123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104 |
- // Copyright (c) 2014 The Chromium Authors. All rights reserved.
- // Use of this source code is governed by a BSD-style license that can be
- // found in the LICENSE file.
- #ifndef ANDROID_WEBVIEW_BROWSER_AW_SSL_HOST_STATE_DELEGATE_H_
- #define ANDROID_WEBVIEW_BROWSER_AW_SSL_HOST_STATE_DELEGATE_H_
- #include <map>
- #include <string>
- #include "content/public/browser/ssl_host_state_delegate.h"
- #include "net/base/hash_value.h"
- #include "net/cert/x509_certificate.h"
- namespace android_webview {
- namespace internal {
- // This class maintains the policy for storing actions on certificate errors.
- class CertPolicy {
- public:
- CertPolicy();
- ~CertPolicy();
- // Returns true if the user has decided to proceed through the ssl error
- // before. For a certificate to be allowed, it must not have any
- // *additional* errors from when it was allowed.
- bool Check(const net::X509Certificate& cert, int error) const;
- // Causes the policy to allow this certificate for a given |error|. And
- // remember the user's choice.
- void Allow(const net::X509Certificate& cert, int error);
- // Returns true if and only if there exists a user allow exception for some
- // certificate.
- bool HasAllowException() const { return allowed_.size() > 0; }
- private:
- // The set of fingerprints of allowed certificates.
- std::map<net::SHA256HashValue, int> allowed_;
- };
- } // namespace internal
- class AwSSLHostStateDelegate : public content::SSLHostStateDelegate {
- public:
- AwSSLHostStateDelegate();
- AwSSLHostStateDelegate(const AwSSLHostStateDelegate&) = delete;
- AwSSLHostStateDelegate& operator=(const AwSSLHostStateDelegate&) = delete;
- ~AwSSLHostStateDelegate() override;
- // Records that |cert| is permitted to be used for |host| in the future, for
- // a specified |error| type.
- void AllowCert(const std::string& host,
- const net::X509Certificate& cert,
- int error,
- content::StoragePartition* storage_partition) override;
- void Clear(
- base::RepeatingCallback<bool(const std::string&)> host_filter) override;
- // Queries whether |cert| is allowed or denied for |host| and |error|.
- content::SSLHostStateDelegate::CertJudgment QueryPolicy(
- const std::string& host,
- const net::X509Certificate& cert,
- int error,
- content::StoragePartition* storage_partition) override;
- // Records that a host has run insecure content.
- void HostRanInsecureContent(const std::string& host,
- int child_id,
- InsecureContentType content_type) override;
- // Returns whether the specified host ran insecure content.
- bool DidHostRunInsecureContent(const std::string& host,
- int child_id,
- InsecureContentType content_type) override;
- // HTTPS-First Mode is not implemented in Android Webview.
- void AllowHttpForHost(const std::string& host,
- content::StoragePartition* storage_partition) override;
- bool IsHttpAllowedForHost(
- const std::string& host,
- content::StoragePartition* storage_partition) override;
- // Revokes all SSL certificate error allow exceptions made by the user for
- // |host|.
- void RevokeUserAllowExceptions(const std::string& host) override;
- // Returns whether the user has allowed a certificate error exception for
- // |host|. This does not mean that *all* certificate errors are allowed, just
- // that there exists an exception. To see if a particular certificate and
- // error combination exception is allowed, use QueryPolicy().
- bool HasAllowException(const std::string& host,
- content::StoragePartition* storage_partition) override;
- private:
- // Certificate policies for each host.
- std::map<std::string, internal::CertPolicy> cert_policy_for_host_;
- };
- } // namespace android_webview
- #endif // ANDROID_WEBVIEW_BROWSER_AW_SSL_HOST_STATE_DELEGATE_H_
|