blob: 5f5e57c5148d6e4d73fffb3e20d28721d040ae86 [file] [log] [blame]
// Copyright 2014 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef EXTENSIONS_BROWSER_CONTENT_VERIFIER_DELEGATE_H_
#define EXTENSIONS_BROWSER_CONTENT_VERIFIER_DELEGATE_H_
#include <set>
#include "url/gurl.h"
namespace base {
class FilePath;
class Version;
}
namespace extensions {
class Extension;
// A pointer to the bytes of a public key, and the number of bytes.
struct ContentVerifierKey {
const uint8* data;
int size;
ContentVerifierKey() : data(NULL), size(0) {}
ContentVerifierKey(const uint8* data, int size) {
this->data = data;
this->size = size;
}
};
// This is an interface for clients that want to use a ContentVerifier.
class ContentVerifierDelegate {
public:
// Note that it is important for these to appear in increasing "severity"
// order, because we use this to let command line flags increase, but not
// decrease, the mode you're running in compared to the experiment group.
enum Mode {
// Do not try to fetch content hashes if they are missing, and do not
// enforce them if they are present.
NONE = 0,
// If content hashes are missing, try to fetch them, but do not enforce.
BOOTSTRAP,
// If hashes are present, enforce them. If they are missing, try to fetch
// them.
ENFORCE,
// Treat the absence of hashes the same as a verification failure.
ENFORCE_STRICT
};
virtual ~ContentVerifierDelegate() {}
// This should return true if the given extension should have its content
// verified.
virtual Mode ShouldBeVerified(const Extension& extension) = 0;
// Should return the public key to use for validating signatures via the two
// out parameters. NOTE: the pointer returned *must* remain valid for the
// lifetime of this object.
virtual const ContentVerifierKey& PublicKey() = 0;
// This should return a URL that can be used to fetch the
// verified_contents.json containing signatures for the given extension
// id/version pair.
virtual GURL GetSignatureFetchUrl(const std::string& extension_id,
const base::Version& version) = 0;
// This should return the set of file paths for images used within the
// browser process. (These may get transcoded during the install process).
virtual std::set<base::FilePath> GetBrowserImagePaths(
const extensions::Extension* extension) = 0;
// Called when the content verifier detects that a read of a file inside
// an extension did not match its expected hash.
virtual void VerifyFailed(const std::string& extension_id) = 0;
};
} // namespace extensions
#endif // EXTENSIONS_BROWSER_CONTENT_VERIFIER_DELEGATE_H_