1 // Copyright (c) 2011 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file.
4
5 #include "chrome/browser/ui/views/external_protocol_dialog.h"
6
7 #include "base/metrics/histogram.h"
8 #include "base/string_util.h"
9 #include "base/threading/thread.h"
10 #include "base/threading/thread_restrictions.h"
11 #include "base/utf_string_conversions.h"
12 #include "base/win/registry.h"
13 #include "chrome/browser/external_protocol_handler.h"
14 #include "chrome/browser/tab_contents/tab_util.h"
15 #include "content/browser/tab_contents/tab_contents.h"
16 #include "grit/chromium_strings.h"
17 #include "grit/generated_resources.h"
18 #include "ui/base/l10n/l10n_util.h"
19 #include "ui/base/message_box_flags.h"
20 #include "ui/base/text/text_elider.h"
21 #include "views/controls/message_box_view.h"
22 #include "views/window/window.h"
23
24 namespace {
25
26 const int kMessageWidth = 400;
27
28 } // namespace
29
30 ///////////////////////////////////////////////////////////////////////////////
31 // ExternalProtocolHandler
32
33 // static
RunExternalProtocolDialog(const GURL & url,int render_process_host_id,int routing_id)34 void ExternalProtocolHandler::RunExternalProtocolDialog(
35 const GURL& url, int render_process_host_id, int routing_id) {
36 std::wstring command =
37 ExternalProtocolDialog::GetApplicationForProtocol(url);
38 if (command.empty()) {
39 // ShellExecute won't do anything. Don't bother warning the user.
40 return;
41 }
42 TabContents* tab_contents = tab_util::GetTabContentsByID(
43 render_process_host_id, routing_id);
44 DCHECK(tab_contents);
45 ExternalProtocolDialog* handler =
46 new ExternalProtocolDialog(tab_contents, url, command);
47 }
48
49 ///////////////////////////////////////////////////////////////////////////////
50 // ExternalProtocolDialog
51
~ExternalProtocolDialog()52 ExternalProtocolDialog::~ExternalProtocolDialog() {
53 }
54
55 //////////////////////////////////////////////////////////////////////////////
56 // ExternalProtocolDialog, views::DialogDelegate implementation:
57
GetDefaultDialogButton() const58 int ExternalProtocolDialog::GetDefaultDialogButton() const {
59 return ui::MessageBoxFlags::DIALOGBUTTON_CANCEL;
60 }
61
GetDialogButtonLabel(ui::MessageBoxFlags::DialogButton button) const62 std::wstring ExternalProtocolDialog::GetDialogButtonLabel(
63 ui::MessageBoxFlags::DialogButton button) const {
64 if (button == ui::MessageBoxFlags::DIALOGBUTTON_OK)
65 return UTF16ToWide(
66 l10n_util::GetStringUTF16(IDS_EXTERNAL_PROTOCOL_OK_BUTTON_TEXT));
67 else
68 return UTF16ToWide(
69 l10n_util::GetStringUTF16(IDS_EXTERNAL_PROTOCOL_CANCEL_BUTTON_TEXT));
70 }
71
GetWindowTitle() const72 std::wstring ExternalProtocolDialog::GetWindowTitle() const {
73 return UTF16ToWide(l10n_util::GetStringUTF16(IDS_EXTERNAL_PROTOCOL_TITLE));
74 }
75
DeleteDelegate()76 void ExternalProtocolDialog::DeleteDelegate() {
77 delete this;
78 }
79
Cancel()80 bool ExternalProtocolDialog::Cancel() {
81 // We also get called back here if the user closes the dialog or presses
82 // escape. In these cases it would be preferable to ignore the state of the
83 // check box but MessageBox doesn't distinguish this from pressing the cancel
84 // button.
85 if (message_box_view_->IsCheckBoxSelected()) {
86 ExternalProtocolHandler::SetBlockState(
87 url_.scheme(), ExternalProtocolHandler::BLOCK);
88 }
89
90 // Returning true closes the dialog.
91 return true;
92 }
93
Accept()94 bool ExternalProtocolDialog::Accept() {
95 // We record how long it takes the user to accept an external protocol. If
96 // users start accepting these dialogs too quickly, we should worry about
97 // clickjacking.
98 UMA_HISTOGRAM_LONG_TIMES("clickjacking.launch_url",
99 base::TimeTicks::Now() - creation_time_);
100
101 if (message_box_view_->IsCheckBoxSelected()) {
102 ExternalProtocolHandler::SetBlockState(
103 url_.scheme(), ExternalProtocolHandler::DONT_BLOCK);
104 }
105
106 ExternalProtocolHandler::LaunchUrlWithoutSecurityCheck(url_);
107 // Returning true closes the dialog.
108 return true;
109 }
110
GetContentsView()111 views::View* ExternalProtocolDialog::GetContentsView() {
112 return message_box_view_;
113 }
114
115 ///////////////////////////////////////////////////////////////////////////////
116 // ExternalProtocolDialog, private:
117
ExternalProtocolDialog(TabContents * tab_contents,const GURL & url,const std::wstring & command)118 ExternalProtocolDialog::ExternalProtocolDialog(TabContents* tab_contents,
119 const GURL& url,
120 const std::wstring& command)
121 : tab_contents_(tab_contents),
122 url_(url),
123 creation_time_(base::TimeTicks::Now()) {
124 const int kMaxUrlWithoutSchemeSize = 256;
125 const int kMaxCommandSize = 256;
126 string16 elided_url_without_scheme;
127 string16 elided_command;
128 ui::ElideString(ASCIIToUTF16(url.possibly_invalid_spec()),
129 kMaxUrlWithoutSchemeSize, &elided_url_without_scheme);
130 ui::ElideString(WideToUTF16Hack(command), kMaxCommandSize, &elided_command);
131
132 std::wstring message_text = UTF16ToWide(l10n_util::GetStringFUTF16(
133 IDS_EXTERNAL_PROTOCOL_INFORMATION,
134 ASCIIToUTF16(url.scheme() + ":"),
135 elided_url_without_scheme) + ASCIIToUTF16("\n\n"));
136
137 message_text += UTF16ToWide(l10n_util::GetStringFUTF16(
138 IDS_EXTERNAL_PROTOCOL_APPLICATION_TO_LAUNCH,
139 elided_command) + ASCIIToUTF16("\n\n"));
140
141 message_text +=
142 UTF16ToWide(l10n_util::GetStringUTF16(IDS_EXTERNAL_PROTOCOL_WARNING));
143
144 message_box_view_ = new views::MessageBoxView(
145 ui::MessageBoxFlags::kIsConfirmMessageBox,
146 message_text,
147 std::wstring(),
148 kMessageWidth);
149 message_box_view_->SetCheckBoxLabel(UTF16ToWide(
150 l10n_util::GetStringUTF16(IDS_EXTERNAL_PROTOCOL_CHECKBOX_TEXT)));
151
152 HWND root_hwnd;
153 if (tab_contents_) {
154 root_hwnd = GetAncestor(tab_contents_->GetContentNativeView(), GA_ROOT);
155 } else {
156 // Dialog is top level if we don't have a tab_contents associated with us.
157 root_hwnd = NULL;
158 }
159
160 views::Window::CreateChromeWindow(root_hwnd, gfx::Rect(), this)->Show();
161 }
162
163 // static
GetApplicationForProtocol(const GURL & url)164 std::wstring ExternalProtocolDialog::GetApplicationForProtocol(
165 const GURL& url) {
166 // We shouldn't be accessing the registry from the UI thread, since it can go
167 // to disk. http://crbug.com/61996
168 base::ThreadRestrictions::ScopedAllowIO allow_io;
169
170 std::wstring url_spec = ASCIIToWide(url.possibly_invalid_spec());
171 std::wstring cmd_key_path =
172 ASCIIToWide(url.scheme() + "\\shell\\open\\command");
173 base::win::RegKey cmd_key(HKEY_CLASSES_ROOT, cmd_key_path.c_str(), KEY_READ);
174 size_t split_offset = url_spec.find(L':');
175 if (split_offset == std::wstring::npos)
176 return std::wstring();
177 std::wstring parameters = url_spec.substr(split_offset + 1,
178 url_spec.length() - 1);
179 std::wstring application_to_launch;
180 if (cmd_key.ReadValue(NULL, &application_to_launch) == ERROR_SUCCESS) {
181 ReplaceSubstringsAfterOffset(&application_to_launch, 0, L"%1", parameters);
182 return application_to_launch;
183 } else {
184 return std::wstring();
185 }
186 }
187