chrome/browser/download/download_danger_prompt.h

   1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #ifndef CHROME_BROWSER_DOWNLOAD_DOWNLOAD_DANGER_PROMPT_H_
   6 #define CHROME_BROWSER_DOWNLOAD_DOWNLOAD_DANGER_PROMPT_H_
   7
   8 #include "base/callback_forward.h"
   9
  10 namespace content {
  11 class DownloadItem;
  12 class WebContents;
  13 }
  14
  15 // Prompts the user for whether to Keep a dangerous DownloadItem using native
  16 // UI. This prompt is invoked by the DownloadsDOMHandler when the user wants to
  17 // accept a dangerous download. Having a native dialog intervene during the this
  18 // workflow means that the chrome://downloads page no longer has the privilege
  19 // to accept a dangerous download from script without user intervention. This
  20 // step is necessary to prevent a malicious script form abusing such a
  21 // privilege.
  22 class DownloadDangerPrompt {
  23  public:
  24   // Actions resulting from showing the danger prompt.
  25   enum Action {
  26     ACCEPT,
  27     CANCEL,
  28     DISMISS,
  29   };
  30   typedef base::Callback<void(Action)> OnDone;
  31
  32   // Return a new self-deleting DownloadDangerPrompt. |accepted| or |canceled|
  33   // will be run when the the respective action is invoked. |canceled| may also
  34   // be called when |item| is either no longer dangerous or no longer in
  35   // progress, or if the tab corresponding to |web_contents| is
  36   // closing. The returned DownloadDangerPrompt* is only used for testing. The
  37   // caller does not own the object and receive no guarantees about lifetime.
  38   // If |show_context|, then the prompt message will contain some information
  39   // about the download and its danger; otherwise it won't.
  40   static DownloadDangerPrompt* Create(
  41       content::DownloadItem* item,
  42       content::WebContents* web_contents,
  43       bool show_context,
  44       const OnDone& done);
  45
  46   // Only to be used by tests. Subclasses must override to manually call the
  47   // respective button click handler.
  48   virtual void InvokeActionForTesting(Action action) = 0;
  49 };
  50
  51 #endif  // CHROME_BROWSER_DOWNLOAD_DOWNLOAD_DANGER_PROMPT_H_