARE_V2_DESCRIPTION1_SUBRESOURCE,
1310 l10n_util::GetStringUTF16(IDS_PRODUCT_NAME),
1311 base::UTF8ToUTF16(is_main_frame_load_blocked_ ?
1312 url_.host() : web_contents_->GetURL().host())));
1313 load_time_data->SetString(
1314 "secondParagraph",
1315 is_main_frame_load_blocked_ ?
1316 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_MALWARE_V2_DESCRIPTION2) :
1317 l10n_util::GetStringFUTF16(
1318 IDS_SAFE_BROWSING_MALWARE_V2_DESCRIPTION2_SUBRESOURCE,
1319 l10n_util::GetStringUTF16(IDS_PRODUCT_NAME),
1320 base::UTF8ToUTF16(url_.host())));
1321 load_time_data->SetString(
1322 "thirdParagraph",
1323 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_MALWARE_V2_DESCRIPTION3));
1324 load_time_data->SetString(
1325 "detailsText",
1326 is_main_frame_load_blocked_ ?
1327 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_MALWARE_V2_DETAILS) :
1328 l10n_util::GetStringFUTF16(
1329 IDS_SAFE_BROWSING_MALWARE_V2_DETAILS_SUBRESOURCE,
1330 base::UTF8ToUTF16(url_.host())));
1331 }
1332
1333 void SafeBrowsingBlockingPageV3::PopulatePhishingLoadTimeData(
1334 base::DictionaryValue* load_time_data) {
1335 load_time_data->SetBoolean("phishing", true);
1336 load_time_data->SetString(
1337 "tabTitle",
1338 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_PHISHING_V2_TITLE));
1339 load_time_data->SetString(
1340 "heading",
1341 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_PHISHING_V2_HEADLINE));
1342 load_time_data->SetString(
1343 "primaryParagraph",
1344 l10n_util::GetStringFUTF16(
1345 IDS_SAFE_BROWSING_PHISHING_V2_DESCRIPTION1,
1346 l10n_util::GetStringUTF16(IDS_PRODUCT_NAME),
1347 base::UTF8ToUTF16(url_.host())));
1348 load_time_data->SetString(
1349 "secondParagraph",
1350 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_MALWARE_V2_DESCRIPTION2));
1351 load_time_data->SetString(
1352 "detailsText",
1353 l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_PHISHING_V2_REPORT_ERROR));
1354 }
OLDNEW

Powered by Google App Engine
This is Rietveld 408576698