OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "chrome/browser/ssl/ssl_blocking_page.h" | 5 #include "chrome/browser/ssl/ssl_blocking_page.h" |
6 | 6 |
7 #include "base/build_time.h" | 7 #include "base/build_time.h" |
8 #include "base/command_line.h" | 8 #include "base/command_line.h" |
9 #include "base/i18n/rtl.h" | 9 #include "base/i18n/rtl.h" |
10 #include "base/i18n/time_formatting.h" | 10 #include "base/i18n/time_formatting.h" |
11 #include "base/metrics/field_trial.h" | 11 #include "base/metrics/field_trial.h" |
12 #include "base/metrics/histogram.h" | 12 #include "base/metrics/histogram.h" |
13 #include "base/strings/string_number_conversions.h" | 13 #include "base/strings/string_number_conversions.h" |
14 #include "base/strings/string_piece.h" | 14 #include "base/strings/string_piece.h" |
15 #include "base/strings/stringprintf.h" | 15 #include "base/strings/stringprintf.h" |
16 #include "base/strings/utf_string_conversions.h" | 16 #include "base/strings/utf_string_conversions.h" |
17 #include "base/time/time.h" | 17 #include "base/time/time.h" |
18 #include "base/values.h" | 18 #include "base/values.h" |
19 #include "chrome/browser/chrome_notification_types.h" | 19 #include "chrome/browser/chrome_notification_types.h" |
20 #include "chrome/browser/history/history_service_factory.h" | 20 #include "chrome/browser/history/history_service_factory.h" |
21 #include "chrome/browser/profiles/profile.h" | 21 #include "chrome/browser/profiles/profile.h" |
22 #include "chrome/browser/renderer_preferences_util.h" | 22 #include "chrome/browser/renderer_preferences_util.h" |
| 23 #include "chrome/browser/ssl/ssl_error_classification.h" |
23 #include "chrome/browser/ssl/ssl_error_info.h" | 24 #include "chrome/browser/ssl/ssl_error_info.h" |
24 #include "chrome/common/chrome_switches.h" | 25 #include "chrome/common/chrome_switches.h" |
25 #include "content/public/browser/cert_store.h" | 26 #include "content/public/browser/cert_store.h" |
26 #include "content/public/browser/interstitial_page.h" | 27 #include "content/public/browser/interstitial_page.h" |
27 #include "content/public/browser/navigation_controller.h" | 28 #include "content/public/browser/navigation_controller.h" |
28 #include "content/public/browser/navigation_entry.h" | 29 #include "content/public/browser/navigation_entry.h" |
29 #include "content/public/browser/notification_service.h" | 30 #include "content/public/browser/notification_service.h" |
30 #include "content/public/browser/notification_types.h" | 31 #include "content/public/browser/notification_types.h" |
31 #include "content/public/browser/render_process_host.h" | 32 #include "content/public/browser/render_process_host.h" |
32 #include "content/public/browser/render_view_host.h" | 33 #include "content/public/browser/render_view_host.h" |
(...skipping 175 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
208 else | 209 else |
209 RecordSSLBlockingPageEventStats(DONT_PROCEED_AUTHORITY); | 210 RecordSSLBlockingPageEventStats(DONT_PROCEED_AUTHORITY); |
210 break; | 211 break; |
211 } | 212 } |
212 default: { | 213 default: { |
213 break; | 214 break; |
214 } | 215 } |
215 } | 216 } |
216 } | 217 } |
217 | 218 |
218 // Events for UMA. Do not reorder or change! | |
219 enum SSLInterstitialCause { | |
220 CLOCK_PAST, | |
221 CLOCK_FUTURE, | |
222 UNUSED_INTERSTITIAL_CAUSE_ENTRY, | |
223 }; | |
224 | |
225 void RecordSSLInterstitialCause(bool overridable, SSLInterstitialCause event) { | |
226 if (overridable) { | |
227 UMA_HISTOGRAM_ENUMERATION("interstitial.ssl.cause.overridable", | |
228 event, | |
229 UNUSED_INTERSTITIAL_CAUSE_ENTRY); | |
230 } else { | |
231 UMA_HISTOGRAM_ENUMERATION("interstitial.ssl.cause.nonoverridable", | |
232 event, | |
233 UNUSED_INTERSTITIAL_CAUSE_ENTRY); | |
234 } | |
235 } | |
236 | |
237 // The cause of most clock errors (CMOS battery causing clock reset) will | |
238 // fall backwards, not forwards. IsErrorProbablyCausedByClock therefore only | |
239 // returns true for clocks set early, and histograms clocks set far into the | |
240 // future to see if there are more future-clocks than expected. | |
241 bool IsErrorProbablyCausedByClock(bool overridable, int cert_info) { | |
242 if (SSLErrorInfo::NetErrorToErrorType(cert_info) != | |
243 SSLErrorInfo::CERT_DATE_INVALID) { | |
244 return false; | |
245 } | |
246 const base::Time current_time = base::Time::NowFromSystemTime(); | |
247 const base::Time build_time = base::GetBuildTime(); | |
248 if (current_time < build_time - base::TimeDelta::FromDays(2)) { | |
249 RecordSSLInterstitialCause(overridable, CLOCK_PAST); | |
250 return true; | |
251 } | |
252 if (current_time > build_time + base::TimeDelta::FromDays(365)) | |
253 RecordSSLInterstitialCause(overridable, CLOCK_FUTURE); | |
254 return false; | |
255 } | |
256 | |
257 } // namespace | 219 } // namespace |
258 | 220 |
259 // Note that we always create a navigation entry with SSL errors. | 221 // Note that we always create a navigation entry with SSL errors. |
260 // No error happening loading a sub-resource triggers an interstitial so far. | 222 // No error happening loading a sub-resource triggers an interstitial so far. |
261 SSLBlockingPage::SSLBlockingPage( | 223 SSLBlockingPage::SSLBlockingPage( |
262 content::WebContents* web_contents, | 224 content::WebContents* web_contents, |
263 int cert_error, | 225 int cert_error, |
264 const net::SSLInfo& ssl_info, | 226 const net::SSLInfo& ssl_info, |
265 const GURL& request_url, | 227 const GURL& request_url, |
266 bool overridable, | 228 bool overridable, |
(...skipping 26 matching lines...) Expand all Loading... |
293 HistoryService* history_service = HistoryServiceFactory::GetForProfile( | 255 HistoryService* history_service = HistoryServiceFactory::GetForProfile( |
294 profile, Profile::EXPLICIT_ACCESS); | 256 profile, Profile::EXPLICIT_ACCESS); |
295 if (history_service) { | 257 if (history_service) { |
296 history_service->GetVisibleVisitCountToHost( | 258 history_service->GetVisibleVisitCountToHost( |
297 request_url_, | 259 request_url_, |
298 base::Bind(&SSLBlockingPage::OnGotHistoryCount, | 260 base::Bind(&SSLBlockingPage::OnGotHistoryCount, |
299 base::Unretained(this)), | 261 base::Unretained(this)), |
300 &request_tracker_); | 262 &request_tracker_); |
301 } | 263 } |
302 } | 264 } |
| 265 if (SSLErrorInfo::NetErrorToErrorType(cert_error_) == |
| 266 SSLErrorInfo::CERT_DATE_INVALID) { |
| 267 SSLErrorClassification::RecordUMAStatistics(overridable_ && |
| 268 !strict_enforcement_); |
| 269 } |
303 | 270 |
304 #if defined(ENABLE_CAPTIVE_PORTAL_DETECTION) | 271 #if defined(ENABLE_CAPTIVE_PORTAL_DETECTION) |
305 CaptivePortalService* captive_portal_service = | 272 CaptivePortalService* captive_portal_service = |
306 CaptivePortalServiceFactory::GetForProfile(profile); | 273 CaptivePortalServiceFactory::GetForProfile(profile); |
307 captive_portal_detection_enabled_ = captive_portal_service ->enabled(); | 274 captive_portal_detection_enabled_ = captive_portal_service ->enabled(); |
308 captive_portal_service ->DetectCaptivePortal(); | 275 captive_portal_service ->DetectCaptivePortal(); |
309 registrar_.Add(this, | 276 registrar_.Add(this, |
310 chrome::NOTIFICATION_CAPTIVE_PORTAL_CHECK_RESULT, | 277 chrome::NOTIFICATION_CAPTIVE_PORTAL_CHECK_RESULT, |
311 content::Source<Profile>(profile)); | 278 content::Source<Profile>(profile)); |
312 #endif | 279 #endif |
(...skipping 204 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
517 load_time_data.SetString("trialCondition", trial_condition_); | 484 load_time_data.SetString("trialCondition", trial_condition_); |
518 | 485 |
519 // Shared values for both the overridable and non-overridable versions. | 486 // Shared values for both the overridable and non-overridable versions. |
520 load_time_data.SetBoolean("ssl", true); | 487 load_time_data.SetBoolean("ssl", true); |
521 load_time_data.SetBoolean( | 488 load_time_data.SetBoolean( |
522 "overridable", overridable_ && !strict_enforcement_); | 489 "overridable", overridable_ && !strict_enforcement_); |
523 load_time_data.SetString( | 490 load_time_data.SetString( |
524 "tabTitle", l10n_util::GetStringUTF16(IDS_SSL_V2_TITLE)); | 491 "tabTitle", l10n_util::GetStringUTF16(IDS_SSL_V2_TITLE)); |
525 load_time_data.SetString( | 492 load_time_data.SetString( |
526 "heading", l10n_util::GetStringUTF16(IDS_SSL_V2_HEADING)); | 493 "heading", l10n_util::GetStringUTF16(IDS_SSL_V2_HEADING)); |
527 if (IsErrorProbablyCausedByClock( | 494 if ((SSLErrorClassification::IsUserClockInThePast( |
528 overridable_ && !strict_enforcement_, cert_error_)) { | 495 base::Time::NowFromSystemTime())) |
| 496 && (SSLErrorInfo::NetErrorToErrorType(cert_error_) == |
| 497 SSLErrorInfo::CERT_DATE_INVALID)) { |
529 load_time_data.SetString("primaryParagraph", | 498 load_time_data.SetString("primaryParagraph", |
530 l10n_util::GetStringFUTF16( | 499 l10n_util::GetStringFUTF16( |
531 IDS_SSL_CLOCK_ERROR, | 500 IDS_SSL_CLOCK_ERROR, |
532 url, | 501 url, |
533 base::TimeFormatShortDate(base::Time::Now()))); | 502 base::TimeFormatShortDate(base::Time::Now()))); |
534 } else { | 503 } else { |
535 load_time_data.SetString( | 504 load_time_data.SetString( |
536 "primaryParagraph", | 505 "primaryParagraph", |
537 l10n_util::GetStringFUTF16(IDS_SSL_V2_PRIMARY_PARAGRAPH, url)); | 506 l10n_util::GetStringFUTF16(IDS_SSL_V2_PRIMARY_PARAGRAPH, url)); |
538 } | 507 } |
(...skipping 213 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
752 // sure we don't clear the captive portal flag, since the interstitial was | 721 // sure we don't clear the captive portal flag, since the interstitial was |
753 // potentially caused by the captive portal. | 722 // potentially caused by the captive portal. |
754 captive_portal_detected_ = captive_portal_detected_ || | 723 captive_portal_detected_ = captive_portal_detected_ || |
755 (results->result == captive_portal::RESULT_BEHIND_CAPTIVE_PORTAL); | 724 (results->result == captive_portal::RESULT_BEHIND_CAPTIVE_PORTAL); |
756 // Also keep track of non-HTTP portals and error cases. | 725 // Also keep track of non-HTTP portals and error cases. |
757 captive_portal_no_response_ = captive_portal_no_response_ || | 726 captive_portal_no_response_ = captive_portal_no_response_ || |
758 (results->result == captive_portal::RESULT_NO_RESPONSE); | 727 (results->result == captive_portal::RESULT_NO_RESPONSE); |
759 } | 728 } |
760 #endif | 729 #endif |
761 } | 730 } |
OLD | NEW |