Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(3995)

Unified Diff: chrome/browser/ui/website_settings/website_settings.cc

Issue 662883002: net: show UI warnings for SSLv3. (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git/+/master
Patch Set: ... Created 6 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « chrome/browser/ui/toolbar/toolbar_model_impl.cc ('k') | no next file » | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: chrome/browser/ui/website_settings/website_settings.cc
diff --git a/chrome/browser/ui/website_settings/website_settings.cc b/chrome/browser/ui/website_settings/website_settings.cc
index eeff75194caad569d6a502838e94c5f34081dfa0..632bff3e50d1f8affdb2df724c49cdc7ff8dfa8f 100644
--- a/chrome/browser/ui/website_settings/website_settings.cc
+++ b/chrome/browser/ui/website_settings/website_settings.cc
@@ -558,8 +558,6 @@ void WebsiteSettings::Init(Profile* profile,
IDS_PAGE_INFO_SECURITY_TAB_SSL_VERSION,
ASCIIToUTF16(ssl_version_str));
- bool did_fallback = (ssl.connection_status &
- net::SSL_CONNECTION_VERSION_FALLBACK) != 0;
bool no_renegotiation =
(ssl.connection_status &
net::SSL_CONNECTION_NO_RENEGOTIATION_EXTENSION) != 0;
@@ -579,14 +577,19 @@ void WebsiteSettings::Init(Profile* profile,
ASCIIToUTF16(cipher), ASCIIToUTF16(mac), ASCIIToUTF16(key_exchange));
}
+ if (ssl_version == net::SSL_CONNECTION_VERSION_SSL3 &&
+ site_connection_status_ < SITE_CONNECTION_STATUS_MIXED_CONTENT) {
+ site_connection_status_ = SITE_CONNECTION_STATUS_ENCRYPTED_ERROR;
+ }
+
+ const bool did_fallback =
+ (ssl.connection_status & net::SSL_CONNECTION_VERSION_FALLBACK) != 0;
msw 2014/10/20 19:14:06 optional nit: inline into the if statement.
agl 2014/10/20 21:30:35 Ack. I think the naming the value helps a little.
if (did_fallback) {
- // For now, only SSLv3 fallback will trigger a warning icon.
- if (site_connection_status_ < SITE_CONNECTION_STATUS_MIXED_CONTENT)
- site_connection_status_ = SITE_CONNECTION_STATUS_MIXED_CONTENT;
site_connection_details_ += ASCIIToUTF16("\n\n");
site_connection_details_ += l10n_util::GetStringUTF16(
IDS_PAGE_INFO_SECURITY_TAB_FALLBACK_MESSAGE);
}
+
if (no_renegotiation) {
site_connection_details_ += ASCIIToUTF16("\n\n");
site_connection_details_ += l10n_util::GetStringUTF16(
« no previous file with comments | « chrome/browser/ui/toolbar/toolbar_model_impl.cc ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698