src/chrome/browser/renderer_host/chrome_resource_dispatcher_host_delegate.cc

   1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
   2 // Use of this source code is governed by a BSD-style license that can be
   3 // found in the LICENSE file.
   4
   5 #include "chrome/browser/renderer_host/chrome_resource_dispatcher_host_delegate.h"
   6
   7 #include <string>
   8 #include <vector>
   9
  10 #include "base/base64.h"
  11 #include "base/guid.h"
  12 #include "base/logging.h"
  13 #include "chrome/browser/browser_process.h"
  14 #include "chrome/browser/chrome_notification_types.h"
  15 #include "chrome/browser/component_updater/component_updater_service.h"
  16 #include "chrome/browser/component_updater/pnacl/pnacl_component_installer.h"
  17 #include "chrome/browser/content_settings/host_content_settings_map.h"
  18 #include "chrome/browser/download/download_request_limiter.h"
  19 #include "chrome/browser/download/download_resource_throttle.h"
  20 #include "chrome/browser/extensions/api/streams_private/streams_private_api.h"
  21 #include "chrome/browser/extensions/extension_renderer_state.h"
  22 #include "chrome/browser/extensions/user_script_listener.h"
  23 #include "chrome/browser/metrics/variations/variations_http_header_provider.h"
  24 #include "chrome/browser/prefetch/prefetch.h"
  25 #include "chrome/browser/prerender/prerender_manager.h"
  26 #include "chrome/browser/prerender/prerender_manager_factory.h"
  27 #include "chrome/browser/prerender/prerender_pending_swap_throttle.h"
  28 #include "chrome/browser/prerender/prerender_resource_throttle.h"
  29 #include "chrome/browser/prerender/prerender_tracker.h"
  30 #include "chrome/browser/prerender/prerender_util.h"
  31 #include "chrome/browser/profiles/profile.h"
  32 #include "chrome/browser/profiles/profile_io_data.h"
  33 #include "chrome/browser/renderer_host/safe_browsing_resource_throttle_factory.h"
  34 #include "chrome/browser/safe_browsing/safe_browsing_service.h"
  35 #include "chrome/browser/signin/signin_header_helper.h"
  36 #include "chrome/browser/tab_contents/tab_util.h"
  37 #include "chrome/browser/ui/login/login_prompt.h"
  38 #include "chrome/browser/ui/sync/one_click_signin_helper.h"
  39 #include "chrome/common/extensions/extension_constants.h"
  40 #include "chrome/common/extensions/manifest_handlers/mime_types_handler.h"
  41 #include "chrome/common/render_messages.h"
  42 #include "chrome/common/url_constants.h"
  43 #include "components/google/core/browser/google_util.h"
  44 #include "content/public/browser/browser_thread.h"
  45 #include "content/public/browser/notification_service.h"
  46 #include "content/public/browser/render_process_host.h"
  47 #include "content/public/browser/render_view_host.h"
  48 #include "content/public/browser/resource_context.h"
  49 #include "content/public/browser/resource_dispatcher_host.h"
  50 #include "content/public/browser/resource_request_info.h"
  51 #include "content/public/browser/stream_handle.h"
  52 #include "content/public/browser/web_contents.h"
  53 #include "content/public/common/resource_response.h"
  54 #include "extensions/browser/info_map.h"
  55 #include "extensions/common/constants.h"
  56 #include "extensions/common/user_script.h"
  57 #include "net/base/load_flags.h"
  58 #include "net/base/load_timing_info.h"
  59 #include "net/base/request_priority.h"
  60 #include "net/http/http_response_headers.h"
  61 #include "net/url_request/url_request.h"
  62
  63 #if defined(ENABLE_CONFIGURATION_POLICY)
  64 #include "components/policy/core/common/cloud/policy_header_io_helper.h"
  65 #endif
  66
  67 #if defined(ENABLE_MANAGED_USERS)
  68 #include "chrome/browser/supervised_user/supervised_user_resource_throttle.h"
  69 #endif
  70
  71 #if defined(USE_SYSTEM_PROTOBUF)
  72 #include <google/protobuf/repeated_field.h>
  73 #else
  74 #include "third_party/protobuf/src/google/protobuf/repeated_field.h"
  75 #endif
  76
  77 #if defined(OS_ANDROID)
  78 #include "chrome/browser/android/intercept_download_resource_throttle.h"
  79 #include "chrome/browser/ui/android/infobars/auto_login_prompter.h"
  80 #include "components/navigation_interception/intercept_navigation_delegate.h"
  81 #else
  82 #include "chrome/browser/apps/app_url_redirector.h"
  83 #include "chrome/browser/apps/ephemeral_app_throttle.h"
  84 #endif
  85
  86 #if defined(OS_CHROMEOS)
  87 #include "chrome/browser/chromeos/login/signin/merge_session_throttle.h"
  88 // TODO(oshima): Enable this for other platforms.
  89 #include "chrome/browser/renderer_host/offline_resource_throttle.h"
  90 #endif
  91
  92 using content::BrowserThread;
  93 using content::RenderViewHost;
  94 using content::ResourceDispatcherHostLoginDelegate;
  95 using content::ResourceRequestInfo;
  96 using extensions::Extension;
  97 using extensions::StreamsPrivateAPI;
  98
  99 #if defined(OS_ANDROID)
 100 using navigation_interception::InterceptNavigationDelegate;
 101 #endif
 102
 103 namespace {
 104
 105 ExternalProtocolHandler::Delegate* g_external_protocol_handler_delegate = NULL;
 106
 107 void NotifyDownloadInitiatedOnUI(int render_process_id, int render_view_id) {
 108   RenderViewHost* rvh = RenderViewHost::FromID(render_process_id,
 109                                                render_view_id);
 110   if (!rvh)
 111     return;
 112
 113   content::NotificationService::current()->Notify(
 114       chrome::NOTIFICATION_DOWNLOAD_INITIATED,
 115       content::Source<RenderViewHost>(rvh),
 116       content::NotificationService::NoDetails());
 117 }
 118
 119 prerender::PrerenderManager* GetPrerenderManager(int render_process_id,
 120                                                  int render_view_id) {
 121   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::UI));
 122
 123   content::WebContents* web_contents =
 124       tab_util::GetWebContentsByID(render_process_id, render_view_id);
 125   if (!web_contents)
 126     return NULL;
 127
 128   content::BrowserContext* browser_context = web_contents->GetBrowserContext();
 129   if (!browser_context)
 130     return NULL;
 131
 132   Profile* profile = Profile::FromBrowserContext(browser_context);
 133   if (!profile)
 134     return NULL;
 135
 136   return prerender::PrerenderManagerFactory::GetForProfile(profile);
 137 }
 138
 139 void UpdatePrerenderNetworkBytesCallback(int render_process_id,
 140                                          int render_view_id,
 141                                          int64 bytes) {
 142   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::UI));
 143
 144   content::WebContents* web_contents =
 145       tab_util::GetWebContentsByID(render_process_id, render_view_id);
 146   // PrerenderContents::FromWebContents handles the NULL case.
 147   prerender::PrerenderContents* prerender_contents =
 148       prerender::PrerenderContents::FromWebContents(web_contents);
 149
 150   if (prerender_contents)
 151     prerender_contents->AddNetworkBytes(bytes);
 152
 153   prerender::PrerenderManager* prerender_manager =
 154       GetPrerenderManager(render_process_id, render_view_id);
 155   if (prerender_manager)
 156     prerender_manager->AddProfileNetworkBytesIfEnabled(bytes);
 157 }
 158
 159 #if !defined(OS_ANDROID)
 160 void SendExecuteMimeTypeHandlerEvent(scoped_ptr<content::StreamHandle> stream,
 161                                      int64 expected_content_size,
 162                                      int render_process_id,
 163                                      int render_view_id,
 164                                      const std::string& extension_id,
 165                                      const std::string& view_id) {
 166   DCHECK(content::BrowserThread::CurrentlyOn(content::BrowserThread::UI));
 167
 168   content::WebContents* web_contents =
 169       tab_util::GetWebContentsByID(render_process_id, render_view_id);
 170   if (!web_contents)
 171     return;
 172
 173   // If the request was for a prerender, abort the prerender and do not
 174   // continue.
 175   prerender::PrerenderContents* prerender_contents =
 176       prerender::PrerenderContents::FromWebContents(web_contents);
 177   if (prerender_contents) {
 178     prerender_contents->Destroy(prerender::FINAL_STATUS_DOWNLOAD);
 179     return;
 180   }
 181
 182   Profile* profile =
 183       Profile::FromBrowserContext(web_contents->GetBrowserContext());
 184
 185   StreamsPrivateAPI* streams_private = StreamsPrivateAPI::Get(profile);
 186   if (!streams_private)
 187     return;
 188   streams_private->ExecuteMimeTypeHandler(
 189       extension_id, web_contents, stream.Pass(), view_id,
 190       expected_content_size);
 191 }
 192
 193 void LaunchURL(const GURL& url, int render_process_id, int render_view_id) {
 194   // If there is no longer a WebContents, the request may have raced with tab
 195   // closing. Don't fire the external request. (It may have been a prerender.)
 196   content::WebContents* web_contents =
 197       tab_util::GetWebContentsByID(render_process_id, render_view_id);
 198   if (!web_contents)
 199     return;
 200
 201   // Do not launch external requests attached to unswapped prerenders.
 202   prerender::PrerenderContents* prerender_contents =
 203       prerender::PrerenderContents::FromWebContents(web_contents);
 204   if (prerender_contents) {
 205     prerender_contents->Destroy(prerender::FINAL_STATUS_UNSUPPORTED_SCHEME);
 206     prerender::ReportPrerenderExternalURL();
 207     return;
 208   }
 209
 210   ExternalProtocolHandler::LaunchUrlWithDelegate(
 211       url,
 212       render_process_id,
 213       render_view_id,
 214       g_external_protocol_handler_delegate);
 215 }
 216 #endif  // !defined(OS_ANDROID)
 217
 218 void AppendComponentUpdaterThrottles(
 219     net::URLRequest* request,
 220     content::ResourceContext* resource_context,
 221     ResourceType::Type resource_type,
 222     ScopedVector<content::ResourceThrottle>* throttles) {
 223   const char* crx_id = NULL;
 224   component_updater::ComponentUpdateService* cus =
 225       g_browser_process->component_updater();
 226   if (!cus)
 227     return;
 228   // Check for PNaCl pexe request.
 229   if (resource_type == ResourceType::OBJECT) {
 230     const net::HttpRequestHeaders& headers = request->extra_request_headers();
 231     std::string accept_headers;
 232     if (headers.GetHeader("Accept", &accept_headers)) {
 233       if (accept_headers.find("application/x-pnacl") != std::string::npos &&
 234           pnacl::NeedsOnDemandUpdate())
 235         crx_id = "hnimpnehoodheedghdeeijklkeaacbdc";
 236     }
 237   }
 238
 239   if (crx_id) {
 240     // We got a component we need to install, so throttle the resource
 241     // until the component is installed.
 242     throttles->push_back(
 243         cus->GetOnDemandUpdater().GetOnDemandResourceThrottle(request, crx_id));
 244   }
 245 }
 246
 247 }  // end namespace
 248
 249 ChromeResourceDispatcherHostDelegate::ChromeResourceDispatcherHostDelegate(
 250     prerender::PrerenderTracker* prerender_tracker)
 251     : download_request_limiter_(g_browser_process->download_request_limiter()),
 252       safe_browsing_(g_browser_process->safe_browsing_service()),
 253       user_script_listener_(new extensions::UserScriptListener()),
 254       prerender_tracker_(prerender_tracker) {
 255 }
 256
 257 ChromeResourceDispatcherHostDelegate::~ChromeResourceDispatcherHostDelegate() {
 258   CHECK(stream_target_info_.empty());
 259 }
 260
 261 bool ChromeResourceDispatcherHostDelegate::ShouldBeginRequest(
 262     int child_id,
 263     int route_id,
 264     const std::string& method,
 265     const GURL& url,
 266     ResourceType::Type resource_type,
 267     content::ResourceContext* resource_context) {
 268   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
 269
 270   // Handle a PREFETCH resource type. If prefetch is disabled, squelch the
 271   // request.  Otherwise, do a normal request to warm the cache.
 272   if (resource_type == ResourceType::PREFETCH) {
 273     // All PREFETCH requests should be GETs, but be defensive about it.
 274     if (method != "GET")
 275       return false;
 276
 277     // If prefetch is disabled, kill the request.
 278     if (!prefetch::IsPrefetchEnabled(resource_context))
 279       return false;
 280   }
 281
 282   return true;
 283 }
 284
 285 void ChromeResourceDispatcherHostDelegate::RequestBeginning(
 286     net::URLRequest* request,
 287     content::ResourceContext* resource_context,
 288     appcache::AppCacheService* appcache_service,
 289     ResourceType::Type resource_type,
 290     int child_id,
 291     int route_id,
 292     ScopedVector<content::ResourceThrottle>* throttles) {
 293   const ResourceRequestInfo* info = ResourceRequestInfo::ForRequest(request);
 294   bool is_prerendering =
 295       info->GetVisibilityState() == blink::WebPageVisibilityStatePrerender;
 296   if (is_prerendering) {
 297     // Requests with the IGNORE_LIMITS flag set (i.e., sync XHRs)
 298     // should remain at MAXIMUM_PRIORITY.
 299     if (request->load_flags() & net::LOAD_IGNORE_LIMITS) {
 300       DCHECK_EQ(request->priority(), net::MAXIMUM_PRIORITY);
 301     } else {
 302       request->SetPriority(net::IDLE);
 303     }
 304   }
 305
 306   ProfileIOData* io_data = ProfileIOData::FromResourceContext(
 307       resource_context);
 308
 309 #if defined(OS_ANDROID)
 310   // TODO(davidben): This is insufficient to integrate with prerender properly.
 311   // https://crbug.com/370595
 312   if (resource_type == ResourceType::MAIN_FRAME && !is_prerendering) {
 313     throttles->push_back(
 314         InterceptNavigationDelegate::CreateThrottleFor(request));
 315   }
 316 #else
 317   if (resource_type == ResourceType::MAIN_FRAME) {
 318     // Redirect some navigations to apps that have registered matching URL
 319     // handlers ('url_handlers' in the manifest).
 320     content::ResourceThrottle* url_to_app_throttle =
 321         AppUrlRedirector::MaybeCreateThrottleFor(request, io_data);
 322     if (url_to_app_throttle)
 323       throttles->push_back(url_to_app_throttle);
 324
 325     if (!is_prerendering) {
 326       // Experimental: Launch ephemeral apps from search results.
 327       content::ResourceThrottle* ephemeral_app_throttle =
 328           EphemeralAppThrottle::MaybeCreateThrottleForLaunch(
 329               request, io_data);
 330       if (ephemeral_app_throttle)
 331         throttles->push_back(ephemeral_app_throttle);
 332     }
 333   }
 334 #endif
 335
 336 #if defined(OS_CHROMEOS)
 337   // Check if we need to add offline throttle. This should be done only
 338   // for main frames.
 339   if (resource_type == ResourceType::MAIN_FRAME) {
 340     // We check offline first, then check safe browsing so that we still can
 341     // block unsafe site after we remove offline page.
 342     throttles->push_back(new OfflineResourceThrottle(request,
 343                                                      appcache_service));
 344   }
 345
 346   // Check if we need to add merge session throttle. This throttle will postpone
 347   // loading of main frames and XHR request.
 348   if (resource_type == ResourceType::MAIN_FRAME ||
 349       resource_type == ResourceType::XHR) {
 350     // Add interstitial page while merge session process (cookie
 351     // reconstruction from OAuth2 refresh token in ChromeOS login) is still in
 352     // progress while we are attempting to load a google property.
 353     if (!MergeSessionThrottle::AreAllSessionMergedAlready() &&
 354         request->url().SchemeIsHTTPOrHTTPS()) {
 355       throttles->push_back(new MergeSessionThrottle(request, resource_type));
 356     }
 357   }
 358 #endif
 359
 360   // Don't attempt to append headers to requests that have already started.
 361   // TODO(stevet): Remove this once the request ordering issues are resolved
 362   // in crbug.com/128048.
 363   if (!request->is_pending()) {
 364     net::HttpRequestHeaders headers;
 365     headers.CopyFrom(request->extra_request_headers());
 366     bool is_off_the_record = io_data->IsOffTheRecord();
 367     chrome_variations::VariationsHttpHeaderProvider::GetInstance()->
 368         AppendHeaders(request->url(),
 369                       is_off_the_record,
 370                       !is_off_the_record &&
 371                           io_data->GetMetricsEnabledStateOnIOThread(),
 372                       &headers);
 373     request->SetExtraRequestHeaders(headers);
 374   }
 375
 376 #if defined(ENABLE_ONE_CLICK_SIGNIN)
 377   AppendChromeSyncGaiaHeader(request, resource_context);
 378 #endif
 379
 380 #if defined(ENABLE_CONFIGURATION_POLICY)
 381   if (io_data->policy_header_helper())
 382     io_data->policy_header_helper()->AddPolicyHeaders(request->url(), request);
 383 #endif
 384
 385   signin::AppendMirrorRequestHeaderIfPossible(
 386       request, GURL() /* redirect_url */,
 387       io_data, info->GetChildID(), info->GetRouteID());
 388
 389   AppendStandardResourceThrottles(request,
 390                                   resource_context,
 391                                   resource_type,
 392                                   throttles);
 393   if (!is_prerendering) {
 394     AppendComponentUpdaterThrottles(request,
 395                                     resource_context,
 396                                     resource_type,
 397                                     throttles);
 398   }
 399 }
 400
 401 void ChromeResourceDispatcherHostDelegate::DownloadStarting(
 402     net::URLRequest* request,
 403     content::ResourceContext* resource_context,
 404     int child_id,
 405     int route_id,
 406     int request_id,
 407     bool is_content_initiated,
 408     bool must_download,
 409     ScopedVector<content::ResourceThrottle>* throttles) {
 410   BrowserThread::PostTask(
 411       BrowserThread::UI, FROM_HERE,
 412       base::Bind(&NotifyDownloadInitiatedOnUI, child_id, route_id));
 413
 414   // If it's from the web, we don't trust it, so we push the throttle on.
 415   if (is_content_initiated) {
 416     throttles->push_back(
 417         new DownloadResourceThrottle(download_request_limiter_.get(),
 418                                      child_id,
 419                                      route_id,
 420                                      request->url(),
 421                                      request->method()));
 422 #if defined(OS_ANDROID)
 423     throttles->push_back(
 424         new chrome::InterceptDownloadResourceThrottle(
 425             request, child_id, route_id, request_id));
 426 #endif
 427   }
 428
 429   // If this isn't a new request, we've seen this before and added the standard
 430   //  resource throttles already so no need to add it again.
 431   if (!request->is_pending()) {
 432     AppendStandardResourceThrottles(request,
 433                                     resource_context,
 434                                     ResourceType::MAIN_FRAME,
 435                                     throttles);
 436   }
 437 }
 438
 439 ResourceDispatcherHostLoginDelegate*
 440     ChromeResourceDispatcherHostDelegate::CreateLoginDelegate(
 441         net::AuthChallengeInfo* auth_info, net::URLRequest* request) {
 442   return CreateLoginPrompt(auth_info, request);
 443 }
 444
 445 bool ChromeResourceDispatcherHostDelegate::HandleExternalProtocol(
 446     const GURL& url,
 447     int child_id,
 448     int route_id) {
 449 #if defined(OS_ANDROID)
 450   // Android use a resource throttle to handle external as well as internal
 451   // protocols.
 452   return false;
 453 #else
 454
 455   ExtensionRendererState::WebViewInfo info;
 456   if (ExtensionRendererState::GetInstance()->GetWebViewInfo(child_id,
 457                                                             route_id,
 458                                                             &info)) {
 459     return false;
 460   }
 461
 462   BrowserThread::PostTask(BrowserThread::UI,
 463                           FROM_HERE,
 464                           base::Bind(&LaunchURL, url, child_id, route_id));
 465   return true;
 466 #endif
 467 }
 468
 469 void ChromeResourceDispatcherHostDelegate::AppendStandardResourceThrottles(
 470     net::URLRequest* request,
 471     content::ResourceContext* resource_context,
 472     ResourceType::Type resource_type,
 473     ScopedVector<content::ResourceThrottle>* throttles) {
 474   ProfileIOData* io_data = ProfileIOData::FromResourceContext(resource_context);
 475 #if defined(FULL_SAFE_BROWSING) || defined(MOBILE_SAFE_BROWSING)
 476   // Insert safe browsing at the front of the list, so it gets to decide on
 477   // policies first.
 478   if (io_data->safe_browsing_enabled()->GetValue()
 479 #if defined(OS_ANDROID)
 480       || io_data->data_reduction_proxy_enabled()->GetValue()
 481 #endif
 482   ) {
 483     bool is_subresource_request = resource_type != ResourceType::MAIN_FRAME;
 484     content::ResourceThrottle* throttle =
 485         SafeBrowsingResourceThrottleFactory::Create(request,
 486                                                     resource_context,
 487                                                     is_subresource_request,
 488                                                     safe_browsing_.get());
 489     if (throttle)
 490       throttles->push_back(throttle);
 491   }
 492 #endif
 493
 494 #if defined(ENABLE_MANAGED_USERS)
 495   bool is_subresource_request = resource_type != ResourceType::MAIN_FRAME;
 496   throttles->push_back(new SupervisedUserResourceThrottle(
 497         request, !is_subresource_request,
 498         io_data->supervised_user_url_filter()));
 499 #endif
 500
 501   content::ResourceThrottle* throttle =
 502       user_script_listener_->CreateResourceThrottle(request->url(),
 503                                                     resource_type);
 504   if (throttle)
 505     throttles->push_back(throttle);
 506
 507   const ResourceRequestInfo* info = ResourceRequestInfo::ForRequest(request);
 508   if (info->GetVisibilityState() == blink::WebPageVisibilityStatePrerender) {
 509     throttles->push_back(new prerender::PrerenderResourceThrottle(request));
 510   }
 511   if (prerender_tracker_->IsPendingSwapRequestOnIOThread(
 512           info->GetChildID(), info->GetRenderFrameID(), request->url())) {
 513     throttles->push_back(new prerender::PrerenderPendingSwapThrottle(
 514         request, prerender_tracker_));
 515   }
 516 }
 517
 518 #if defined(ENABLE_ONE_CLICK_SIGNIN)
 519 void ChromeResourceDispatcherHostDelegate::AppendChromeSyncGaiaHeader(
 520     net::URLRequest* request,
 521     content::ResourceContext* resource_context) {
 522   static const char kAllowChromeSignIn[] = "Allow-Chrome-SignIn";
 523
 524   ProfileIOData* io_data = ProfileIOData::FromResourceContext(resource_context);
 525   OneClickSigninHelper::Offer offer =
 526       OneClickSigninHelper::CanOfferOnIOThread(request, io_data);
 527   switch (offer) {
 528     case OneClickSigninHelper::CAN_OFFER:
 529       request->SetExtraRequestHeaderByName(kAllowChromeSignIn, "1", false);
 530       break;
 531     case OneClickSigninHelper::DONT_OFFER:
 532       request->RemoveRequestHeaderByName(kAllowChromeSignIn);
 533       break;
 534     case OneClickSigninHelper::IGNORE_REQUEST:
 535       break;
 536   }
 537 }
 538 #endif
 539
 540 bool ChromeResourceDispatcherHostDelegate::ShouldForceDownloadResource(
 541     const GURL& url, const std::string& mime_type) {
 542   // Special-case user scripts to get downloaded instead of viewed.
 543   return extensions::UserScript::IsURLUserScript(url, mime_type);
 544 }
 545
 546 bool ChromeResourceDispatcherHostDelegate::ShouldInterceptResourceAsStream(
 547     net::URLRequest* request,
 548     const std::string& mime_type,
 549     GURL* origin,
 550     std::string* payload) {
 551 #if !defined(OS_ANDROID)
 552   const ResourceRequestInfo* info = ResourceRequestInfo::ForRequest(request);
 553   ProfileIOData* io_data =
 554       ProfileIOData::FromResourceContext(info->GetContext());
 555   bool profile_is_off_the_record = io_data->IsOffTheRecord();
 556   const scoped_refptr<const extensions::InfoMap> extension_info_map(
 557       io_data->GetExtensionInfoMap());
 558   std::vector<std::string> whitelist = MimeTypesHandler::GetMIMETypeWhitelist();
 559   // Go through the white-listed extensions and try to use them to intercept
 560   // the URL request.
 561   for (size_t i = 0; i < whitelist.size(); ++i) {
 562     const char* extension_id = whitelist[i].c_str();
 563     const Extension* extension =
 564         extension_info_map->extensions().GetByID(extension_id);
 565     // The white-listed extension may not be installed, so we have to NULL check
 566     // |extension|.
 567     if (!extension ||
 568         (profile_is_off_the_record &&
 569          !extension_info_map->IsIncognitoEnabled(extension_id))) {
 570       continue;
 571     }
 572
 573     MimeTypesHandler* handler = MimeTypesHandler::GetHandler(extension);
 574     if (handler && handler->CanHandleMIMEType(mime_type)) {
 575       StreamTargetInfo target_info;
 576       *origin = Extension::GetBaseURLFromExtensionId(extension_id);
 577       target_info.extension_id = extension_id;
 578       if (!handler->handler_url().empty()) {
 579         target_info.view_id = base::GenerateGUID();
 580         *payload = origin->spec() + handler->handler_url() +
 581             "?id=" + target_info.view_id;
 582       }
 583       stream_target_info_[request] = target_info;
 584       return true;
 585     }
 586   }
 587 #endif
 588   return false;
 589 }
 590
 591 void ChromeResourceDispatcherHostDelegate::OnStreamCreated(
 592     net::URLRequest* request,
 593     scoped_ptr<content::StreamHandle> stream) {
 594 #if !defined(OS_ANDROID)
 595   const ResourceRequestInfo* info = ResourceRequestInfo::ForRequest(request);
 596   std::map<net::URLRequest*, StreamTargetInfo>::iterator ix =
 597       stream_target_info_.find(request);
 598   CHECK(ix != stream_target_info_.end());
 599   content::BrowserThread::PostTask(
 600       content::BrowserThread::UI, FROM_HERE,
 601       base::Bind(&SendExecuteMimeTypeHandlerEvent, base::Passed(&stream),
 602                  request->GetExpectedContentSize(),
 603                  info->GetChildID(), info->GetRouteID(),
 604                  ix->second.extension_id, ix->second.view_id));
 605   stream_target_info_.erase(request);
 606 #endif
 607 }
 608
 609 void ChromeResourceDispatcherHostDelegate::OnResponseStarted(
 610     net::URLRequest* request,
 611     content::ResourceContext* resource_context,
 612     content::ResourceResponse* response,
 613     IPC::Sender* sender) {
 614   const ResourceRequestInfo* info = ResourceRequestInfo::ForRequest(request);
 615
 616 #if defined(OS_ANDROID)
 617   // See if the response contains the X-Auto-Login header.  If so, this was
 618   // a request for a login page, and the server is allowing the browser to
 619   // suggest auto-login, if available.
 620   AutoLoginPrompter::ShowInfoBarIfPossible(request, info->GetChildID(),
 621                                            info->GetRouteID());
 622 #endif
 623
 624   ProfileIOData* io_data = ProfileIOData::FromResourceContext(resource_context);
 625
 626 #if defined(ENABLE_ONE_CLICK_SIGNIN)
 627   // See if the response contains the Google-Accounts-SignIn header.  If so,
 628   // then the user has just finished signing in, and the server is allowing the
 629   // browser to suggest connecting the user's profile to the account.
 630   OneClickSigninHelper::ShowInfoBarIfPossible(request, io_data,
 631                                               info->GetChildID(),
 632                                               info->GetRouteID());
 633 #endif
 634
 635   // See if the response contains the X-Chrome-Manage-Accounts header. If so
 636   // show the profile avatar bubble so that user can complete signin/out action
 637   // the native UI.
 638   signin::ProcessMirrorResponseHeaderIfExists(request, io_data,
 639                                               info->GetChildID(),
 640                                               info->GetRouteID());
 641
 642   // Build in additional protection for the chrome web store origin.
 643   GURL webstore_url(extension_urls::GetWebstoreLaunchURL());
 644   if (request->url().DomainIs(webstore_url.host().c_str())) {
 645     net::HttpResponseHeaders* response_headers = request->response_headers();
 646     if (!response_headers->HasHeaderValue("x-frame-options", "deny") &&
 647         !response_headers->HasHeaderValue("x-frame-options", "sameorigin")) {
 648       response_headers->RemoveHeader("x-frame-options");
 649       response_headers->AddHeader("x-frame-options: sameorigin");
 650     }
 651   }
 652
 653   // Ignores x-frame-options for the chrome signin UI.
 654   const std::string request_spec(
 655       request->first_party_for_cookies().GetOrigin().spec());
 656 #if defined(OS_CHROMEOS)
 657   if (request_spec == chrome::kChromeUIOobeURL ||
 658       request_spec == chrome::kChromeUIChromeSigninURL) {
 659 #else
 660   if (request_spec == chrome::kChromeUIChromeSigninURL) {
 661 #endif
 662     net::HttpResponseHeaders* response_headers = request->response_headers();
 663     if (response_headers && response_headers->HasHeader("x-frame-options"))
 664       response_headers->RemoveHeader("x-frame-options");
 665   }
 666
 667   prerender::URLRequestResponseStarted(request);
 668 }
 669
 670 void ChromeResourceDispatcherHostDelegate::OnRequestRedirected(
 671     const GURL& redirect_url,
 672     net::URLRequest* request,
 673     content::ResourceContext* resource_context,
 674     content::ResourceResponse* response) {
 675   ProfileIOData* io_data = ProfileIOData::FromResourceContext(resource_context);
 676   const ResourceRequestInfo* info = ResourceRequestInfo::ForRequest(request);
 677
 678 #if defined(ENABLE_ONE_CLICK_SIGNIN)
 679   // See if the response contains the Google-Accounts-SignIn header.  If so,
 680   // then the user has just finished signing in, and the server is allowing the
 681   // browser to suggest connecting the user's profile to the account.
 682   OneClickSigninHelper::ShowInfoBarIfPossible(request, io_data,
 683                                               info->GetChildID(),
 684                                               info->GetRouteID());
 685   AppendChromeSyncGaiaHeader(request, resource_context);
 686 #endif
 687
 688   // In the Mirror world, Chrome should append a X-Chrome-Connected header to
 689   // all Gaia requests from a connected profile so Gaia could return a 204
 690   // response and let Chrome handle the action with native UI. The only
 691   // exception is requests from gaia webview, since the native profile
 692   // management UI is built on top of it.
 693   signin::AppendMirrorRequestHeaderIfPossible(request, redirect_url, io_data,
 694       info->GetChildID(), info->GetRouteID());
 695
 696 #if defined(ENABLE_CONFIGURATION_POLICY)
 697   if (io_data->policy_header_helper())
 698     io_data->policy_header_helper()->AddPolicyHeaders(redirect_url, request);
 699 #endif
 700 }
 701
 702 // Notification that a request has completed.
 703 void ChromeResourceDispatcherHostDelegate::RequestComplete(
 704     net::URLRequest* url_request) {
 705   // Jump on the UI thread and inform the prerender about the bytes.
 706   const ResourceRequestInfo* info =
 707       ResourceRequestInfo::ForRequest(url_request);
 708   if (url_request && !url_request->was_cached()) {
 709     BrowserThread::PostTask(BrowserThread::UI,
 710                             FROM_HERE,
 711                             base::Bind(&UpdatePrerenderNetworkBytesCallback,
 712                                        info->GetChildID(),
 713                                        info->GetRouteID(),
 714                                        url_request->GetTotalReceivedBytes()));
 715   }
 716 }
 717
 718 // static
 719 void ChromeResourceDispatcherHostDelegate::
 720     SetExternalProtocolHandlerDelegateForTesting(
 721     ExternalProtocolHandler::Delegate* delegate) {
 722   g_external_protocol_handler_delegate = delegate;
 723 }