Index: content/browser/fileapi/fileapi_message_filter.cc |
diff --git a/content/browser/fileapi/fileapi_message_filter.cc b/content/browser/fileapi/fileapi_message_filter.cc |
index da6581b5d4d5a24abe3222a91f9a8374afa1a445..1165e78ca134a3776953a8bdfaf4ee92199894ac 100644 |
--- a/content/browser/fileapi/fileapi_message_filter.cc |
+++ b/content/browser/fileapi/fileapi_message_filter.cc |
@@ -523,6 +523,8 @@ void FileAPIMessageFilter::OnStartBuildingBlob(const GURL& url) { |
void FileAPIMessageFilter::OnAppendBlobDataItem( |
const GURL& url, const BlobData::Item& item) { |
DCHECK(BrowserThread::CurrentlyOn(BrowserThread::IO)); |
+ // TODO(kinuko): We must check permission in FILESYSTEM_FILE cases too. |
+ // http://crbug.com/141827 |
if (item.type == BlobData::TYPE_FILE && |
!ChildProcessSecurityPolicyImpl::GetInstance()->CanReadFile( |
process_id_, item.file_path)) { |