Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(6051)

Unified Diff: chrome/browser/ssl/ssl_error_classification.cc

Issue 400323002: Refactor the captive portal code to move from the ssl_blocking_page class to the ssl_error_classific (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@master
Patch Set: Call the function from the Observe function Created 6 years, 5 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
Index: chrome/browser/ssl/ssl_error_classification.cc
diff --git a/chrome/browser/ssl/ssl_error_classification.cc b/chrome/browser/ssl/ssl_error_classification.cc
index c81c88794f06e42f1a8adbbf0451a57a347dd0f5..f9878e55664c6d81491b7bb6da9f6c5f0902b15e 100644
--- a/chrome/browser/ssl/ssl_error_classification.cc
+++ b/chrome/browser/ssl/ssl_error_classification.cc
@@ -9,17 +9,27 @@
#include "base/metrics/histogram.h"
#include "base/time/time.h"
#include "chrome/browser/browser_process.h"
-#include "components/network_time/network_time_tracker.h"
+#include "chrome/browser/chrome_notification_types.h"
+#include "chrome/browser/profiles/profile.h"
+#include "chrome/browser/ssl/ssl_error_info.h"
+#include "content/public/browser/notification_service.h"
+#include "content/public/browser/web_contents.h"
+#include "net/base/network_change_notifier.h"
#include "net/cert/x509_certificate.h"
-using base::Time;
-using base::TimeTicks;
-using base::TimeDelta;
+#if defined(ENABLE_CAPTIVE_PORTAL_DETECTION)
+#include "chrome/browser/captive_portal/captive_portal_service.h"
+#include "chrome/browser/captive_portal/captive_portal_service_factory.h"
+#endif
#if defined(OS_WIN)
#include "base/win/windows_version.h"
#endif
+using base::Time;
+using base::TimeTicks;
+using base::TimeDelta;
+
namespace {
// Events for UMA. Do not reorder or change!
@@ -29,6 +39,29 @@ enum SSLInterstitialCause {
UNUSED_INTERSTITIAL_CAUSE_ENTRY,
};
+// Events for UMA. Do not reorder or change!
+enum SSLInterstitialCauseCaptivePortal {
+ CAPTIVE_PORTAL_DETECTION_ENABLED,
+ CAPTIVE_PORTAL_DETECTION_ENABLED_OVERRIDABLE,
+ CAPTIVE_PORTAL_PROBE_COMPLETED,
+ CAPTIVE_PORTAL_PROBE_COMPLETED_OVERRIDABLE,
+ CAPTIVE_PORTAL_NO_RESPONSE,
+ CAPTIVE_PORTAL_NO_RESPONSE_OVERRIDABLE,
+ CAPTIVE_PORTAL_DETECTED,
+ CAPTIVE_PORTAL_DETECTED_OVERRIDABLE,
+ UNUSED_CAPTIVE_PORTAL_EVENT,
+};
+
+void RecordSSLInterstitialSeverityScore(float ssl_severity_score,
+ int cert_error) {
+ if (SSLErrorInfo::NetErrorToErrorType(cert_error) ==
+ SSLErrorInfo::CERT_DATE_INVALID) {
+ UMA_HISTOGRAM_CUSTOM_COUNTS("interstitial.ssl.severity_score.date_invalid",
+ static_cast<int>(ssl_severity_score * 100),
+ 0, 100, 20);
+ }
+}
+
void RecordSSLInterstitialCause(bool overridable, SSLInterstitialCause event) {
if (overridable) {
UMA_HISTOGRAM_ENUMERATION("interstitial.ssl.cause.overridable", event,
@@ -39,19 +72,45 @@ void RecordSSLInterstitialCause(bool overridable, SSLInterstitialCause event) {
}
}
+void RecordCaptivePortalEventStats(SSLInterstitialCauseCaptivePortal event) {
+ UMA_HISTOGRAM_ENUMERATION("interstitial.ssl.captive_portal",
+ event,
+ UNUSED_CAPTIVE_PORTAL_EVENT);
+}
+
} // namespace
SSLErrorClassification::SSLErrorClassification(
+ content::WebContents* web_contents,
base::Time current_time,
+ int cert_error,
const net::X509Certificate& cert)
- : current_time_(current_time),
- cert_(cert) { }
+ : web_contents_(web_contents),
+ current_time_(current_time),
+ cert_error_(cert_error),
+ cert_(cert),
+ captive_portal_detection_enabled_(false),
+ captive_portal_probe_completed_(false),
+ captive_portal_no_response_(false),
+ captive_portal_detected_(false) {
+#if defined(ENABLE_CAPTIVE_PORTAL_DETECTION)
+ Profile* profile = Profile::FromBrowserContext(
+ web_contents_->GetBrowserContext());
+ CaptivePortalService* captive_portal_service =
+ CaptivePortalServiceFactory::GetForProfile(profile);
+ captive_portal_detection_enabled_ = captive_portal_service ->enabled();
+ captive_portal_service ->DetectCaptivePortal();
+ registrar_.Add(this,
+ chrome::NOTIFICATION_CAPTIVE_PORTAL_CHECK_RESULT,
+ content::Source<Profile>(profile));
+#endif
+}
SSLErrorClassification::~SSLErrorClassification() { }
-float SSLErrorClassification::InvalidDateSeverityScore() const {
- // Client-side characterisitics. Check whether the system's clock is wrong or
- // not and whether the user has encountered this error before or not.
+void SSLErrorClassification::InvalidDateSeverityScore() const {
+ // Client-side characteristics. Check whether or not the system's clock is
+ // wrong and whether or not the user has encountered this error before.
float severity_date_score = 0.0f;
static const float kClientWeight = 0.5f;
@@ -82,7 +141,41 @@ float SSLErrorClassification::InvalidDateSeverityScore() const {
}
if (current_time_ < cert_.valid_start())
severity_date_score += kServerWeight * kNotYetValidWeight;
- return severity_date_score;
+ RecordSSLInterstitialSeverityScore(severity_date_score, cert_error_);
+}
+
+void SSLErrorClassification::RecordUMAStatistics(bool overridable) const {
+ if (IsUserClockInThePast(base::Time::NowFromSystemTime()))
+ RecordSSLInterstitialCause(overridable, CLOCK_PAST);
+ if (IsUserClockInTheFuture(base::Time::NowFromSystemTime()))
+ RecordSSLInterstitialCause(overridable, CLOCK_FUTURE);
+}
+
+void SSLErrorClassification::RecordCaptivePortalUMAStatistics(
+ bool overridable) const {
+#if defined(ENABLE_CAPTIVE_PORTAL_DETECTION)
+ if (captive_portal_detection_enabled_)
+ RecordCaptivePortalEventStats(
+ overridable ?
+ CAPTIVE_PORTAL_DETECTION_ENABLED_OVERRIDABLE :
+ CAPTIVE_PORTAL_DETECTION_ENABLED);
+ if (captive_portal_probe_completed_)
+ RecordCaptivePortalEventStats(
+ overridable ?
+ CAPTIVE_PORTAL_PROBE_COMPLETED_OVERRIDABLE :
+ CAPTIVE_PORTAL_PROBE_COMPLETED);
+ // Log only one of portal detected and no response results.
+ if (captive_portal_detected_)
+ RecordCaptivePortalEventStats(
+ overridable ?
+ CAPTIVE_PORTAL_DETECTED_OVERRIDABLE :
+ CAPTIVE_PORTAL_DETECTED);
+ else if (captive_portal_no_response_)
+ RecordCaptivePortalEventStats(
+ overridable ?
+ CAPTIVE_PORTAL_NO_RESPONSE_OVERRIDABLE :
+ CAPTIVE_PORTAL_NO_RESPONSE);
+#endif
}
base::TimeDelta SSLErrorClassification::TimePassedSinceExpiry() const {
@@ -106,6 +199,32 @@ float SSLErrorClassification::CalculateScoreTimePassedSinceExpiry() const {
return kLowThresholdWeight;
}
+float SSLErrorClassification::CalculateScoreEnvironments() const {
+ static const float kWifiWeight = 0.7f;
+ static const float kCellularWeight = 0.7f;
+ static const float kHotspotWeight = 0.2f;
+ static const float kEthernetWeight = 0.7f;
+ static const float kOtherWeight = 0.7f;
+ net::NetworkChangeNotifier::ConnectionType type =
+ net::NetworkChangeNotifier::GetConnectionType();
+ if (type == net::NetworkChangeNotifier::CONNECTION_WIFI)
+ return kWifiWeight;
+ if (type == net::NetworkChangeNotifier::CONNECTION_2G ||
+ type == net::NetworkChangeNotifier::CONNECTION_3G ||
+ type == net::NetworkChangeNotifier::CONNECTION_4G ) {
+ return kCellularWeight;
+ }
+ if (type == net::NetworkChangeNotifier::CONNECTION_ETHERNET)
+ return kEthernetWeight;
+#if defined(ENABLE_CAPTIVE_PORTAL_DETECTION)
+ // Assume if captive portals are detected then the user is connected using a
+ // hot spot.
+ if (captive_portal_probe_completed_ && captive_portal_detected_)
+ return kHotspotWeight;
+#endif
+ return kOtherWeight;
+}
+
bool SSLErrorClassification::IsUserClockInThePast(base::Time time_now) {
base::Time build_time = base::GetBuildTime();
if (time_now < build_time - base::TimeDelta::FromDays(2))
@@ -130,9 +249,38 @@ bool SSLErrorClassification::IsWindowsVersionSP3OrLower() {
return false;
}
-void SSLErrorClassification::RecordUMAStatistics(bool overridable) {
- if (IsUserClockInThePast(base::Time::NowFromSystemTime()))
- RecordSSLInterstitialCause(overridable, CLOCK_PAST);
- if (IsUserClockInTheFuture(base::Time::NowFromSystemTime()))
- RecordSSLInterstitialCause(overridable, CLOCK_FUTURE);
+void SSLErrorClassification::Observe(
+ int type,
+ const content::NotificationSource& source,
+ const content::NotificationDetails& details) {
+#if defined(ENABLE_CAPTIVE_PORTAL_DETECTION)
+ // When detection is disabled, captive portal service always sends
+ // RESULT_INTERNET_CONNECTED. Ignore any probe results in that case.
+ if (!captive_portal_detection_enabled_)
+ return;
+ if (type == chrome::NOTIFICATION_CAPTIVE_PORTAL_CHECK_RESULT) {
+ captive_portal_probe_completed_ = true;
+ CaptivePortalService::Results* results =
+ content::Details<CaptivePortalService::Results>(
+ details).ptr();
+ // If a captive portal was detected at any point when the interstitial was
+ // displayed, assume that the interstitial was caused by a captive portal.
+ // Example scenario:
+ // 1- Interstitial displayed and captive portal detected, setting the flag.
+ // 2- Captive portal detection automatically opens portal login page.
+ // 3- User logs in on the portal login page.
+ // A notification will be received here for RESULT_INTERNET_CONNECTED. Make
+ // sure we don't clear the captive protal flag, since the interstitial was
+ // potentially caused by the captive portal.
+ captive_portal_detected_ = captive_portal_detected_ ||
+ (results->result == captive_portal::RESULT_BEHIND_CAPTIVE_PORTAL);
+ // Also keep track of non-HTTP portals and error cases.
+ captive_portal_no_response_ = captive_portal_no_response_ ||
+ (results->result == captive_portal::RESULT_NO_RESPONSE);
+ if (SSLErrorInfo::NetErrorToErrorType(cert_error_) ==
+ SSLErrorInfo::CERT_DATE_INVALID) {
+ InvalidDateSeverityScore();
radhikabhar 2014/07/28 23:02:35 Since the function for CalculateScoreEnvironments
+ }
+ }
+#endif
}
« no previous file with comments | « chrome/browser/ssl/ssl_error_classification.h ('k') | chrome/browser/ssl/ssl_error_classification_unittest.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698