Reland 137540 - Disable off-store extension installs by default. Also get rid of ExtensionService::…

chrome/browser/download/chrome_download_manager_delegate.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/download/chrome_download_manager_delegate.h"
 
 #include <string>
 
 #include "base/bind.h"
 #include "base/bind_helpers.h"
@@ skipping 14 matching lines @@
 #include "chrome/browser/download/download_util.h"
 #include "chrome/browser/download/save_package_file_picker.h"
 #include "chrome/browser/extensions/crx_installer.h"
 #include "chrome/browser/extensions/extension_service.h"
 #include "chrome/browser/prefs/pref_member.h"
 #include "chrome/browser/prefs/pref_service.h"
 #include "chrome/browser/profiles/profile.h"
 #include "chrome/browser/safe_browsing/safe_browsing_service.h"
 #include "chrome/common/chrome_notification_types.h"
 #include "chrome/common/chrome_paths.h"
+#include "chrome/common/extensions/extension_switch_utils.h"
 #include "chrome/common/extensions/user_script.h"
 #include "chrome/common/pref_names.h"
 #include "content/public/browser/download_item.h"
 #include "content/public/browser/download_manager.h"
 #include "content/public/browser/notification_source.h"
 #include "content/public/browser/web_contents.h"
 #include "content/public/browser/web_contents_delegate.h"
 #include "content/public/browser/web_intents_dispatcher.h"
 #include "grit/generated_resources.h"
 #include "ui/base/l10n/l10n_util.h"
@@ skipping 40 matching lines @@
 }
 
 ChromeDownloadManagerDelegate::~ChromeDownloadManagerDelegate() {
 }
 
 bool ChromeDownloadManagerDelegate::IsExtensionDownload(
     const DownloadItem* item) {
   if (item->PromptUserForSaveLocation())
     return false;
 
-  if ((item->GetMimeType() != Extension::kMimeType) &&
-      !UserScript::IsURLUserScript(item->GetURL(), item->GetMimeType())) {
+  if (item->GetMimeType() == Extension::kMimeType ||
+      UserScript::IsURLUserScript(item->GetURL(), item->GetMimeType())) {
+    return true;
+  } else {
     return false;
   }
-
-  return download_crx_util::ShouldOpenExtensionDownload(*item);
 }
 
 void ChromeDownloadManagerDelegate::SetDownloadManager(DownloadManager* dm) {
   download_manager_ = dm;
   download_history_.reset(new DownloadHistory(profile_));
   download_history_->Load(
       base::Bind(&DownloadManager::OnPersistentStoreQueryComplete,
                  base::Unretained(dm)));
 }
 
@@ skipping 135 matching lines @@
   // If there's a GData upload associated with this download, we wait until that
   // is complete before allowing the download item to complete.
   if (!gdata::GDataDownloadObserver::IsReadyToComplete(item))
     return false;
 #endif
   return true;
 }
 
 bool ChromeDownloadManagerDelegate::ShouldOpenDownload(DownloadItem* item) {
   if (IsExtensionDownload(item)) {
-    scoped_refptr<CrxInstaller> crx_installer =
-        download_crx_util::OpenChromeExtension(profile_, *item);
+    // We can open extensions if either they came from the store, or
+    // off-store-install is enabled.
+    if (extensions::switch_utils::IsOffStoreInstallEnabled() ||
+        WebstoreInstaller::GetAssociatedApproval(*item)) {
+      scoped_refptr<CrxInstaller> crx_installer =
+          download_crx_util::OpenChromeExtension(profile_, *item);
 
-    // CRX_INSTALLER_DONE will fire when the install completes.  Observe()
-    // will call DelayedDownloadOpened() on this item.  If this DownloadItem is
-    // not around when CRX_INSTALLER_DONE fires, Complete() will not be called.
-    registrar_.Add(this,
-                   chrome::NOTIFICATION_CRX_INSTALLER_DONE,
-                   content::Source<CrxInstaller>(crx_installer.get()));
+      // CRX_INSTALLER_DONE will fire when the install completes.  Observe()
+      // will call DelayedDownloadOpened() on this item.  If this DownloadItem
+      // is not around when CRX_INSTALLER_DONE fires, Complete() will not be
+      // called.
+      registrar_.Add(this,
+                     chrome::NOTIFICATION_CRX_INSTALLER_DONE,
+                     content::Source<CrxInstaller>(crx_installer.get()));
 
-    crx_installers_[crx_installer.get()] = item->GetId();
-    // The status text and percent complete indicator will change now
-    // that we are installing a CRX.  Update observers so that they pick
-    // up the change.
-    item->UpdateObservers();
-    return false;
+      crx_installers_[crx_installer.get()] = item->GetId();
+      // The status text and percent complete indicator will change now
+      // that we are installing a CRX.  Update observers so that they pick
+      // up the change.
+      item->UpdateObservers();
+      return false;
+    }
   }
 
   if (ShouldOpenWithWebIntents(item)) {
     OpenWithWebIntent(item);
     item->DelayedDownloadOpened();
     return false;
   }
 
   return true;
 }
@@ skipping 404 matching lines @@
     const DownloadItem& download,
     const DownloadStateInfo& state,
     bool visited_referrer_before) {
   DCHECK(BrowserThread::CurrentlyOn(BrowserThread::UI));
 
   // Anything loaded directly from the address bar is OK.
   if (state.transition_type & content::PAGE_TRANSITION_FROM_ADDRESS_BAR)
     return false;
 
   // Extensions that are not from the gallery are considered dangerous.
-  if (IsExtensionDownload(&download)) {
-    ExtensionService* service = profile_->GetExtensionService();
-    if (!service || !service->IsDownloadFromGallery(download.GetURL(),
-                                                    download.GetReferrerUrl()))
-      return true;
+  // When off-store install is disabled we skip this, since in this case, we
+  // will not offer to install the extension.
+  if (extensions::switch_utils::IsOffStoreInstallEnabled() &&
+      IsExtensionDownload(&download) &&
+      !WebstoreInstaller::GetAssociatedApproval(download)) {
+    return true;
   }
 
   // Anything the user has marked auto-open is OK if it's user-initiated.
   if (ShouldOpenFileBasedOnExtension(state.suggested_path) &&
       state.has_user_gesture)
     return false;
 
   // "Allow on user gesture" is OK when we have a user gesture and the hosting
   // page has been visited before today.
   download_util::DownloadDangerLevel danger_level =
       download_util::GetFileDangerLevel(state.suggested_path.BaseName());
   if (danger_level == download_util::AllowOnUserGesture)
     return !state.has_user_gesture || !visited_referrer_before;
 
   return danger_level == download_util::Dangerous;
 }
 
 void ChromeDownloadManagerDelegate::OnItemAddedToPersistentStore(
     int32 download_id, int64 db_handle) {
   // It's not immediately obvious, but HistoryBackend::CreateDownload() can
   // call this function with an invalid |db_handle|. For instance, this can
   // happen when the history database is offline. We cannot have multiple
   // DownloadItems with the same invalid db_handle, so we need to assign a
   // unique |db_handle| here.
   if (db_handle == DownloadItem::kUninitializedHandle)
     db_handle = download_history_->GetNextFakeDbHandle();
   download_manager_->OnItemAddedToPersistentStore(download_id, db_handle);
 }