123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362 |
- // Copyright 2016 The Chromium Authors. All rights reserved.
- // Use of this source code is governed by a BSD-style license that can be
- // found in the LICENSE file.
- #include "components/security_interstitials/core/safe_browsing_loud_error_ui.h"
- #include "base/i18n/time_formatting.h"
- #include "base/metrics/histogram_macros.h"
- #include "base/strings/escape.h"
- #include "base/strings/stringprintf.h"
- #include "base/strings/utf_string_conversions.h"
- #include "base/values.h"
- #include "components/google/core/common/google_util.h"
- #include "components/grit/components_resources.h"
- #include "components/security_interstitials/core/common_string_util.h"
- #include "components/security_interstitials/core/controller_client.h"
- #include "components/security_interstitials/core/metrics_helper.h"
- #include "components/strings/grit/components_strings.h"
- #include "net/base/url_util.h"
- #include "ui/base/l10n/l10n_util.h"
- namespace security_interstitials {
- namespace {
- // For malware interstitial pages, we link the problematic URL to Google's
- // diagnostic page.
- const char kSbDiagnosticUrl[] =
- "https://transparencyreport.google.com/safe-browsing/search?url=%s";
- // Constants for the V4 phishing string upgrades.
- const char kReportPhishingErrorUrl[] =
- "https://safebrowsing.google.com/safebrowsing/report_error/?url=%s";
- void RecordExtendedReportingPrefChanged(bool report) {
- UMA_HISTOGRAM_BOOLEAN("SafeBrowsing.Pref.Extended.SecurityInterstitial",
- report);
- }
- } // namespace
- SafeBrowsingLoudErrorUI::SafeBrowsingLoudErrorUI(
- const GURL& request_url,
- const GURL& main_frame_url,
- SBInterstitialReason reason,
- const SBErrorDisplayOptions& display_options,
- const std::string& app_locale,
- const base::Time& time_triggered,
- ControllerClient* controller,
- bool created_prior_to_navigation)
- : BaseSafeBrowsingErrorUI(request_url,
- main_frame_url,
- reason,
- display_options,
- app_locale,
- time_triggered,
- controller),
- created_prior_to_navigation_(created_prior_to_navigation) {
- controller->metrics_helper()->RecordUserDecision(MetricsHelper::SHOW);
- controller->metrics_helper()->RecordUserInteraction(
- MetricsHelper::TOTAL_VISITS);
- if (is_proceed_anyway_disabled()) {
- controller->metrics_helper()->RecordUserDecision(
- security_interstitials::MetricsHelper::PROCEEDING_DISABLED);
- }
- }
- SafeBrowsingLoudErrorUI::~SafeBrowsingLoudErrorUI() {
- controller()->metrics_helper()->RecordShutdownMetrics();
- }
- void SafeBrowsingLoudErrorUI::PopulateStringsForHtml(
- base::Value::Dict& load_time_data) {
- load_time_data.Set("type", "SAFEBROWSING");
- load_time_data.Set("tabTitle",
- l10n_util::GetStringUTF16(IDS_SAFEBROWSING_V3_TITLE));
- load_time_data.Set(
- "openDetails",
- l10n_util::GetStringUTF16(IDS_SAFEBROWSING_V3_OPEN_DETAILS_BUTTON));
- load_time_data.Set(
- "closeDetails",
- l10n_util::GetStringUTF16(IDS_SAFEBROWSING_V3_CLOSE_DETAILS_BUTTON));
- load_time_data.Set(
- "primaryButtonText",
- l10n_util::GetStringUTF16(IDS_SAFEBROWSING_OVERRIDABLE_SAFETY_BUTTON));
- load_time_data.Set("overridable", !is_proceed_anyway_disabled());
- load_time_data.Set(
- security_interstitials::kOptInLink,
- l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_SCOUT_REPORTING_AGREE));
- load_time_data.Set(
- security_interstitials::kEnhancedProtectionMessage,
- l10n_util::GetStringUTF16(IDS_SAFE_BROWSING_ENHANCED_PROTECTION_MESSAGE));
- if (always_show_back_to_safety()) {
- load_time_data.Set("hide_primary_button", false);
- } else {
- load_time_data.Set("hide_primary_button",
- created_prior_to_navigation_
- ? !controller()->CanGoBackBeforeNavigation()
- : !controller()->CanGoBack());
- }
- load_time_data.Set("billing", interstitial_reason() ==
- BaseSafeBrowsingErrorUI::SB_REASON_BILLING);
- switch (interstitial_reason()) {
- case BaseSafeBrowsingErrorUI::SB_REASON_MALWARE:
- PopulateMalwareLoadTimeData(load_time_data);
- break;
- case BaseSafeBrowsingErrorUI::SB_REASON_HARMFUL:
- PopulateHarmfulLoadTimeData(load_time_data);
- break;
- case BaseSafeBrowsingErrorUI::SB_REASON_PHISHING:
- PopulatePhishingLoadTimeData(load_time_data);
- break;
- case BaseSafeBrowsingErrorUI::SB_REASON_BILLING:
- PopulateBillingLoadTimeData(load_time_data);
- break;
- }
- // Not used by this interstitial.
- load_time_data.Set("recurrentErrorParagraph", "");
- load_time_data.Set("show_recurrent_error_paragraph", false);
- PopulateExtendedReportingOption(load_time_data);
- PopulateEnhancedProtectionMessage(load_time_data);
- }
- void SafeBrowsingLoudErrorUI::HandleCommand(
- SecurityInterstitialCommand command) {
- switch (command) {
- case CMD_PROCEED: {
- // User pressed on the button to proceed.
- if (!is_proceed_anyway_disabled()) {
- controller()->metrics_helper()->RecordUserDecision(
- MetricsHelper::PROCEED);
- controller()->Proceed();
- break;
- }
- // If the user can't proceed, fall through to CMD_DONT_PROCEED.
- [[fallthrough]];
- }
- case CMD_DONT_PROCEED: {
- // User pressed on the button to return to safety.
- // Don't record the user action here because there are other ways of
- // triggering DontProceed, like clicking the back button.
- if (is_main_frame_load_blocked()) {
- // If the load is blocked, we want to close the interstitial and discard
- // the pending entry.
- controller()->GoBack();
- } else {
- // Otherwise the offending entry has committed, and we need to go back
- // or to a safe page. We will close the interstitial when that page
- // commits.
- controller()->GoBackAfterNavigationCommitted();
- }
- break;
- }
- case CMD_DO_REPORT: {
- // User enabled SB Extended Reporting via the checkbox.
- set_extended_reporting(true);
- controller()->SetReportingPreference(true);
- RecordExtendedReportingPrefChanged(true);
- break;
- }
- case CMD_DONT_REPORT: {
- // User disabled SB Extended Reporting via the checkbox.
- set_extended_reporting(false);
- controller()->SetReportingPreference(false);
- RecordExtendedReportingPrefChanged(false);
- break;
- }
- case CMD_SHOW_MORE_SECTION: {
- controller()->metrics_helper()->RecordUserInteraction(
- security_interstitials::MetricsHelper::SHOW_ADVANCED);
- break;
- }
- case CMD_OPEN_HELP_CENTER: {
- // User pressed "Learn more".
- controller()->metrics_helper()->RecordUserInteraction(
- security_interstitials::MetricsHelper::SHOW_LEARN_MORE);
- GURL learn_more_url = controller()->GetBaseHelpCenterUrl();
- learn_more_url = net::AppendQueryParameter(
- learn_more_url, "p", get_help_center_article_link());
- learn_more_url =
- google_util::AppendGoogleLocaleParam(learn_more_url, app_locale());
- controller()->OpenURL(should_open_links_in_new_tab(), learn_more_url);
- break;
- }
- case CMD_RELOAD: {
- controller()->metrics_helper()->RecordUserInteraction(
- security_interstitials::MetricsHelper::RELOAD);
- controller()->Reload();
- break;
- }
- case CMD_OPEN_REPORTING_PRIVACY: {
- // User pressed on the SB Extended Reporting "privacy policy" link.
- controller()->OpenExtendedReportingPrivacyPolicy(
- should_open_links_in_new_tab());
- break;
- }
- case CMD_OPEN_WHITEPAPER: {
- controller()->OpenExtendedReportingWhitepaper(
- should_open_links_in_new_tab());
- break;
- }
- case CMD_OPEN_DIAGNOSTIC: {
- controller()->metrics_helper()->RecordUserInteraction(
- security_interstitials::MetricsHelper::SHOW_DIAGNOSTIC);
- std::string diagnostic = base::StringPrintf(
- kSbDiagnosticUrl,
- base::EscapeQueryParamValue(request_url().spec(), true).c_str());
- GURL diagnostic_url(diagnostic);
- diagnostic_url =
- google_util::AppendGoogleLocaleParam(diagnostic_url, app_locale());
- controller()->OpenURL(should_open_links_in_new_tab(), diagnostic_url);
- break;
- }
- case CMD_REPORT_PHISHING_ERROR: {
- controller()->metrics_helper()->RecordUserInteraction(
- security_interstitials::MetricsHelper::REPORT_PHISHING_ERROR);
- std::string phishing_error = base::StringPrintf(
- kReportPhishingErrorUrl,
- base::EscapeQueryParamValue(request_url().spec(), true).c_str());
- GURL phishing_error_url(phishing_error);
- phishing_error_url = google_util::AppendGoogleLocaleParam(
- phishing_error_url, app_locale());
- controller()->OpenURL(should_open_links_in_new_tab(), phishing_error_url);
- break;
- }
- case CMD_OPEN_ENHANCED_PROTECTION_SETTINGS: {
- controller()->metrics_helper()->RecordUserInteraction(
- security_interstitials::MetricsHelper::OPEN_ENHANCED_PROTECTION);
- controller()->OpenEnhancedProtectionSettings();
- break;
- }
- case CMD_OPEN_DATE_SETTINGS:
- case CMD_OPEN_LOGIN:
- case CMD_ERROR:
- case CMD_TEXT_FOUND:
- case CMD_TEXT_NOT_FOUND:
- break;
- }
- }
- void SafeBrowsingLoudErrorUI::PopulateMalwareLoadTimeData(
- base::Value::Dict& load_time_data) {
- load_time_data.Set("phishing", false);
- load_time_data.Set("heading",
- l10n_util::GetStringUTF16(IDS_MALWARE_V3_HEADING));
- load_time_data.Set(
- "primaryParagraph",
- l10n_util::GetStringFUTF16(
- IDS_MALWARE_V3_PRIMARY_PARAGRAPH,
- common_string_util::GetFormattedHostName(request_url())));
- load_time_data.Set(
- "explanationParagraph",
- is_main_frame_load_blocked()
- ? l10n_util::GetStringFUTF16(
- IDS_MALWARE_V3_EXPLANATION_PARAGRAPH,
- common_string_util::GetFormattedHostName(request_url()))
- : l10n_util::GetStringFUTF16(
- IDS_MALWARE_V3_EXPLANATION_PARAGRAPH_SUBRESOURCE,
- base::UTF8ToUTF16(main_frame_url().host()),
- common_string_util::GetFormattedHostName(request_url())));
- load_time_data.Set("finalParagraph", l10n_util::GetStringUTF16(
- IDS_MALWARE_V3_PROCEED_PARAGRAPH));
- }
- void SafeBrowsingLoudErrorUI::PopulateHarmfulLoadTimeData(
- base::Value::Dict& load_time_data) {
- load_time_data.Set("phishing", false);
- load_time_data.Set("heading",
- l10n_util::GetStringUTF16(IDS_HARMFUL_V3_HEADING));
- load_time_data.Set(
- "primaryParagraph",
- l10n_util::GetStringFUTF16(
- IDS_HARMFUL_V3_PRIMARY_PARAGRAPH,
- common_string_util::GetFormattedHostName(request_url())));
- load_time_data.Set(
- "explanationParagraph",
- l10n_util::GetStringFUTF16(
- IDS_HARMFUL_V3_EXPLANATION_PARAGRAPH,
- common_string_util::GetFormattedHostName(request_url())));
- load_time_data.Set("finalParagraph", l10n_util::GetStringUTF16(
- IDS_HARMFUL_V3_PROCEED_PARAGRAPH));
- }
- void SafeBrowsingLoudErrorUI::PopulatePhishingLoadTimeData(
- base::Value::Dict& load_time_data) {
- load_time_data.Set("phishing", true);
- load_time_data.Set("heading",
- l10n_util::GetStringUTF16(IDS_PHISHING_V4_HEADING));
- load_time_data.Set(
- "primaryParagraph",
- l10n_util::GetStringFUTF16(
- IDS_PHISHING_V4_PRIMARY_PARAGRAPH,
- common_string_util::GetFormattedHostName(request_url())));
- load_time_data.Set(
- "explanationParagraph",
- l10n_util::GetStringFUTF16(
- IDS_PHISHING_V4_EXPLANATION_PARAGRAPH,
- common_string_util::GetFormattedHostName(request_url())));
- load_time_data.Set(
- "finalParagraph",
- l10n_util::GetStringUTF16(IDS_PHISHING_V4_PROCEED_AND_REPORT_PARAGRAPH));
- }
- void SafeBrowsingLoudErrorUI::PopulateExtendedReportingOption(
- base::Value::Dict& load_time_data) {
- bool can_show_extended_reporting_option = CanShowExtendedReportingOption();
- bool can_show_enhanced_protection_message =
- CanShowEnhancedProtectionMessage();
- load_time_data.Set(security_interstitials::kDisplayCheckBox,
- can_show_extended_reporting_option &&
- !can_show_enhanced_protection_message);
- if (!can_show_extended_reporting_option) {
- return;
- }
- load_time_data.Set(security_interstitials::kBoxChecked,
- is_extended_reporting_enabled());
- }
- void SafeBrowsingLoudErrorUI::PopulateEnhancedProtectionMessage(
- base::Value::Dict& load_time_data) {
- bool can_show_enhanced_protection_message =
- CanShowEnhancedProtectionMessage();
- if (can_show_enhanced_protection_message) {
- controller()->metrics_helper()->RecordUserInteraction(
- security_interstitials::MetricsHelper::SHOW_ENHANCED_PROTECTION);
- }
- load_time_data.Set(security_interstitials::kDisplayEnhancedProtectionMessage,
- can_show_enhanced_protection_message);
- }
- void SafeBrowsingLoudErrorUI::PopulateBillingLoadTimeData(
- base::Value::Dict& load_time_data) {
- load_time_data.Set("phishing", false);
- load_time_data.Set("overridable", true);
- load_time_data.Set("tabTitle", l10n_util::GetStringUTF16(IDS_BILLING_TITLE));
- load_time_data.Set("heading", l10n_util::GetStringUTF16(IDS_BILLING_HEADING));
- load_time_data.Set("primaryParagraph",
- l10n_util::GetStringUTF16(IDS_BILLING_PRIMARY_PARAGRAPH));
- load_time_data.Set("primaryButtonText",
- l10n_util::GetStringUTF16(IDS_BILLING_PRIMARY_BUTTON));
- load_time_data.Set("proceedButtonText",
- l10n_util::GetStringUTF16(IDS_BILLING_PROCEED_BUTTON));
- load_time_data.Set("openDetails", "");
- load_time_data.Set("closeDetails", "");
- load_time_data.Set("explanationParagraph", "");
- load_time_data.Set("finalParagraph", "");
- }
- int SafeBrowsingLoudErrorUI::GetHTMLTemplateId() const {
- return IDR_SECURITY_INTERSTITIAL_HTML;
- }
- } // namespace security_interstitials
|