Add hooks to content to request permission to connect to the PPAPI broker.

webkit/plugins/ppapi/ppb_broker_impl.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef WEBKIT_PLUGINS_PPAPI_PPB_BROKER_IMPL_H_
 #define WEBKIT_PLUGINS_PPAPI_PPB_BROKER_IMPL_H_
 
 #include "base/basictypes.h"
 #include "base/compiler_specific.h"
 #include "base/memory/weak_ptr.h"
@@ skipping 18 matching lines @@
   virtual ~PPB_Broker_Impl();
 
   // Resource override.
   virtual ::ppapi::thunk::PPB_Broker_API* AsPPB_Broker_API() OVERRIDE;
 
   // PPB_BrokerTrusted implementation.
   virtual int32_t Connect(
       scoped_refptr< ::ppapi::TrackedCallback> connect_callback) OVERRIDE;
   virtual int32_t GetHandle(int32_t* handle) OVERRIDE;
 
+  // Returns the URL of the document this plug-in runs in. This is necessary to

[ddorwin, 2012/08/12 22:51:16]

This can also be faked in a compromised renderer.

+  // decide whether to grant access to the PPAPI broker.
+  GURL GetDocumentUrl();
+
   void BrokerConnected(int32_t handle, int32_t result);
 
  private:
   // PluginDelegate ppapi broker object.
   // We don't own this pointer but are responsible for calling Disconnect on it.
   PluginDelegate::Broker* broker_;
 
   // Callback invoked from BrokerConnected.
   scoped_refptr< ::ppapi::TrackedCallback> connect_callback_;
 
   // Pipe handle for the plugin instance to use to communicate with the broker.
   // Never owned by this object.
   int32_t pipe_handle_;
 
   DISALLOW_COPY_AND_ASSIGN(PPB_Broker_Impl);
 };
 
 }  // namespace ppapi
 }  // namespace webkit
 
 #endif  // WEBKIT_PLUGINS_PPAPI_PPB_BROKER_IMPL_H_