Basic autofill into password value on user gesture only.

components/autofill/content/renderer/password_autofill_agent.cc

 // Copyright 2013 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "components/autofill/content/renderer/password_autofill_agent.h"
 
 #include "base/bind.h"
 #include "base/memory/scoped_ptr.h"
 #include "base/message_loop/message_loop.h"
 #include "base/metrics/histogram.h"
 #include "base/strings/utf_string_conversions.h"
 #include "components/autofill/content/renderer/form_autofill_util.h"
 #include "components/autofill/content/renderer/password_form_conversion_utils.h"
 #include "components/autofill/core/common/autofill_messages.h"
 #include "components/autofill/core/common/form_field_data.h"
 #include "components/autofill/core/common/password_form.h"
 #include "components/autofill/core/common/password_form_fill_data.h"
 #include "content/public/renderer/render_view.h"
 #include "third_party/WebKit/public/platform/WebVector.h"
 #include "third_party/WebKit/public/web/WebAutofillClient.h"
 #include "third_party/WebKit/public/web/WebDocument.h"
 #include "third_party/WebKit/public/web/WebElement.h"
 #include "third_party/WebKit/public/web/WebFormElement.h"
 #include "third_party/WebKit/public/web/WebFrame.h"
 #include "third_party/WebKit/public/web/WebInputEvent.h"
 #include "third_party/WebKit/public/web/WebNode.h"
 #include "third_party/WebKit/public/web/WebNodeList.h"
 #include "third_party/WebKit/public/web/WebSecurityOrigin.h"
 #include "third_party/WebKit/public/web/WebUserGestureIndicator.h"
+#include "third_party/WebKit/public/web/WebUserGestureToken.h"

[Garrett Casto, 2013/12/02 23:49:12]

Is this leftover from a previous version? Doesn't seem used now.

[jww, 2013/12/03 06:29:59]

Done.

 #include "third_party/WebKit/public/web/WebView.h"
 #include "ui/events/keycodes/keyboard_codes.h"
 
 namespace autofill {
 namespace {
 
 // The size above which we stop triggering autocomplete.
 static const size_t kMaximumTextSizeForAutocomplete = 1000;
 
 // Maps element names to the actual elements to simplify form filling.
@@ skipping 142 matching lines @@
 
 }  // namespace
 
 ////////////////////////////////////////////////////////////////////////////////
 // PasswordAutofillAgent, public:
 
 PasswordAutofillAgent::PasswordAutofillAgent(content::RenderView* render_view)
     : content::RenderViewObserver(render_view),
       usernames_usage_(NOTHING_TO_AUTOFILL),
       web_view_(render_view->GetWebView()),
-      weak_ptr_factory_(this) {
+      weak_ptr_factory_(this),
+      gestureHandler_(new AutofillWebUserGestureHandler(this)),
+      userGestureOccurred_(false) {
+  blink::WebUserGestureIndicator::setHandler(gestureHandler_);
 }
 
 PasswordAutofillAgent::~PasswordAutofillAgent() {
+  DCHECK(gestureHandler_);
+  blink::WebUserGestureIndicator::setHandler(0);

[Garrett Casto, 2013/12/02 23:49:12]

use NULL for this instead of 0, since we are talking about a pointer.

[jww, 2013/12/03 06:29:59]

Done.

+  delete gestureHandler_;
 }
 
 bool PasswordAutofillAgent::TextFieldDidEndEditing(
     const blink::WebInputElement& element) {
   LoginToPasswordInfoMap::const_iterator iter =
       login_to_password_info_.find(element);
   if (iter == login_to_password_info_.end())
     return false;
 
   const PasswordFormFillData& fill_data =
@@ skipping 515 matching lines @@
     if (set_selection) {
       username_element->setSelectionRange(current_username.length(),
                                           username.length());
     }
   } else if (current_username != username) {
     // If the username can't be filled and it doesn't match a saved password
     // as is, don't autofill a password.
     return false;
   }
 
-  password_element->setValue(password);
+  // We do not autofill into the DOM until a user gesture has occurred to make
+  // sure that the user is intentionally interacting with page. So if there
+  // isn't a user gesture occuring right now, we setup a handler here to wait
+  // for such a gesture to occur.

[Garrett Casto, 2013/12/02 23:49:12]

Shouldn't this be "If a user gesture hasn't occurred, setup a handler to wait
for such a gesture". That is, the gesture doesn't need to be occurring right
now, just had to have happened at some point in the past.

It also seems like we need to clear this after main frame navigation.

[jww, 2013/12/03 06:29:59]

Done.

+  if (!userGestureOccurred_) {
+    gestureHandler_->addElement(new blink::WebInputElement(*password_element));

[Garrett Casto, 2013/12/02 23:49:12]

I think that we can just keep a copy of the WebInputElement instead of a new
pointer. The blink/chromium interface just consists of thin wrappers around the
blink objects which are ref-counted, so the overhead from doing this is tiny. It
also frees you from doing the manual memory management that you are doing now.

[jww, 2013/12/03 06:29:59]

Done.

+    password_element->setSuggestedValue(password);
+  } else {
+    password_element->setValue(password);
+  }
   SetElementAutofilled(password_element, true);
   return true;
 }
 
 void PasswordAutofillAgent::PerformInlineAutocomplete(
     const blink::WebInputElement& username_input,
     const blink::WebInputElement& password_input,
     const PasswordFormFillData& fill_data) {
   DCHECK(!fill_data.wait_for_username);
 
@@ skipping 52 matching lines @@
   blink::WebInputElement input = element.to<blink::WebInputElement>();
   LoginToPasswordInfoMap::iterator iter = login_to_password_info_.find(input);
   if (iter == login_to_password_info_.end())
     return false;
 
   *found_input = input;
   *found_password = iter->second;
   return true;
 }
 
+void PasswordAutofillAgent::AutofillWebUserGestureHandler::onGesture() {

[Garrett Casto, 2013/12/02 23:49:12]

To be clear, this gets called whenever there is a click, button press, or screen
touch? I tried tracing the code back, but it got a little hairy :).

[jww, 2013/12/03 06:29:59]

Yup!

+  agent_->setUserGestureOccurred(true);
+
+  std::vector<blink::WebInputElement*>::iterator iter;
+  for (iter = elements_.begin(); iter != elements_.end(); ++iter) {
+    if (!(*iter)->isNull() && !(*iter)->suggestedValue().isNull()) {
+      DCHECK(!(*iter)->suggestedValue().isNull());

[Garrett Casto, 2013/12/02 23:49:12]

I don't think that there is much value to DCHECK on something that you check the
line before.

[jww, 2013/12/03 06:29:59]

Done.

+      (*iter)->setValue((*iter)->suggestedValue());
+    }
+    delete (*iter);
+  }
+
+  elements_.clear();
+}
+
+PasswordAutofillAgent::AutofillWebUserGestureHandler::
+    AutofillWebUserGestureHandler(PasswordAutofillAgent* agent)
+    : agent_(agent) {}
+
+PasswordAutofillAgent::AutofillWebUserGestureHandler::
+    ~AutofillWebUserGestureHandler() {
+  std::vector<blink::WebInputElement*>::iterator iter;

[Garrett Casto, 2013/12/02 23:49:12]

I don't think that this should be necessary to keep around, but for future
reference if you want to delete pointers in a container, use
STLDeleteContainerPointers()
(https://code.google.com/p/chromium/codesearch#chromium/src/base/stl_util.h&q=...).

[jww, 2013/12/03 06:29:59]

Oh, awesome!

+  for (iter = elements_.begin(); iter != elements_.end(); ++iter) {
+    delete (*iter);
+  }
+
+  elements_.clear();
+}
+
 }  // namespace autofill