blob: f609a4f160732d1407d3cae4c762ae3438196cd5 [file] [log] [blame]
// Copyright 2015 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include <string>
#include "base/macros.h"
#include "chrome/browser/ssl/certificate_error_report.h"
#include "components/security_interstitials/core/controller_client.h"
#include "net/ssl/ssl_info.h"
#include "url/gurl.h"
namespace base {
class DictionaryValue;
namespace content {
class WebContents;
namespace security_interstitials {
class MetricsHelper;
class SSLCertReporter;
// CertReportHelper helps SSL interstitials report invalid certificate
// chains. Its main methods are:
// - HandleReportingCommands() which processes commands from the interstitial
// page that are related to certificate reporting: toggling the preference, and
// proceeding or going back.
// - FinishCertCollection() which should be called when an interstitial is
// closing to send a certificate report.
class CertReportHelper {
// Constants for the HTTPSErrorReporter Finch experiment
static const char kFinchExperimentName[];
static const char kFinchGroupShowPossiblySend[];
static const char kFinchGroupDontShowDontSend[];
static const char kFinchParamName[];
std::unique_ptr<SSLCertReporter> ssl_cert_reporter,
content::WebContents* web_contents,
const GURL& request_url,
const net::SSLInfo& ssl_info,
CertificateErrorReport::InterstitialReason interstitial_reason,
bool overridable,
const base::Time& interstitial_time,
security_interstitials::MetricsHelper* metrics_helper);
virtual ~CertReportHelper();
// This method can be called by tests to fake an official build (reports are
// only sent from official builds).
static void SetFakeOfficialBuildForTesting();
// Populates data that JavaScript code on the interstitial uses to show
// the checkbox.
void PopulateExtendedReportingOption(base::DictionaryValue* load_time_data);
// Allows tests to inject a mock reporter.
void SetSSLCertReporterForTesting(
std::unique_ptr<SSLCertReporter> ssl_cert_reporter);
// Handles reporting-related commands from the interstitial page: toggling the
// report preference, and sending reports on proceed/do not proceed. For
// preference-toggling commands, this method updates the corresponding prefs
// in |pref_service|. For proceeding/going back, the user action is saved to
// be reported when FinishCertCollection() is called.
void HandleReportingCommands(
security_interstitials::SecurityInterstitialCommand command,
PrefService* pref_service);
// Sends a report about an invalid certificate to the server.
void FinishCertCollection();
// Checks whether a checkbox should be shown on the page that allows
// the user to opt in to Safe Browsing extended reporting.
bool ShouldShowCertificateReporterCheckbox();
// Returns true if a certificate report should be sent for the SSL
// error for this page.
bool ShouldReportCertificateError();
// Handles reports of invalid SSL certificates.
std::unique_ptr<SSLCertReporter> ssl_cert_reporter_;
// The WebContents for which this helper sends reports.
content::WebContents* web_contents_;
// The URL for which this helper sends reports.
const GURL request_url_;
// The SSLInfo used in this helper's report.
const net::SSLInfo ssl_info_;
// The reason for the interstitial, included in this helper's report.
CertificateErrorReport::InterstitialReason interstitial_reason_;
// True if the user was given the option to proceed through the
// certificate chain error being reported.
bool overridable_;
// The time at which the interstitial was constructed.
const base::Time interstitial_time_;
// Helpful for recording metrics about cert reports.
security_interstitials::MetricsHelper* metrics_helper_;
// Default to DID_NOT_PROCEED. If no user action is processed via
// HandleReportingCommands() before FinishCertCollection(), then act as if the
// user did not proceed for reporting purposes -- e.g. closing the tab without
// taking an action on the interstitial is counted as not proceeding.
CertificateErrorReport::ProceedDecision user_action_ =