[email protected] | 33ca232f | 2012-04-10 00:08:45 | [diff] [blame] | 1 | // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 | // Use of this source code is governed by a BSD-style license that can be | ||||
3 | // found in the LICENSE file. | ||||
4 | |||||
5 | #ifndef CHROME_BROWSER_DOWNLOAD_DOWNLOAD_DANGER_PROMPT_H_ | ||||
6 | #define CHROME_BROWSER_DOWNLOAD_DOWNLOAD_DANGER_PROMPT_H_ | ||||
[email protected] | 33ca232f | 2012-04-10 00:08:45 | [diff] [blame] | 7 | |
8 | #include "base/callback_forward.h" | ||||
9 | |||||
[email protected] | 33ca232f | 2012-04-10 00:08:45 | [diff] [blame] | 10 | namespace content { |
11 | class DownloadItem; | ||||
[email protected] | f9f616c | 2012-12-11 02:07:13 | [diff] [blame] | 12 | class WebContents; |
[email protected] | 33ca232f | 2012-04-10 00:08:45 | [diff] [blame] | 13 | } |
14 | |||||
15 | // Prompts the user for whether to Keep a dangerous DownloadItem using native | ||||
16 | // UI. This prompt is invoked by the DownloadsDOMHandler when the user wants to | ||||
17 | // accept a dangerous download. Having a native dialog intervene during the this | ||||
18 | // workflow means that the chrome://downloads page no longer has the privilege | ||||
19 | // to accept a dangerous download from script without user intervention. This | ||||
20 | // step is necessary to prevent a malicious script form abusing such a | ||||
21 | // privilege. | ||||
22 | class DownloadDangerPrompt { | ||||
23 | public: | ||||
24 | // Actions resulting from showing the danger prompt. | ||||
25 | enum Action { | ||||
26 | ACCEPT, | ||||
[email protected] | f1d784d6 | 2013-07-28 18:36:09 | [diff] [blame^] | 27 | CANCEL, |
28 | DISMISS, | ||||
[email protected] | 33ca232f | 2012-04-10 00:08:45 | [diff] [blame] | 29 | }; |
[email protected] | f1d784d6 | 2013-07-28 18:36:09 | [diff] [blame^] | 30 | typedef base::Callback<void(Action)> OnDone; |
[email protected] | 33ca232f | 2012-04-10 00:08:45 | [diff] [blame] | 31 | |
32 | // Return a new self-deleting DownloadDangerPrompt. |accepted| or |canceled| | ||||
33 | // will be run when the the respective action is invoked. |canceled| may also | ||||
34 | // be called when |item| is either no longer dangerous or no longer in | ||||
[email protected] | 371d64a | 2012-12-14 21:11:32 | [diff] [blame] | 35 | // progress, or if the tab corresponding to |web_contents| is |
[email protected] | 33ca232f | 2012-04-10 00:08:45 | [diff] [blame] | 36 | // closing. The returned DownloadDangerPrompt* is only used for testing. The |
37 | // caller does not own the object and receive no guarantees about lifetime. | ||||
[email protected] | f82d999 | 2013-01-18 19:19:03 | [diff] [blame] | 38 | // If |show_context|, then the prompt message will contain some information |
39 | // about the download and its danger; otherwise it won't. | ||||
[email protected] | 33ca232f | 2012-04-10 00:08:45 | [diff] [blame] | 40 | static DownloadDangerPrompt* Create( |
41 | content::DownloadItem* item, | ||||
[email protected] | f9f616c | 2012-12-11 02:07:13 | [diff] [blame] | 42 | content::WebContents* web_contents, |
[email protected] | f82d999 | 2013-01-18 19:19:03 | [diff] [blame] | 43 | bool show_context, |
[email protected] | f1d784d6 | 2013-07-28 18:36:09 | [diff] [blame^] | 44 | const OnDone& done); |
[email protected] | 33ca232f | 2012-04-10 00:08:45 | [diff] [blame] | 45 | |
46 | protected: | ||||
47 | friend class DownloadDangerPromptTest; | ||||
48 | |||||
49 | // Only to be used by tests. Subclasses must override to manually call the | ||||
50 | // respective button click handler. | ||||
51 | virtual void InvokeActionForTesting(Action action) = 0; | ||||
52 | }; | ||||
53 | |||||
54 | #endif // CHROME_BROWSER_DOWNLOAD_DOWNLOAD_DANGER_PROMPT_H_ |