• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1// Copyright (c) 2011 The Chromium Authors. All rights reserved.
2// Use of this source code is governed by a BSD-style license that can be
3// found in the LICENSE file.
4
5/**
6 * HSTS is HTTPS Strict Transport Security: a way for sites to elect to always
7 * use HTTPS. See http://dev.chromium.org/sts
8 *
9 * This UI allows a user to query and update the browser's list of HSTS domains.
10
11 *  @constructor
12 */
13function HSTSView(mainBoxId, queryInputId, formId, queryOutputDivId,
14                  addInputId, addFormId, addCheckId, addPinsId,
15                  deleteInputId, deleteFormId) {
16  DivView.call(this, mainBoxId);
17
18  this.queryInput_ = document.getElementById(queryInputId);
19  this.addCheck_ = document.getElementById(addCheckId);
20  this.addInput_ = document.getElementById(addInputId);
21  this.addPins_ = document.getElementById(addPinsId);
22  this.deleteInput_ = document.getElementById(deleteInputId);
23  this.queryOutputDiv_ = document.getElementById(queryOutputDivId);
24
25  var form = document.getElementById(formId);
26  form.addEventListener('submit', this.onSubmitQuery_.bind(this), false);
27  form = document.getElementById(addFormId);
28  form.addEventListener('submit', this.onSubmitAdd_.bind(this), false);
29  form = document.getElementById(deleteFormId);
30  form.addEventListener('submit', this.onSubmitDelete_.bind(this), false);
31
32  g_browser.addHSTSObserver(this);
33}
34
35inherits(HSTSView, DivView);
36
37HSTSView.prototype.onSubmitQuery_ = function(event) {
38  g_browser.sendHSTSQuery(this.queryInput_.value);
39  event.preventDefault();
40};
41
42HSTSView.prototype.onSubmitAdd_ = function(event) {
43  g_browser.sendHSTSAdd(this.addInput_.value,
44                        this.addCheck_.checked,
45                        this.addPins_.value);
46  g_browser.sendHSTSQuery(this.addInput_.value);
47  this.queryInput_.value = this.addInput_.value;
48  this.addCheck_.checked = false;
49  this.addInput_.value = '';
50  this.addPins_.value = '';
51  event.preventDefault();
52};
53
54HSTSView.prototype.onSubmitDelete_ = function(event) {
55  g_browser.sendHSTSDelete(this.deleteInput_.value);
56  this.deleteInput_.value = '';
57  event.preventDefault();
58};
59
60function hstsModeToString(m) {
61  if (m == 0) {
62    return 'STRICT';
63  } else if (m == 1) {
64    return 'OPPORTUNISTIC';
65  } else if (m == 2) {
66    return 'SPDY';
67  } else {
68    return 'UNKNOWN';
69  }
70}
71
72function yellowFade(element) {
73  element.style.webkitTransitionProperty = 'background-color';
74  element.style.webkitTransitionDuration = '0';
75  element.style.backgroundColor = '#fffccf';
76  setTimeout(function() {
77    element.style.webkitTransitionDuration = '1000ms';
78    element.style.backgroundColor = '#fff';
79  }, 0);
80}
81
82HSTSView.prototype.onHSTSQueryResult = function(result) {
83  if (result.error != undefined) {
84    this.queryOutputDiv_.innerHTML = '';
85    s = addNode(this.queryOutputDiv_, 'span');
86    s.innerText = result.error;
87    s.style.color = 'red';
88    yellowFade(this.queryOutputDiv_);
89    return;
90  }
91
92  if (result.result == false) {
93    this.queryOutputDiv_.innerHTML = '<b>Not found</b>';
94    yellowFade(this.queryOutputDiv_);
95    return;
96  }
97
98  this.queryOutputDiv_.innerHTML = '';
99
100  s = addNode(this.queryOutputDiv_, 'span');
101  s.innerHTML = '<b>Found</b>: mode: ';
102
103  t = addNode(this.queryOutputDiv_, 'tt');
104  t.innerText = hstsModeToString(result.mode);
105
106  addTextNode(this.queryOutputDiv_, ' include_subdomains:');
107
108  t = addNode(this.queryOutputDiv_, 'tt');
109  t.innerText = result.subdomains;
110
111  addTextNode(this.queryOutputDiv_, ' domain:');
112
113  t = addNode(this.queryOutputDiv_, 'tt');
114  t.innerText = result.domain;
115
116  addTextNode(this.queryOutputDiv_, ' is_preloaded:');
117
118  t = addNode(this.queryOutputDiv_, 'tt');
119  t.innerText = result.preloaded;
120
121  addTextNode(this.queryOutputDiv_, ' pubkey_hashes:');
122
123  t = addNode(this.queryOutputDiv_, 'tt');
124  t.innerText = result.public_key_hashes;
125
126  yellowFade(this.queryOutputDiv_);
127}
128