chrome/browser/safe_browsing/incident_reporting/script_request_detector.h

   1 // Copyright 2015 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #ifndef CHROME_BROWSER_SAFE_BROWSING_INCIDENT_REPORTING_SCRIPT_REQUEST_DETECTOR_H_
   6 #define CHROME_BROWSER_SAFE_BROWSING_INCIDENT_REPORTING_SCRIPT_REQUEST_DETECTOR_H_
   7
   8 #include "base/containers/hash_tables.h"
   9 #include "base/macros.h"
  10 #include "base/memory/scoped_ptr.h"
  11 #include "base/memory/weak_ptr.h"
  12 #include "chrome/browser/safe_browsing/incident_reporting/incident_receiver.h"
  13
  14 namespace net {
  15 class URLRequest;
  16 }
  17
  18 namespace safe_browsing {
  19
  20 class ClientIncidentReport_IncidentData_ScriptRequestIncident;
  21
  22 // Observes network requests and reports suspicious activity.
  23 class ScriptRequestDetector {
  24  public:
  25   explicit ScriptRequestDetector(
  26       scoped_ptr<IncidentReceiver> incident_receiver);
  27   ~ScriptRequestDetector();
  28
  29   // Analyzes the |request| and triggers an incident report on suspicious
  30   // script inclusion.
  31   void OnResourceRequest(const net::URLRequest* request);
  32
  33  protected:
  34   // Testing hook.
  35   void set_allow_null_profile_for_testing(bool allow_null_profile_for_testing);
  36
  37  private:
  38   void InitializeScriptSet();
  39
  40   void ReportIncidentOnUIThread(
  41       int render_process_id,
  42       int render_frame_id,
  43       scoped_ptr<ClientIncidentReport_IncidentData_ScriptRequestIncident>
  44           incident_data);
  45
  46   scoped_ptr<IncidentReceiver> incident_receiver_;
  47   base::hash_set<std::string> script_set_;
  48   bool allow_null_profile_for_testing_;
  49
  50   base::WeakPtrFactory<ScriptRequestDetector> weak_ptr_factory_;
  51
  52   DISALLOW_COPY_AND_ASSIGN(ScriptRequestDetector);
  53 };
  54
  55 }  // namespace safe_browsing
  56
  57 #endif  // CHROME_BROWSER_SAFE_BROWSING_INCIDENT_REPORTING_SCRIPT_REQUEST_DETECTOR_H_