1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
|
// Copyright (c) 2012 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef CONTENT_BROWSER_SSL_SSL_MANAGER_H_
#define CONTENT_BROWSER_SSL_SSL_MANAGER_H_
#include <memory>
#include "base/macros.h"
#include "base/memory/weak_ptr.h"
#include "content/browser/ssl/ssl_error_handler.h"
#include "content/common/content_export.h"
#include "content/public/browser/global_request_id.h"
#include "content/public/browser/ssl_status.h"
#include "net/base/net_errors.h"
#include "net/cert/cert_status_flags.h"
#include "url/gurl.h"
namespace net {
class SSLInfo;
}
namespace content {
class BrowserContext;
class NavigationEntryImpl;
class NavigationControllerImpl;
class SSLHostStateDelegate;
struct LoadCommittedDetails;
// The SSLManager controls the SSL UI elements in a WebContents. It
// listens for various events that influence when these elements should or
// should not be displayed and adjusts them accordingly.
//
// There is one SSLManager per tab.
// The security state (secure/insecure) is stored in the navigation entry.
// Along with it are stored any SSL error code and the associated cert.
class CONTENT_EXPORT SSLManager {
public:
// Entry point for SSLCertificateErrors. This function begins the process
// of resolving a certificate error during an SSL connection. SSLManager
// will adjust the security UI and either call |CancelSSLRequest| or
// |ContinueSSLRequest| of |delegate|. |is_main_frame_request| is true only
// when the request is for a navigation in the main frame.
//
// This can be called on the UI or IO thread. It will call |delegate| on the
// same thread.
static void OnSSLCertificateError(
const base::WeakPtr<SSLErrorHandler::Delegate>& delegate,
bool is_main_frame_request,
const GURL& url,
WebContents* web_contents,
int net_error,
const net::SSLInfo& ssl_info,
bool fatal);
// Construct an SSLManager for the specified tab.
explicit SSLManager(NavigationControllerImpl* controller);
virtual ~SSLManager();
// The navigation controller associated with this SSLManager. The
// NavigationController is guaranteed to outlive the SSLManager.
NavigationControllerImpl* controller() { return controller_; }
void DidCommitProvisionalLoad(const LoadCommittedDetails& details);
void DidStartResourceResponse(const GURL& url, bool has_certificate_errors);
// The following methods are called when a page includes insecure
// content. These methods update the SSLStatus on the NavigationEntry
// appropriately. If the result could change the visible SSL state,
// they notify the WebContents of the change via
// DidChangeVisibleSecurityState();
// These methods are not called for resource preloads.
void DidDisplayMixedContent();
void DidContainInsecureFormAction();
void DidDisplayContentWithCertErrors();
void DidRunMixedContent(const GURL& security_origin);
void DidRunContentWithCertErrors(const GURL& security_origin);
// An error occurred with the certificate in an SSL connection.
void OnCertError(std::unique_ptr<SSLErrorHandler> handler);
private:
// Helper method for handling certificate errors.
void OnCertErrorInternal(std::unique_ptr<SSLErrorHandler> handler);
// Updates the NavigationEntry's |content_status| flags according to state in
// |ssl_host_state_delegate|. |add_content_status_flags| and
// |remove_content_status_flags| are bitmasks of SSLStatus::ContentStatusFlags
// that will be added or removed from the |content_status| field. (Pass 0 to
// add/remove no content status flags.) |remove_content_status_flags| are
// removed before |add_content_status_flags| are added. If the final set of
// flags changes, this method will notify the WebContents and return true.
bool UpdateEntry(NavigationEntryImpl* entry,
int add_content_status_flags,
int remove_content_status_flags);
// Helper function for UpdateEntry().
void UpdateLastCommittedEntry(int add_content_status_flags,
int remove_content_status_flags);
// Notifies the WebContents that the SSL state changed.
void NotifyDidChangeVisibleSSLState();
// Updates the last committed entries of all |context|'s
// SSLManagers. Notifies each WebContents of visible SSL state changes
// if necessary.
static void NotifySSLInternalStateChanged(BrowserContext* context);
// The NavigationController that owns this SSLManager. We are responsible
// for the security UI of this tab.
NavigationControllerImpl* controller_;
// Delegate that manages SSL state specific to each host.
SSLHostStateDelegate* ssl_host_state_delegate_;
DISALLOW_COPY_AND_ASSIGN(SSLManager);
};
} // namespace content
#endif // CONTENT_BROWSER_SSL_SSL_MANAGER_H_
|
