1 // Copyright (c) 2011 The Chromium Authors. All rights reserved. 2 // Use of this source code is governed by a BSD-style license that can be 3 // found in the LICENSE file. 4 5 #include "chrome/browser/ui/views/external_protocol_dialog.h" 6 7 #include "base/metrics/histogram.h" 8 #include "base/string_util.h" 9 #include "base/threading/thread.h" 10 #include "base/threading/thread_restrictions.h" 11 #include "base/utf_string_conversions.h" 12 #include "base/win/registry.h" 13 #include "chrome/browser/external_protocol_handler.h" 14 #include "chrome/browser/tab_contents/tab_util.h" 15 #include "content/browser/tab_contents/tab_contents.h" 16 #include "grit/chromium_strings.h" 17 #include "grit/generated_resources.h" 18 #include "ui/base/l10n/l10n_util.h" 19 #include "ui/base/message_box_flags.h" 20 #include "ui/base/text/text_elider.h" 21 #include "views/controls/message_box_view.h" 22 #include "views/window/window.h" 23 24 namespace { 25 26 const int kMessageWidth = 400; 27 28 } // namespace 29 30 /////////////////////////////////////////////////////////////////////////////// 31 // ExternalProtocolHandler 32 33 // static 34 void ExternalProtocolHandler::RunExternalProtocolDialog( 35 const GURL& url, int render_process_host_id, int routing_id) { 36 std::wstring command = 37 ExternalProtocolDialog::GetApplicationForProtocol(url); 38 if (command.empty()) { 39 // ShellExecute won't do anything. Don't bother warning the user. 40 return; 41 } 42 TabContents* tab_contents = tab_util::GetTabContentsByID( 43 render_process_host_id, routing_id); 44 DCHECK(tab_contents); 45 ExternalProtocolDialog* handler = 46 new ExternalProtocolDialog(tab_contents, url, command); 47 } 48 49 /////////////////////////////////////////////////////////////////////////////// 50 // ExternalProtocolDialog 51 52 ExternalProtocolDialog::~ExternalProtocolDialog() { 53 } 54 55 ////////////////////////////////////////////////////////////////////////////// 56 // ExternalProtocolDialog, views::DialogDelegate implementation: 57 58 int ExternalProtocolDialog::GetDefaultDialogButton() const { 59 return ui::MessageBoxFlags::DIALOGBUTTON_CANCEL; 60 } 61 62 std::wstring ExternalProtocolDialog::GetDialogButtonLabel( 63 ui::MessageBoxFlags::DialogButton button) const { 64 if (button == ui::MessageBoxFlags::DIALOGBUTTON_OK) 65 return UTF16ToWide( 66 l10n_util::GetStringUTF16(IDS_EXTERNAL_PROTOCOL_OK_BUTTON_TEXT)); 67 else 68 return UTF16ToWide( 69 l10n_util::GetStringUTF16(IDS_EXTERNAL_PROTOCOL_CANCEL_BUTTON_TEXT)); 70 } 71 72 std::wstring ExternalProtocolDialog::GetWindowTitle() const { 73 return UTF16ToWide(l10n_util::GetStringUTF16(IDS_EXTERNAL_PROTOCOL_TITLE)); 74 } 75 76 void ExternalProtocolDialog::DeleteDelegate() { 77 delete this; 78 } 79 80 bool ExternalProtocolDialog::Cancel() { 81 // We also get called back here if the user closes the dialog or presses 82 // escape. In these cases it would be preferable to ignore the state of the 83 // check box but MessageBox doesn't distinguish this from pressing the cancel 84 // button. 85 if (message_box_view_->IsCheckBoxSelected()) { 86 ExternalProtocolHandler::SetBlockState( 87 url_.scheme(), ExternalProtocolHandler::BLOCK); 88 } 89 90 // Returning true closes the dialog. 91 return true; 92 } 93 94 bool ExternalProtocolDialog::Accept() { 95 // We record how long it takes the user to accept an external protocol. If 96 // users start accepting these dialogs too quickly, we should worry about 97 // clickjacking. 98 UMA_HISTOGRAM_LONG_TIMES("clickjacking.launch_url", 99 base::TimeTicks::Now() - creation_time_); 100 101 if (message_box_view_->IsCheckBoxSelected()) { 102 ExternalProtocolHandler::SetBlockState( 103 url_.scheme(), ExternalProtocolHandler::DONT_BLOCK); 104 } 105 106 ExternalProtocolHandler::LaunchUrlWithoutSecurityCheck(url_); 107 // Returning true closes the dialog. 108 return true; 109 } 110 111 views::View* ExternalProtocolDialog::GetContentsView() { 112 return message_box_view_; 113 } 114 115 /////////////////////////////////////////////////////////////////////////////// 116 // ExternalProtocolDialog, private: 117 118 ExternalProtocolDialog::ExternalProtocolDialog(TabContents* tab_contents, 119 const GURL& url, 120 const std::wstring& command) 121 : tab_contents_(tab_contents), 122 url_(url), 123 creation_time_(base::TimeTicks::Now()) { 124 const int kMaxUrlWithoutSchemeSize = 256; 125 const int kMaxCommandSize = 256; 126 string16 elided_url_without_scheme; 127 string16 elided_command; 128 ui::ElideString(ASCIIToUTF16(url.possibly_invalid_spec()), 129 kMaxUrlWithoutSchemeSize, &elided_url_without_scheme); 130 ui::ElideString(WideToUTF16Hack(command), kMaxCommandSize, &elided_command); 131 132 std::wstring message_text = UTF16ToWide(l10n_util::GetStringFUTF16( 133 IDS_EXTERNAL_PROTOCOL_INFORMATION, 134 ASCIIToUTF16(url.scheme() + ":"), 135 elided_url_without_scheme) + ASCIIToUTF16("\n\n")); 136 137 message_text += UTF16ToWide(l10n_util::GetStringFUTF16( 138 IDS_EXTERNAL_PROTOCOL_APPLICATION_TO_LAUNCH, 139 elided_command) + ASCIIToUTF16("\n\n")); 140 141 message_text += 142 UTF16ToWide(l10n_util::GetStringUTF16(IDS_EXTERNAL_PROTOCOL_WARNING)); 143 144 message_box_view_ = new views::MessageBoxView( 145 ui::MessageBoxFlags::kIsConfirmMessageBox, 146 message_text, 147 std::wstring(), 148 kMessageWidth); 149 message_box_view_->SetCheckBoxLabel(UTF16ToWide( 150 l10n_util::GetStringUTF16(IDS_EXTERNAL_PROTOCOL_CHECKBOX_TEXT))); 151 152 HWND root_hwnd; 153 if (tab_contents_) { 154 root_hwnd = GetAncestor(tab_contents_->GetContentNativeView(), GA_ROOT); 155 } else { 156 // Dialog is top level if we don't have a tab_contents associated with us. 157 root_hwnd = NULL; 158 } 159 160 views::Window::CreateChromeWindow(root_hwnd, gfx::Rect(), this)->Show(); 161 } 162 163 // static 164 std::wstring ExternalProtocolDialog::GetApplicationForProtocol( 165 const GURL& url) { 166 // We shouldn't be accessing the registry from the UI thread, since it can go 167 // to disk. http://crbug.com/61996 168 base::ThreadRestrictions::ScopedAllowIO allow_io; 169 170 std::wstring url_spec = ASCIIToWide(url.possibly_invalid_spec()); 171 std::wstring cmd_key_path = 172 ASCIIToWide(url.scheme() + "\\shell\\open\\command"); 173 base::win::RegKey cmd_key(HKEY_CLASSES_ROOT, cmd_key_path.c_str(), KEY_READ); 174 size_t split_offset = url_spec.find(L':'); 175 if (split_offset == std::wstring::npos) 176 return std::wstring(); 177 std::wstring parameters = url_spec.substr(split_offset + 1, 178 url_spec.length() - 1); 179 std::wstring application_to_launch; 180 if (cmd_key.ReadValue(NULL, &application_to_launch) == ERROR_SUCCESS) { 181 ReplaceSubstringsAfterOffset(&application_to_launch, 0, L"%1", parameters); 182 return application_to_launch; 183 } else { 184 return std::wstring(); 185 } 186 } 187