| OLD | NEW |
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #ifndef CHROME_BROWSER_SSL_CHROME_SSL_HOST_STATE_DELEGATE_H_ | 5 #ifndef CHROME_BROWSER_SSL_CHROME_SSL_HOST_STATE_DELEGATE_H_ |
| 6 #define CHROME_BROWSER_SSL_CHROME_SSL_HOST_STATE_DELEGATE_H_ | 6 #define CHROME_BROWSER_SSL_CHROME_SSL_HOST_STATE_DELEGATE_H_ |
| 7 | 7 |
| 8 #include "base/gtest_prod_util.h" | 8 #include "base/gtest_prod_util.h" |
| 9 #include "base/memory/scoped_ptr.h" | 9 #include "base/memory/scoped_ptr.h" |
| 10 #include "base/time/time.h" | 10 #include "base/time/time.h" |
| (...skipping 11 matching lines...) Expand all Loading... |
| 22 // specified site, SSL fingerprint, and error. If the user makes a decision, | 22 // specified site, SSL fingerprint, and error. If the user makes a decision, |
| 23 // stores the decision until either the session ends or for a length of time | 23 // stores the decision until either the session ends or for a length of time |
| 24 // (across session restarts), based on command line flags. | 24 // (across session restarts), based on command line flags. |
| 25 class ChromeSSLHostStateDelegate : public content::SSLHostStateDelegate { | 25 class ChromeSSLHostStateDelegate : public content::SSLHostStateDelegate { |
| 26 public: | 26 public: |
| 27 explicit ChromeSSLHostStateDelegate(Profile* profile); | 27 explicit ChromeSSLHostStateDelegate(Profile* profile); |
| 28 virtual ~ChromeSSLHostStateDelegate(); | 28 virtual ~ChromeSSLHostStateDelegate(); |
| 29 | 29 |
| 30 // SSLHostStateDelegate: | 30 // SSLHostStateDelegate: |
| 31 virtual void DenyCert(const std::string& host, | 31 virtual void DenyCert(const std::string& host, |
| 32 net::X509Certificate* cert, | 32 const net::X509Certificate& cert, |
| 33 net::CertStatus error) OVERRIDE; | 33 net::CertStatus error) OVERRIDE; |
| 34 virtual void AllowCert(const std::string& host, | 34 virtual void AllowCert(const std::string& host, |
| 35 net::X509Certificate* cert, | 35 const net::X509Certificate& cert, |
| 36 net::CertStatus error) OVERRIDE; | 36 net::CertStatus error) OVERRIDE; |
| 37 virtual void Clear() OVERRIDE; | 37 virtual void Clear() OVERRIDE; |
| 38 virtual net::CertPolicy::Judgment QueryPolicy( | 38 virtual net::CertPolicy::Judgment QueryPolicy( |
| 39 const std::string& host, | 39 const std::string& host, |
| 40 net::X509Certificate* cert, | 40 const net::X509Certificate& cert, |
| 41 net::CertStatus error, | 41 net::CertStatus error, |
| 42 bool* expired_previous_decision) OVERRIDE; | 42 bool* expired_previous_decision) OVERRIDE; |
| 43 virtual void HostRanInsecureContent(const std::string& host, | 43 virtual void HostRanInsecureContent(const std::string& host, |
| 44 int pid) OVERRIDE; | 44 int pid) OVERRIDE; |
| 45 virtual bool DidHostRunInsecureContent(const std::string& host, | 45 virtual bool DidHostRunInsecureContent(const std::string& host, |
| 46 int pid) const OVERRIDE; | 46 int pid) const OVERRIDE; |
| 47 | 47 |
| 48 // ChromeSSLHostStateDelegate implementation: | 48 // ChromeSSLHostStateDelegate implementation: |
| 49 // Revoke all user decisions for |host| in the given Profile. The | 49 // Revoke all user decisions for |host| in the given Profile. The |
| 50 // RevokeUserDecisionsHard version may close idle connections in the process. | 50 // RevokeUserDecisionsHard version may close idle connections in the process. |
| 51 // This version should be used *only* for rare events, such as a user | 51 // This version should be used *only* for rare events, such as a user |
| 52 // controlled button, as it may be very disruptive to the networking stack. | 52 // controlled button, as it may be very disruptive to the networking stack. |
| 53 virtual void RevokeUserDecisions(const std::string& host); | 53 virtual void RevokeUserDecisions(const std::string& host); |
| 54 virtual void RevokeUserDecisionsHard(const std::string& host); | 54 virtual void RevokeUserDecisionsHard(const std::string& host); |
| 55 | 55 |
| 56 // Returns true if any decisions has been recorded for |host| for the given | 56 // Returns true if any decisions has been recorded for |host| for the given |
| 57 // Profile, otherwise false. | 57 // Profile, otherwise false. |
| 58 virtual bool HasUserDecision(const std::string& host); | 58 virtual bool HasUserDecision(const std::string& host) const; |
| 59 | |
| 60 // Called on the UI thread when the profile is about to be destroyed. | |
| 61 void ShutdownOnUIThread() {} | |
| 62 | 59 |
| 63 protected: | 60 protected: |
| 64 // SetClock takes ownership of the passed in clock. | 61 // SetClock takes ownership of the passed in clock. |
| 65 void SetClock(scoped_ptr<base::Clock> clock); | 62 void SetClock(scoped_ptr<base::Clock> clock); |
| 66 | 63 |
| 67 private: | 64 private: |
| 68 FRIEND_TEST_ALL_PREFIXES(ForgetInstantlySSLHostStateDelegateTest, | 65 FRIEND_TEST_ALL_PREFIXES(ForgetInstantlySSLHostStateDelegateTest, |
| 69 MakeAndForgetException); | 66 MakeAndForgetException); |
| 70 FRIEND_TEST_ALL_PREFIXES(RememberSSLHostStateDelegateTest, AfterRestart); | 67 FRIEND_TEST_ALL_PREFIXES(RememberSSLHostStateDelegateTest, AfterRestart); |
| 71 FRIEND_TEST_ALL_PREFIXES(RememberSSLHostStateDelegateTest, | 68 FRIEND_TEST_ALL_PREFIXES(RememberSSLHostStateDelegateTest, |
| 72 QueryPolicyExpired); | 69 QueryPolicyExpired); |
| 73 | 70 |
| 74 // Used to specify whether new content setting entries should be created if | 71 // Used to specify whether new content setting entries should be created if |
| 75 // they don't already exist when querying the user's settings. | 72 // they don't already exist when querying the user's settings. |
| 76 enum CreateDictionaryEntriesDisposition { | 73 enum CreateDictionaryEntriesDisposition { |
| 77 CreateDictionaryEntries, | 74 CREATE_DICTIONARY_ENTRIES, |
| 78 DoNotCreateDictionaryEntries | 75 DO_NOT_CREATE_DICTIONARY_ENTRIES |
| 79 }; | 76 }; |
| 80 | 77 |
| 81 // Specifies whether user SSL error decisions should be forgetten at the end | 78 // Specifies whether user SSL error decisions should be forgetten at the end |
| 82 // of this current session (the old style of remembering decisions), or | 79 // of this current session (the old style of remembering decisions), or |
| 83 // whether they should be remembered across session restarts for a specified | 80 // whether they should be remembered across session restarts for a specified |
| 84 // length of time, deteremined by | 81 // length of time, deteremined by |
| 85 // |default_ssl_cert_decision_expiration_delta_|. | 82 // |default_ssl_cert_decision_expiration_delta_|. |
| 86 enum RememberSSLExceptionDecisionsDisposition { | 83 enum RememberSSLExceptionDecisionsDisposition { |
| 87 ForgetSSLExceptionDecisionsAtSessionEnd, | 84 FORGET_SSL_EXCEPTION_DECISIONS_AT_SESSION_END, |
| 88 RememberSSLExceptionDecisionsForDelta | 85 REMEMBER_SSL_EXCEPTION_DECISIONS_FOR_DELTA |
| 89 }; | 86 }; |
| 90 | 87 |
| 91 // Modify the user's content settings to specify a judgement made for a | 88 // Modify the user's content settings to specify a judgement made for a |
| 92 // specific site and certificate, where |url| is the site in question, |cert| | 89 // specific site and certificate, where |url| is the site in question, |cert| |
| 93 // is the certificate with an error, |error| is the error in the certificate, | 90 // is the certificate with an error, |error| is the error in the certificate, |
| 94 // and |judgement| is the user decision to be recorded. | 91 // and |judgement| is the user decision to be recorded. |
| 95 void ChangeCertPolicy(const std::string& host, | 92 void ChangeCertPolicy(const std::string& host, |
| 96 net::X509Certificate* cert, | 93 const net::X509Certificate& cert, |
| 97 net::CertStatus error, | 94 net::CertStatus error, |
| 98 net::CertPolicy::Judgment judgment); | 95 net::CertPolicy::Judgment judgment); |
| 99 | 96 |
| 100 // Query the content settings to retrieve a dictionary of certificate | 97 // Query the content settings to retrieve a dictionary of certificate |
| 101 // fingerprints and errors of certificates to user decisions, as set by | 98 // fingerprints and errors of certificates to user decisions, as set by |
| 102 // ChangeCertPolicy. Returns NULL on a failure. | 99 // ChangeCertPolicy. Returns NULL on a failure. |
| 103 // | 100 // |
| 104 // |dict| specifies the user's full exceptions dictionary for a specific site | 101 // |dict| specifies the user's full exceptions dictionary for a specific site |
| 105 // in their content settings. Must be retrieved directly from a website | 102 // in their content settings. Must be retrieved directly from a website |
| 106 // setting in the the profile's HostContentSettingsMap. | 103 // setting in the the profile's HostContentSettingsMap. |
| (...skipping 21 matching lines...) Expand all Loading... |
| 128 | 125 |
| 129 // Hosts which have been contaminated with insecure content in the | 126 // Hosts which have been contaminated with insecure content in the |
| 130 // specified process. Note that insecure content can travel between | 127 // specified process. Note that insecure content can travel between |
| 131 // same-origin frames in one processs but cannot jump between processes. | 128 // same-origin frames in one processs but cannot jump between processes. |
| 132 std::set<BrokenHostEntry> ran_insecure_content_hosts_; | 129 std::set<BrokenHostEntry> ran_insecure_content_hosts_; |
| 133 | 130 |
| 134 DISALLOW_COPY_AND_ASSIGN(ChromeSSLHostStateDelegate); | 131 DISALLOW_COPY_AND_ASSIGN(ChromeSSLHostStateDelegate); |
| 135 }; | 132 }; |
| 136 | 133 |
| 137 #endif // CHROME_BROWSER_SSL_CHROME_SSL_HOST_STATE_DELEGATE_H_ | 134 #endif // CHROME_BROWSER_SSL_CHROME_SSL_HOST_STATE_DELEGATE_H_ |
| OLD | NEW |