| Index: content/browser/fileapi/fileapi_message_filter.cc
|
| diff --git a/content/browser/fileapi/fileapi_message_filter.cc b/content/browser/fileapi/fileapi_message_filter.cc
|
| index da6581b5d4d5a24abe3222a91f9a8374afa1a445..1165e78ca134a3776953a8bdfaf4ee92199894ac 100644
|
| --- a/content/browser/fileapi/fileapi_message_filter.cc
|
| +++ b/content/browser/fileapi/fileapi_message_filter.cc
|
| @@ -523,6 +523,8 @@ void FileAPIMessageFilter::OnStartBuildingBlob(const GURL& url) {
|
| void FileAPIMessageFilter::OnAppendBlobDataItem(
|
| const GURL& url, const BlobData::Item& item) {
|
| DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO));
|
| + // TODO(kinuko): We must check permission in FILESYSTEM_FILE cases too.
|
| + // http://crbug.com/141827
|
| if (item.type == BlobData::TYPE_FILE &&
|
| !ChildProcessSecurityPolicyImpl::GetInstance()->CanReadFile(
|
| process_id_, item.file_path)) {
|
|
|